GitHub is not just a source code platform anymore.

For most engineering organizations, GitHub is part identity system, part software supply chain, part CI/CD platform, part secret store, part deployment orchestrator, and part production change-control system.

That means we should secure GitHub...