GitHub is part of the engineering control plane. It controls source code, CI/CD workflows, secrets, packages, release automation, infrastructure-as-code, and production deployment paths.

This guide is written as an implementation runbook.

For each control, you will see:


Control objective
Exact GitHub setting
What to select
Validation
Evidence...