GitHub Security Cheatsheet
snyk.io