You can give instructions for how to report a security vulnerability in your project by adding a security policy to your repository.| GitHub Docs
GitHub makes extra security features available to customers who purchase GitHub Code Security or GitHub Secret Protection. Some features are enabled for public repositories by default.| GitHub Docs