- detect-secrets scan > .secrets.baseline
- set github setting
- allow auto-merge
- automatically delete head branches
- set github branch protection rules:
- require a pull request before merging
- require status checks to pass
- pre-commit
- valid pr titles
- sync
- set github secrets for actions and dependabot
- AUTO_MERGE_TOKEN
- GH_TOKEN