Weekly read-only audit of your GitHub repos: leaked secrets, vulnerable deps, branch protection and workflows