You can combine this with a policy that blocks third party actions from being used across your organization. https://docs.github.com/en/organizations/managing-organizati...