GitHub has an article about it

https://docs.github.com/en/actions/reference/security/secure...