The software you depend on doesn't need to be hard to keep up with. In fact, there are many built-in tools in GitHub ready to aid in keeping your projects secure.
https://github.blog/2022-04-28-best-practices-to-keep-your-projects-secure-on-github/

https://twitter.com/github/status/1519739228581773316