Organization Management

• Keep all code related to our projects in the organization instead of personal GitHub repositories.
• Regularly revoke access from people that are no longer in the organization for security.
• Use Psono for keeping passwords, keys, etc.

Access management

• Give only as much access as needed. Do not give write access to repositories if a person does not need them. It’s OK to have read access to every repo for org members.
• Use GitHub organization teams to give access to whole teams instead of adding one-by-one.
• Invite new members to teams directly.