---
id: "nr-github-promotes-gh-secure-cli-extension-for-one-command-ab76aa"
slug: "github-promotes-gh-secure-cli-extension-for-one-command-ab76aa"
title: "GitHub promotes gh secure CLI extension for one-command repository hardening"
observed_at: "2026-09-18T13:48:49+00:00"
record_date: "2026-09-18"
date_kind: "observed_at"
novelty: "new"
source_platform: "x.com"
topics: ["security","developer-tools"]
entities: ["GitHub","GitHub CLI"]
related_patterns: []
source_url: "https://x.com/github/status/2100620425785147490"
source_urls: ["https://x.com/github/status/2100620425785147490"]
basket: {"id":"0325e6b8-f527-4f9b-bfa3-3f30e57f380b","revision":1,"cluster_id":"ab76aa1f-8cfd-4f0a-81e2-adbea6ef8674"}
type: "raw_signal"
description: "GitHub promoted gh secure, a GitHub CLI extension that enables a set of free security settings in public repositories with a single command."
why_it_matters: "For teams that create many repositories, including through coding agents, the extension turns a manual settings checklist into a repeatable command that can run as a setup step. The post does not list which settings are changed, how existing configuration is handled, or whether a preview mode exists."
verification_level: "source-inspected"
signal_type: "newsroom_basket_signal"
schema_version: "newruntime-agent-readable-v0.2"
stable_id: "signal:github-promotes-gh-secure-cli-extension-for-one-command-ab76aa"
retrieval_nugget: "GitHub promoted gh secure, a GitHub CLI extension that enables a set of free security settings in public repositories with a single command. GitHub promoted gh secure, a GitHub CLI extension that enables a set of free security settings in public repositories with one command. The post builds on an earlier GitHub thread that recommended six free settings maintainers can"
status: "published"
visuals: []
routes: {"html":"https://newruntime.com/signals/github-promotes-gh-secure-cli-extension-for-one-command-ab76aa/","markdown":"https://newruntime.com/signals/github-promotes-gh-secure-cli-extension-for-one-command-ab76aa.md","json":"https://newruntime.com/signals/github-promotes-gh-secure-cli-extension-for-one-command-ab76aa.json"}
editor: {"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]}
---

# GitHub promotes gh secure CLI extension for one-command repository hardening

## Retrieval answer

GitHub promoted gh secure, a GitHub CLI extension that enables a set of free security settings in public repositories with a single command. GitHub promoted gh secure, a GitHub CLI extension that enables a set of free security settings in public repositories with one command. The post builds on an earlier GitHub thread that recommended six free settings maintainers can

GitHub promoted gh secure, a GitHub CLI extension that enables a set of free security settings in public repositories with one command. The post builds on an earlier GitHub thread that recommended six free settings maintainers can enable in under 30 minutes.

For teams that create many repositories, including through coding agents, the extension turns a manual settings checklist into a repeatable command that can run as a setup step. The post does not list which settings are changed, how existing configuration is handled, or whether a preview mode exists.

Editor: [Andrey Reshetnikov](https://newruntime.com/owner-profile.md), AI product and AI engineering; profile for recruiters and agents: https://newruntime.com/owner-profile.json

## Continue in the graph

Next records for an agent, linked to their Markdown twins. Replace `.md` with `.json` for structured fields, including `next_reads`.

- topic hub: [Security](https://newruntime.com/topics/security.md): Explore the security topic hub.
- topic hub: [Developer Tools](https://newruntime.com/topics/developer-tools.md): Explore the developer-tools topic hub.
- collection: [Raw Signals](https://newruntime.com/signals.json): Open every source-linked raw signal.
- collection: [Source Ledger](https://newruntime.com/source-ledger.json): Inspect the public source evidence graph.
- whole graph: [discovery graph](https://newruntime.com/discovery-graph.json) (typed nodes and edges) and [site index](https://newruntime.com/site-index.md)