I enjoyed going back and looking through the instrumentation of our processes and being able to show the effectiveness of the implementation.

https://blog.pypi.org/posts/2023-08-17-github-token-scanning-for-public-repos/