GitHub already has an EDR. You just have to listen to it
A new open-source tool utilizes GitHub's event stream to detect supply-chain attacks, leveraging behavioral patterns and telemetry to identify potential threats, which could have prevented recent atta