There are free security scan things from GitHub that you can install to your repo that scans and checks for vulnerabilities. GitHub also can verify your releases for you