Do you set default permissions for all new repositories?

<introEmbed body={<> Using GitHub Webhooks, you can set some default permissions for every new repository inside an organisation. You can use the [repository event](https://docs.github.com/en/developers/webhooks-and-events/webhook-events-and-payloads#repository) to trigger a GitHub action to set the permissions. See the GitHub docs [Permissions API](https://docs.github.com/en/rest/reference/actions#permissions) </>} />

By adding this to your organisation, every new repo will already have the optimal permissions and privileges.