Document procedure or tips for handling spam contributions on GitHub repositories

[kingcomma]

As a maintainer of an open source GitHub repository, I want guidance on how I should respond to spam or disconcerting contributions (comments, issues, pull requests, etc) from unknown users. Who, if anyone, should be notified of concerning activity? What moderation tools are recommended? Should the user be reported to GitHub? Etc.

Background

Multiple 18F teams have experienced these types of contributions. Without a documented procedure, these teams are left to make their own decisions about how to respond on an ad-hoc basis. This new content would ideally systematize future responses.

Pages

Suggest adding this to the existing GitHub page, potentially in the "tips" section: https://handbook.tts.gsa.gov/tools/github/#tips