[MNT] Adapting to Google Open Source Security Rules, Policies, standards

[MatthewMiddlehurst]

Describe the issue

As part of GSoC 2024 NumFOCUS is running a project to enhance the security of open source projects (https://github.com/numfocus/gsoc/issues/470). We have expressed interest in being involved, so this issue is to help track that.

Should the project not go as expected or not find anyone to work on it, we could do some of this outside of the GSoC project.

Suggest a potential alternative/fix

Follow the explanation and examples in https://github.com/numfocus/gsoc/issues/470 to improve the general security of the project.

Additional context

No response