Read-only deploy keys
Blog post from GitHub
GitHub now allows users to create deploy keys with read-only access, enhancing security by restricting write access unless specifically permitted. Deploy keys, which are SSH keys stored on a server to grant access to a single GitHub repository, are commonly used for cloning repositories during deployments or continuous integration processes. Previously, deploy keys automatically included both read and write access, which could be undesirable in certain scenarios. With the new update, deploy keys created on GitHub.com will default to read-only, although users can opt to grant write access by selecting the "Allow write access" option during the creation process. The access level can also be specified when creating deploy keys via the API.