GitHub Security Lab recommends six free settings for maintainers: adding a SECURITY.md file, enabling private vulnerability reporting, activating secret scanning with push protection, and turning on Dependabot, code scanning, and branch protection rules.