diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml
new file mode 100644
index 00000000..66efc094
--- /dev/null
+++ b/.github/FUNDING.yml
@@ -0,0 +1,2 @@
+github: [LogicalError]
+patreon: logicalerror
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..3a626c3a
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md
new file mode 100644
index 00000000..7d00a135
--- /dev/null
+++ b/.github/pull_request_template.md
@@ -0,0 +1,8 @@
+**What this changes and why**
+
+**Fixes** #
+
+**How it was tested** (scene, steps, Unity version)
+
+- [ ] Compiles without warnings, in the editor and in a player build
+- [ ] Tests added or updated, and the EditMode tests pass
diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index b911a12a..3e77defc 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -1,5 +1,8 @@
 name: Checks
 
+permissions:
+  contents: read
+
 on:
   pull_request:
   push:
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 698043ea..674ce18a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -47,6 +47,8 @@ almost always belongs in the CSG, not in a special case in the generator.
 * New features should work for any level someone builds by hand, not only for one kind of content, and be reachable
   from the editor's UI.
 
+Pull requests are squash-merged into a single commit, which keeps you as its author.
+
 ## Tests
 
 The tests are in `Core/Tests`, `Components/Tests` and `Editor/Tests`. With Chisel embedded in your project's
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..44780d29
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,5 @@
+# Security
+
+Please report security problems privately, through **Report a vulnerability** on the [Security tab](https://github.com/RadicalCSG/com.chisel/security) of this repository, rather than in a public issue.
+
+Fixes go into the newest version.
diff --git a/SECURITY.md.meta b/SECURITY.md.meta
new file mode 100644
index 00000000..19970795
--- /dev/null
+++ b/SECURITY.md.meta
@@ -0,0 +1,7 @@
+fileFormatVersion: 2
+guid: 634d0d5afa5142f7a2d13e8d8498c6e2
+TextScriptImporter:
+  externalObjects: {}
+  userData: 
+  assetBundleName: 
+  assetBundleVariant: