GitHub Workflow

What is the typical workflow between development machine and production server when using GitHub?

I typically work alone on small side projects, and so far I've set up private repos on my servers for each project. However, I want to learn to use GitHub on my new projects. Articles are surprisingly difficult to find -- most of them refer to private repos or defer to Forge or another service.

From what I gather, the cleanest way is to open a route on the production server, and have GitHub post to it when a webhook is triggered on a push to the master branch from development machine to GitHub.

Is this the recommended way? Are there any security risks to this? How does Forge do it? What's your recommended workflow with GitHub? Any relevant articles I can learn from?

So many questions! Thanks in advance.