My go-to is adding unit tests or similar to existing projects that didn't have good coverage when originally written. It's effectively completely safe to do (only adding tests, not touching application code) and is nice to "pin" our existing functionality.