DevOps, Git & Automation
GH-500 GitHub Advanced Security
Secure code with GitHub Advanced Security.
1 dayAdvanced8 modulesGH-500
About this course
Secure code with GitHub Advanced Security. You will configure Dependabot updates, secret scanning and code scanning, find vulnerabilities with CodeQL, and manage security policies and access across repositories.
Curriculum
8 modules
- Define GHAS and the importance of its integral features
- How to utilize GHAS to get the most impact
- Understand GHAS and its role in the security ecosystem
- Module assessment
- Manage your dependencies on GitHub
- Dependabot alerts
- Dependabot security updates
- Manage Dependabot notifications and reports
- Dependency review
- Module assessment
- What is secret scanning?
- Configure secret scanning
- Use secret scanning
- Module assessment
- What is code scanning?
- Enable code scanning with third party tools
- Configure code scanning
- Configure code scanning exercise
- Module assessment
- Prepare a database for CodeQL
- Run CodeQL in a database
- Understand CodeQL results
- Troubleshoot CodeQL results
- Module assessment
- What is CodeQL?
- How does CodeQL analyze code?
- What is QL?
- Code scanning and CodeQL
- Customize your code scanning workflow with CodeQL - Part 1
- Customize your code scanning workflow with CodeQL - Part 2
- Use the CodeQL CLI
- Customize languages and builds for code scanning
- Module assessment
- What is GitHub Advanced Security?
- Enable GitHub Advanced Security
- Manage access to GitHub Advanced Security
- Manage the GitHub Advanced Security features and alerts
- Module assessment
- Setting security policies
- Create and manage repository rulesets
- Reporting and logging
- Module assessment
Who it's for
Developers, security engineers and DevOps teams.
Before you start
- Basic understanding of GitHub fundamentals
Related courses
More in DevOps, Git & Automation →IntermediateAZ-2001T00
AZ-2001T00 Implement security through a pipeline using Azure DevOps
DevOps, Git & Automation
View course →IntermediateAZ-2006
AZ-2006 Automate Azure Load Testing by using GitHub Actions
DevOps, Git & Automation
View course →FoundationAZ-2008
AZ-2008 DevOps Foundations: The Core Principles and Practices
DevOps, Git & Automation
View course →IntermediateAZ-400T00
AZ-400T00 Design and Implement Microsoft DevOps solutions
DevOps, Git & Automation
View course →Intermediate
Certified Agile Service Manager (CASM)®
DevOps, Git & Automation
View course →Foundation
DevOps Continuous Testing Foundation (CTF)
DevOps, Git & Automation
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.