GitHub · GH-100
Secret scanning, code scanning, and configurations
GH-100 · Lesson 11 of 17 · 1:30:21
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-100 exam (GitHub Administration). In this lesson: GitHub Secret Protection and GitHub Code Security, licensing by active committer, secret scanning alerts and custom patterns, push protection and delegated bypass, CodeQL default and advanced setup, security configurations and global settings, and rolling features out at scale. Includes three original practice questions.
Preview the topics
- Contoso wants developers who hit push protection to ask the security team for approval, instead of bypassing the block on their own. What should be enabled?
- Contoso’s dealer portal needs custom build steps, with private build tools, before CodeQL can analyze it, and the team wants full control of the analysis workflow. Which setup fits?
- Contoso enabled GitHub Secret Protection on two hundred private repositories. How is its license usage counted?