GitHub · GH-100
Secrets and external vaults
GH-100 · Lesson 15 of 17 · 2:08:30
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-100 exam (GitHub Administration). In this lesson: Actions secrets at the organization, repository, and environment levels, access policies and precedence, limits, managing secrets with GitHub CLI and the REST API, and OpenID Connect with HashiCorp Vault, Azure Key Vault, and AWS. Includes three original practice questions.
Preview the topics
- Contoso’s production database password is an organization secret available to all repositories, contractor repositories included, while only the three billing repositories need it. What should the owner change?
- Contoso wants its deployment workflows to read database passwords from HashiCorp Vault, without storing any Vault token in GitHub. What fits?
- Contoso’s production deployment secret must only reach jobs that the release managers approved. Where should it live?