GitHub · GH-100
Enterprise policies and security posture
GH-100 · Lesson 8 of 17 · 1:09:00
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-100 exam (GitHub Administration). In this lesson: enterprise policies and how they control organizations, repository management policies, IP allow lists and conditional access, SSH certificate authorities, data protection controls, and a step-by-step security posture review. Includes three original practice questions.
Preview the topics
- Contoso wants every organization’s members to get read as their base permission, and no organization owner should be able to change it. What should the enterprise owner do?
- Contoso enabled an IP allow list for the enterprise, and workflows on standard GitHub-hosted runners can no longer reach private repositories. What’s the fix?
- Contoso now requires SSH certificates for an organization. A build job clones with a deploy key, and a developer pushes over HTTPS with a personal access token. What still works?