Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
GitHub · GH-500 · FREE COURSE

GH-500 · GitHub Advanced Security

16 video lessons and 140 original practice questions. Follow the course, then put each idea into practice.

YouTube loads only after you press play. Watch on YouTube ↗

Try 5 questions →My learning →

Course chapters

16 lessons
  1. 1The GitHub Security suites3:53 · Lesson video
  2. 2Secure SDLC and security strategies11:06 · Full-course chapter
  3. 3Alerts, responsibilities, and access17:48 · Full-course chapter
  4. 4Enabling Secret Protection25:01 · Full-course chapter
  5. 5Push protection and validity checks31:52 · Full-course chapter
  6. 6Secret alerts, bypass, and custom patterns38:08 · Full-course chapter
  7. 7Dependencies, advisories, and SBOMs53:43 · Full-course chapter
  8. 8Dependabot alerts and security updates1:01:06 · Full-course chapter
  9. 9Dependency review and Dependabot configuration1:08:02 · Full-course chapter
  10. 10Setting up code scanning1:14:53 · Full-course chapter
  11. 11Triage, autofix, and tuning1:22:10 · Full-course chapter
  12. 12Vulnerability context and remediation1:38:48 · Full-course chapter
  13. 13Prioritizing security work at scale1:45:40 · Full-course chapter
  14. 14Custom detection, governance, and shift left1:52:34 · Full-course chapter
  15. 15Rolling out security at scale1:59:28 · Full-course chapter
  16. 16Governance, roles, and automation2:07:12 · Full-course chapter

Practice by domain

Security Suites and Ecosystem6 video practice questions →Secret Protection6 video practice questions →Supply Chain Security9 video practice questions →Code Security6 video practice questions →Security Operations9 video practice questions →Suites Administration6 video practice questions →

Practise the reasoning.

Choose immediate explanations, or complete a mock exam with feedback at the end. The mock questions are also available in everyday practice.

Try 5 questions →Mock exam →

The optional 60-minute timer is a practice setting, not the official exam duration.