GitHub · GH-500
Rolling out security at scale
GH-500 · Lesson 15 of 16 · 1:59:28
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-500 exam (GitHub Advanced Security). In this lesson: enabling the security suites at the enterprise, organization, and repository levels, enabling Code Security, Secret Protection, and supply chain features, the differences between GitHub Enterprise Cloud and GitHub Enterprise Server, default configurations, enforcement, global settings, and a phased rollout. Includes three original practice questions.
Preview the topics
- Some Contoso repositories run tuned advanced CodeQL workflows, and the security team wants default setup everywhere else, without touching those workflows. Which code scanning setting fits?
- Contoso’s enforced default configuration protects every new repository, but a repository transferred in from another organization has no security features. Why?
- Contoso’s Enterprise Server instance has no internet access, and the team wants CodeQL code scanning with up-to-date analysis bundles. What should the administrators set up?