GitHub · GH-500
Governance, roles, and automation
GH-500 · Lesson 16 of 16 · 2:07:12
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-500 exam (GitHub Advanced Security). In this lesson: enterprise policies and organization rulesets, enforcement boundaries, bypass lists, and exceptions, the roles of owners, security managers, administrators, and developers, fine-grained permissions for alerts, approved CodeQL workflows, and automation with the REST API and webhooks. Includes three original practice questions.
Preview the topics
- Contoso’s enterprise owners want to prevent the acquired fintech’s organization from enabling Code Security until licenses are budgeted, while other organizations keep it. Where is this controlled?
- Contoso wants its QA engineers to dismiss code scanning alerts in test repositories, but never to delete them, and without becoming administrators. What should an owner create?
- When the 200 acquired repositories arrive, Contoso wants a script to apply its standard security configuration to all of them, and log the result. What should the script use?