GitHub · GH-500
Push protection and validity checks
GH-500 · Lesson 5 of 16 · 31:52
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-500 exam (GitHub Advanced Security). In this lesson: how push protection blocks secrets before they land, push protection for repositories and for users, bypass reasons and the alerts they create, the ruleset rule that blocks merges until secret alerts are resolved, and validity checks with the default and generic alert lists. Includes three original practice questions.
Preview the topics
- A Contoso developer edits a configuration file in the GitHub web interface and pastes a payment provider key, on a repository with push protection enabled. What happens?
- To get past a block, a developer chose I’ll fix it later for a database password. What does GitHub do?
- Contoso has 300 open secret alerts and two days to act. Which alerts should the team fix first?