GitHub · GH-500
Secret alerts, bypass, and custom patterns
GH-500 · Lesson 6 of 16 · 38:08
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the GH-500 exam (GitHub Advanced Security). In this lesson: the secret alert lifecycle and its resolutions, remediating a leaked secret, dismissing with care, delegated bypass with requests and exemptions, alert recipients, exclusions with secret_scanning.yml, and custom patterns with dry runs, publication, push protection, and limits. Includes three original practice questions.
Preview the topics
- A developer removed a leaked storage key from the repository with a new commit, and asks why the alert is still open. What should the team do next?
- Contoso wants contractors to stop bypassing push protection on their own, while a migration service account must keep pushing without being blocked. What should the security team configure?
- Contoso wrote a regular expression for its CBK tokens and wants to block them at push time across the organization, with as few false positives as possible. What is the right order?