GitHub Advanced Security GH-500

• Understand GitHub Security Suites and their role in secure software development.
• Configure and use Secret Protection.
• Configure and use Supply Chain Security.
• Configure and use Code Security with CodeQL.
• Apply security operations, prioritization, and remediation practices.
• Administer GitHub Security Suites and security policies.

Module 1: GitHub Advanced Security Part 1 of 2

Introduction to GitHub Advanced Security

• Understand GitHub Advanced Security
• Understand the role of GHAS in the security ecosystem

Configure Dependabot security updates on your GitHub repository

• Configure Dependabot security updates
• Manage dependency and supply chain risks

Configure and use secret scanning in your GitHub repository

• Configure secret scanning
• Identify exposed secrets
• Respond to secret scanning alerts

Configure code scanning on GitHub

• Configure code scanning
• Analyze code security findings
• Manage code scanning results

Module 2: GitHub Advanced Security Part 2 of 2

Identify security vulnerabilities in your codebase by using CodeQL

• Identify vulnerabilities using CodeQL
• Understand CodeQL analysis

Code scanning with GitHub CodeQL

• Configure CodeQL code scanning
• Analyze and manage CodeQL findings
• Remediate security vulnerabilities

GitHub administration for GitHub Advanced Security

• Administer GitHub Advanced Security
• Configure security features and policies
• Manage security settings and permissions

Manage sensitive data and security policies within GitHub

• Manage sensitive data
• Configure security policies
• Manage security controls and governance

1 Day

Certification: GitHub Advanced Security
Exam: GH-500: GitHub Advanced Security
Duration: 100 minutes

• Configuring Dependabot security updates
• Configuring and using secret scanning
• Managing Secret Protection alerts
• Configuring push protection for secrets
• Configuring code scanning with CodeQL
• Reviewing and triaging CodeQL security alerts
• Remediating code vulnerabilities
• Managing dependency and supply chain alerts
• Working with dependency graphs and SBOMs
• Configuring Dependency Review
• Managing GitHub Security Suite policies
• Configuring security roles, permissions, and delegated access
• Managing security alerts and remediation workflows
• Configuring security policies at enterprise, organization, and repository levels

• Administrators
• Developers
• DevOps Engineers
• Solution Architects
• Professionals working with GitHub Advanced Security
• Professionals responsible for securing software development workflows

• Experience using GitHub Advanced Security to secure code, secrets, and dependencies across the software development lifecycle.
• Familiarity with GitHub fundamentals.
• Familiarity with CI/CD.
• Familiarity with secure development concepts.