GitHub Advanced Security (GH-500)
Identifying and Fixing Security Vulnerabilities in the Development Process—The Official Microsoft Training Course
.svg)
Machine Learning Engineer
GitHub Advanced Security enhances code protection throughout the entire development lifecycle. As an add-on to GitHub Enterprise, it offers features such as secret scanning, code scanning, and dependency management for private repositories.
1. Introduction to GitHub Advanced Security
This module helps you become familiar with GitHub's advanced security features (GHAS) and best practices. In the process, you'll identify critical areas where security vulnerabilities need to be addressed.
2. Configure Dependabot security updates in your GitHub repository
Manage your dependencies with GitHub Dependabot.
3. Configure and use the scanning feature for sensitive data in your GitHub repository
Understand how scanning for confidential data works so you can configure and use it efficiently.
4. Configure code scanning on GitHub
This module introduces you to code scanning and its features. You'll learn how to implement code scanning using CodeQL, third-party tools, and GitHub Actions.
5. Identify security vulnerabilities in your codebase using CodeQL
In this module, you'll learn about CodeQL and how to use it to analyze the code in your GitHub repository and identify security vulnerabilities.
6. Code Scanning with GitHub CodeQL
Learn how to use CodeQL, a powerful static analysis tool, for code scanning on GitHub.
7. GitHub Administration for GitHub Advanced Security
Understand where GitHub Advanced Security fits into your software development lifecycle and how you can enable and implement it in your organization.
8. Manage sensitive data and security policies within GitHub
Familiarize yourself with GitHub's basic security tools, which prepare repositories for secure development and an industry-standard response to threats.
Requirements:
- A GitHub account
- A Basic Understanding of the Fundamentals of GitHub
- Understand GitHub's advanced security features
- Understand, apply, and evaluate these features in your own GitHub environment
This course consists of antraining is led by an instructor who provides live guidance to participants. Theory and practice are taught through live demonstrations and hands-on exercises. The course uses the video conferencing software Zoom.
DevOps Engineers, Solution Architects, administrators
.svg)