GitHub Advanced Security (GHAS)

GitHub Advanced Security (GHAS)

1h 20mAdvanced2022-09-27

Authors

Rob Bos

Rob Bos

DevOps Professional, Consultant, Speaker, Microsoft MVP.

Course details

GitHub’s security features let you implement security throughout the development process to prevent issues from happening and protect your projects from becoming the latest news story about leaking customer data. With 80 million active developers, GitHub and Microsoft are on the forefront of new security feature development with a big push after recent US government directives. In this course, instructor Rob Bos covers three main features of GitHub Advanced Security to protect your software projects from having security issues: dependency scanning, secret scanning, and code scanning. Rob shows you how to enable these features and what parts of the development process they work on, and wraps up the course with a look at the security overview feature, which gives you a high-level view of your security status.

Skills covered

Version ControlGitHubSoftware Development ToolsSoftware DevelopmentOne-Off

Concepts

Introduction

  • GitHub Advanced Security
  • General overview of GitHub Advanced Security

Dependency Scanning

  • Overview
  • Dependency graph
  • Dependabot configuration
  • Vulnerable alerts management
  • Automatic security updates
  • GitHub Advisory Database
  • Limitations
  • Troubleshooting

Secret Scanning

  • Secret scanning overview
  • Enabling the feature
  • Push protection
  • Custom patterns
  • Managing alerts

Code Scanning

  • CodeQL overview
  • Set up code scanning
  • Reading the alerts
  • Triaging alerts
  • Configuration
  • Community

Security Overview

  • The security overview
  • Team View
  • Filtering options

Conclusion

  • Next steps
40,000 Toman