GitHub Advanced Security Course
Code scanning, secret scanning, Dependabot and security policies on GitHub.
- Study & career skills
- Intermediate
- English
- 125 videos · 2.5 h
- Updated Feb 2025
Videos by ExamPro · 5.4K views on this playlist
About this course
ExamPro's GitHub Advanced Security course for the GHAS certification: secret scanning, code scanning with CodeQL, Dependabot and dependency review, security advisories and how to roll these out across an organisation.
What you'll be able to do
- 1Configure secret and code scanning
- 2Manage dependencies with Dependabot
- 3Set security policies for an organisation
Videos
Start with video 1 →MODULE 1Videos 1–1010 lessons · 10 min
- Course Format Disclaimer: GitHub Advanced Security1 min
- What is GitHub Foundations?: GitHub Advanced Security1 min
- Who is GHAS Certification for?: GitHub Advanced Security1 min
- GitHub Certification Roadmap: GitHub Advanced Security1 min
- GitHub Certification Roadmap for Security: GitHub Advanced Security1 min
- How Much Time is Needed to Study?1 min
- How to Pass the GitHub Advanced Security Exam1 min
- GHAS Exam Guide1 min
- Where to Take the GHAS Exam1 min
- How does Exam Grading Work?1 min
MODULE 2Videos 11–2010 lessons · 10 min
MODULE 3Videos 21–3010 lessons · 10 min
- Understanding Git Commits1 min
- Git Branches Overview: GitHub Advanced Security1 min
- Git Remote: Upstream vs. Downstream1 min
- Overview of GitHub Advanced Security: GitHub Advanced Security1 min
- GHAS Enabled Plans (Part 1)1 min
- GHAS Enabled Plans (Part 2)1 min
- GitHub Security (Part 1)1 min
- GitHub Security (Part 2)1 min
- Practical Use Cases for GHAS1 min
- Key Components of GHAS1 min
MODULE 4Videos 31–4010 lessons · 20 min
- Taking Action on Security Alerts2 min
- How to Enable GHAS1 min
- How to Enable GHAS Automatically1 min
- Which GHAS do you have?1 min
- GHAS Introduction Follow Along3 min
- GHAS Introduction Follow Along 28 min
- What is a Security Vulnerability?1 min
- Types of Security Vulnerabilities1 min
- Understanding 0-Day Vulnerabilities1 min
- Most Common Security Vulnerabilities1 min
MODULE 5Videos 41–5010 lessons · 12 min
- Finding Vulnerabilities in GitHub1 min
- Overview of GitHub Advisory Database1 min
- Introduction to Secret Scanning1 min
- Secret Scanning Locations1 min
- How to Enable Secret Scanning1 min
- Secret Scanning Partner Program1 min
- Use Case for the Partner Program1 min
- Getting Started with a Secret Scan1 min
- Secret Scan Durations1 min
- Secret Scanning Follow Along3 min
MODULE 6Videos 51–6010 lessons · 15 min
- Setting Ignore Rules in Secret Scanning Follow Along3 min
- Configuring Secret Scanning Notifications Follow Along4 min
- Popularity of Open Source1 min
- Common Problems in Open Source Maintenance1 min
- Dependency Graph for Open Source1 min
- Dependency Graph Examples1 min
- Overview of Dependabot1 min
- Dependabot Use Case Example1 min
- Key Features of Dependabot1 min
- How to Enable Dependabot1 min
MODULE 7Videos 61–7010 lessons · 19 min
- Dependabot Licensing for Private Repositories1 min
- Workflow for Dependabot in Private Repositories1 min
- Triaging Vulnerabilities with Dependabot1 min
- Limitations of Dependabot1 min
- Dependabot Follow Along (Part 1)6 min
- Dependabot Follow Along (Part 2)5 min
- Introduction to Code Scanning1 min
- Supported Repositories for Code Scanning1 min
- How Code Scanning Works1 min
- Starting a Code Scan1 min
MODULE 8Videos 71–8010 lessons · 21 min
- How to Enable Code Scanning in GitHub1 min
- Code Scanning Setup Options1 min
- Code Scanning with Third-Party Partners1 min
- Where to Implement Code Scanning1 min
- Code Scanning Actions1 min
- Code Scanning Trigger Types1 min
- Code Scanning Follow Along12 min
- How to Enable Code Scanning Reminder1 min
- Third-Party SARIF Files Overview: GitHub Advanced Security1 min
- Uploading Third-Party SARIF Files1 min
MODULE 9Videos 81–9010 lessons · 10 min
- Third-Party SARIF File Example1 min
- Default Code Scanning in GitHub1 min
- Custom Code Scanning in GitHub1 min
- Code Language Detection in Code Scanning1 min
- CodeQL Database Analysis1 min
- CodeQL Query Analysis1 min
- CodeQL Overview: GitHub Advanced Security1 min
- Types of CodeQL Queries1 min
- CodeQL Query Example1 min
- CodeQL Queries Deep Dive1 min
MODULE 10Videos 91–10010 lessons · 10 min
MODULE 11Videos 101–11010 lessons · 32 min
- Managing Alerts Workflow1 min
- Example of a Security Incident Alert1 min
- CodeQL Follow Along23 min
- Software Development Lifecycle (SDLC)1 min
- Restricting Access in SDLC1 min
- SDLC Security Overview: GitHub Advanced Security1 min
- Implementing Security Policies in SDLC1 min
- Secret Scanning in the SDLC1 min
- Optimizing SDLC Security Workflow1 min
- Types of Vulnerabilities in SDLC1 min
MODULE 12Videos 111–12010 lessons · 10 min
- GitHub Advisory Database1 min
- Developer Roles and Responsibilities in Security1 min
- Security Team Roles and Responsibilities1 min
- Admin Roles and Responsibilities in Security1 min
- Additional Roles and Responsibilities in Security1 min
- Notifying Responsible Parties About Security Issues1 min
- Triage Workflow Based on Risk Ratings1 min
- Should I Purchase a GHAS License?1 min
- How to Enable GHAS in GitHub1 min
- Levels of Enablement1 min
MODULE 13Videos 121–1255 lessons · 5 min
- Before you start
- GitHub Foundations
- Accessibility
- YouTube captions where the creator provides them · Keyboard-accessible player · Notes and bookmarks
Where these videos come from
Every lesson plays the original video from ExamPro with YouTube's own player, so views and credit stay with the creator. We picked this playlist because it's complete, in order, and recently updated. SkillSpring adds progress tracking, notes, bookmarks and focus mode around it.
Playlist: “GitHub Advanced Security Course” · 125 videos · last updated Feb 2025. Open on YouTube