Skip to content
SkillSpring

Cheat sheet

GitHub Advanced Security Course

Code scanning, secret scanning, Dependabot and security policies on GitHub.

Study & career skills · Intermediate · English · 125 videos · 3 h 4 min · videos by ExamPro

By the end you should be able to

  1. Configure secret and code scanning
  2. Manage dependencies with Dependabot
  3. Set security policies for an organisation

Watch in this order

  1. 1.Course Format Disclaimer: GitHub Advanced Security1 min
  2. 2.What is GitHub Foundations?: GitHub Advanced Security1 min
  3. 3.Who is GHAS Certification for?: GitHub Advanced Security1 min
  4. 4.GitHub Certification Roadmap: GitHub Advanced Security1 min
  5. 5.GitHub Certification Roadmap for Security: GitHub Advanced Security1 min
  6. 6.How Much Time is Needed to Study?1 min
  7. 7.How to Pass the GitHub Advanced Security Exam1 min
  8. 8.GHAS Exam Guide1 min
  9. 9.Where to Take the GHAS Exam1 min
  10. 10.How does Exam Grading Work?1 min
  11. 11.Types of Questions in GHAS Exam1 min
  12. 12.Unscored Questions in GHAS Exam1 min
  13. 13.GHAS Exam Duration1 min
  14. 14.Introduction to Git1 min
  15. 15.GitHub Overview: GitHub Advanced Security1 min
  16. 16.Git Terms (Part 1)1 min
  17. 17.Git Terms (Part 2)1 min
  18. 18.Git Terms (Part 3)1 min
  19. 19.Git Terms (Part 4)1 min
  20. 20.Overview of GitHub Repositories1 min
  21. 21.Understanding Git Commits1 min
  22. 22.Git Branches Overview: GitHub Advanced Security1 min
  23. 23.Git Remote: Upstream vs. Downstream1 min
  24. 24.Overview of GitHub Advanced Security: GitHub Advanced Security1 min
  25. 25.GHAS Enabled Plans (Part 1)1 min
  26. 26.GHAS Enabled Plans (Part 2)1 min
  27. 27.GitHub Security (Part 1)1 min
  28. 28.GitHub Security (Part 2)1 min
  29. 29.Practical Use Cases for GHAS1 min
  30. 30.Key Components of GHAS1 min
  31. 31.Taking Action on Security Alerts2 min
  32. 32.How to Enable GHAS1 min
  33. 33.How to Enable GHAS Automatically1 min
  34. 34.Which GHAS do you have?1 min
  35. 35.GHAS Introduction Follow Along3 min
  36. 36.GHAS Introduction Follow Along 28 min
  37. 37.What is a Security Vulnerability?1 min
  38. 38.Types of Security Vulnerabilities1 min
  39. 39.Understanding 0-Day Vulnerabilities1 min
  40. 40.Most Common Security Vulnerabilities1 min
  41. 41.Finding Vulnerabilities in GitHub1 min
  42. 42.Overview of GitHub Advisory Database1 min
  43. 43.Introduction to Secret Scanning1 min
  44. 44.Secret Scanning Locations1 min
  45. 45.How to Enable Secret Scanning1 min
  46. 46.Secret Scanning Partner Program1 min
  47. 47.Use Case for the Partner Program1 min
  48. 48.Getting Started with a Secret Scan1 min
  49. 49.Secret Scan Durations1 min
  50. 50.Secret Scanning Follow Along3 min
  51. 51.Setting Ignore Rules in Secret Scanning Follow Along3 min
  52. 52.Configuring Secret Scanning Notifications Follow Along4 min
  53. 53.Popularity of Open Source1 min
  54. 54.Common Problems in Open Source Maintenance1 min
  55. 55.Dependency Graph for Open Source1 min
  56. 56.Dependency Graph Examples1 min
  57. 57.Overview of Dependabot1 min
  58. 58.Dependabot Use Case Example1 min
  59. 59.Key Features of Dependabot1 min
  60. 60.How to Enable Dependabot1 min
  61. 61.Dependabot Licensing for Private Repositories1 min
  62. 62.Workflow for Dependabot in Private Repositories1 min
  63. 63.Triaging Vulnerabilities with Dependabot1 min
  64. 64.Limitations of Dependabot1 min
  65. 65.Dependabot Follow Along (Part 1)6 min
  66. 66.Dependabot Follow Along (Part 2)5 min
  67. 67.Introduction to Code Scanning1 min
  68. 68.Supported Repositories for Code Scanning1 min
  69. 69.How Code Scanning Works1 min
  70. 70.Starting a Code Scan1 min
  71. 71.How to Enable Code Scanning in GitHub1 min
  72. 72.Code Scanning Setup Options1 min
  73. 73.Code Scanning with Third-Party Partners1 min
  74. 74.Where to Implement Code Scanning1 min
  75. 75.Code Scanning Actions1 min
  76. 76.Code Scanning Trigger Types1 min
  77. 77.Code Scanning Follow Along12 min
  78. 78.How to Enable Code Scanning Reminder1 min
  79. 79.Third-Party SARIF Files Overview: GitHub Advanced Security1 min
  80. 80.Uploading Third-Party SARIF Files1 min
  81. 81.Third-Party SARIF File Example1 min
  82. 82.Default Code Scanning in GitHub1 min
  83. 83.Custom Code Scanning in GitHub1 min
  84. 84.Code Language Detection in Code Scanning1 min
  85. 85.CodeQL Database Analysis1 min
  86. 86.CodeQL Query Analysis1 min
  87. 87.CodeQL Overview: GitHub Advanced Security1 min
  88. 88.Types of CodeQL Queries1 min
  89. 89.CodeQL Query Example1 min
  90. 90.CodeQL Queries Deep Dive1 min
  91. 91.Anatomy of a Code Query1 min
  92. 92.Code Query Example1 min
  93. 93.Code Query Suite1 min
  94. 94.Types of Code Query Suites1 min
  95. 95.Interpreting Code Query Findings1 min
  96. 96.Introduction to CodeQL Packs1 min
  97. 97.Types of CodeQL Packs1 min
  98. 98.Code Scanning Workflow1 min
  99. 99.Integrating with CodeQL Partners1 min
  100. 100.Workflow Priority Order1 min
  101. 101.Managing Alerts Workflow1 min
  102. 102.Example of a Security Incident Alert1 min
  103. 103.CodeQL Follow Along23 min
  104. 104.Software Development Lifecycle (SDLC)1 min
  105. 105.Restricting Access in SDLC1 min
  106. 106.SDLC Security Overview: GitHub Advanced Security1 min
  107. 107.Implementing Security Policies in SDLC1 min
  108. 108.Secret Scanning in the SDLC1 min
  109. 109.Optimizing SDLC Security Workflow1 min
  110. 110.Types of Vulnerabilities in SDLC1 min
  111. 111.GitHub Advisory Database1 min
  112. 112.Developer Roles and Responsibilities in Security1 min
  113. 113.Security Team Roles and Responsibilities1 min
  114. 114.Admin Roles and Responsibilities in Security1 min
  115. 115.Additional Roles and Responsibilities in Security1 min
  116. 116.Notifying Responsible Parties About Security Issues1 min
  117. 117.Triage Workflow Based on Risk Ratings1 min
  118. 118.Should I Purchase a GHAS License?1 min
  119. 119.How to Enable GHAS in GitHub1 min
  120. 120.Levels of Enablement1 min
  121. 121.Levels of Access to Alerts1 min
  122. 122.Example of Levels of Access to Alerts1 min
  123. 123.Enterprise Security Overview: GitHub Advanced Security1 min
  124. 124.Configuring GHAS Logging for Enterprises1 min
  125. 125.API Endpoints for Security in GHAS1 min

Before you start: GitHub Foundations

skillspring · Videos belong to ExamPro and play from YouTube. Printed for personal study.