GitHub Advanced Security

The exam tests your ability to use GitHub Advanced Security to protect code, secrets and dependencies throughout the software development lifecycle. Among other things, you are assessed on configuring Secret Protection, supply chain security and Code Security, as well as administering GitHub Security suites. The exam also covers prioritizing and remediating alerts, security policies, workflows and automation, with a focus on preventing problems early in the development process. Passing the exam demonstrates that you can apply GitHub Advanced Security systematically in your organization's development and security work.

Exam focus areas:

• Describe GitHub Security suites, features, and ecosystem (15–20%)
• Configure and use Secret Protection (formerly secret scanning) (15–20%)
• Configure and use supply chain security (formerly Dependabot/Dependency Review) (15–20%)
• Configure and use Code Security (formerly Code Scanning with CodeQL) (10–15%)
• Security operations: best practices, prioritization, and remediation (15–20%)
• GitHub Security suites administration (10–15%)