Resources to help you get GitHub certified ✨
Prepare for GitHub Certification exams!
GitHub Advance Security Compliance Action
Workshop and getting started content for organizations using GitHub
Manage a uniform team of security managers for every organization in your enterprise
Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts
Dismiss GitHub Code Scanning alerts from SARIF suppression data
Agentic AI for DevSecOps: Transforming Security with GitHub Advanced Security and GitHub Copilot. GitHub Advanced Security - DevSecOps Guidelines - Unified visibility into DevOps security posture. DevSecOps E2E Demos.
Optimize the utilization of GHAS licenses in an enterprise (or organization)
A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow
Put the power of CodeQL in your pocket, take it with you to any CI 🚀
Gather SBOMs from the GitHub Dependency Graph and report matches with packages, such as malware advisories from the GitHub Advisory Database or PURLs of your choice
Repository for my GitHub Universe 2023 session SEC1808M
Managing GitHub Advanced Security (GHAS) Controls at Scale
A secret scanner wrapper to aggregate results across multiple secret scanning tools
A gh CLI extension to interact with secret scanning alerts for a GHEC or GHES 3.7+ enterprise, organization, or repository
lists code scanning SARIF reports for a given GitHub hosted repository and allows the user to identify and download these reports.
Add a description, image, and links to the ghas topic page so that developers can more easily learn about it.
To associate your repository with the ghas topic, visit your repo's landing page and select "manage topics."