Contents:
- Introduction to GitHub Advanced Security to explore GHAS features and best practices for securing repositories throughout the development lifecycle.
- Managing Dependencies with Dependabot to configure automated security updates and maintain secure dependency management.
- Secret Scanning and Protection to detect and prevent exposure of sensitive information by configuring and using secret scanning effectively.
- Implementing Code Scanning with CodeQL to set up code scanning using CodeQL, GitHub Actions, and third-party tools for vulnerability detection.
- Identifying Vulnerabilities with CodeQL to analyse codebases and uncover security risks using advanced static analysis techniques.
- Administering GitHub Advanced Security to enable GHAS across your organisation, manage governance, and integrate security into your SDLC.
- Managing Sensitive Data and Security Policies to apply repository-level security tools and enforce compliance for secure development practices.