Introduction

Completed

GitHub recognizes that in our world today, software security is more critical than ever and offers extra security features available to customers under an Advanced Security license. Some of these features are also enabled by default for public repositories on GitHub.com.

Imagine you're a security engineer responsible for managing application security in a large organization that has thousands of repositories. With such a large software ecosystem, application security is a priority in your company, which recently decided to purchase GitHub Advanced Security licenses as part of an organization-wide strategy to shift security left. GitHub Advanced Security lets your company reduce its technical debt and catch vulnerabilities early in its software development lifecycle.

You're asked to come up with an adoption and scaling plan to gradually implement GitHub Advanced Security across all development teams. First, you need to get acquainted with the different GitHub Advanced Security features. Then, you need to understand where these features fit in your software development lifecycle and how to use them.

In this module, you learn:

  • About the different GitHub Advanced Security features and their availability.
  • How to enable GitHub Advanced Security according to your enterprise plan.
  • How to manage access to the different GitHub Advanced Security features.
  • How GitHub Advanced Security lets you manage security alerts.

Prerequisites

  • A GitHub enterprise account with a GitHub Advanced Security license
  • Repository administrator or organization owner permissions
  • Familiarity with managing GitHub administrative settings
  • Knowledge of GitHub Actions