Resources to help you get GitHub certified ✨
Prepare for GitHub Certification exams!
Workshop and getting started content for organizations using GitHub
A demo repository of simple OWASP Top 10 type of vulnerabilities in (mostly) Python. Includes an exploration of GHAS features.
GitHub Advance Security Compliance Action
Sample GitHub App which monitors and enforces rules for code scanning, Dependabot, and secret scanning alerts
A monorepo filtering workaround for GitHub Advanced Security Code Scanning using renaming of the scanning tool in an Actions workflow
Manage a uniform team of security managers for every organization in your enterprise
A script which will return the total number of unique de-deuped active committers across multiple GHES instances
A secret scanner wrapper to aggregate results across multiple secret scanning tools
Optimize the utilization of GHAS licenses in an enterprise (or organization)
Securing your Code with GitHub workshop
Secure-Code-AI-Dev is a project focused on leveraging AI to help developers write secure code. It provides tools, examples, and best practices to identify vulnerabilities and improve code quality. The goal is to make security an integral part of the development process for individuals and teams.
GHAS Scan Result Exporter: Simplifies GHAS scan data retrieval into Excel sheets ('Code QL', 'Dependency Scanning', 'Secret Scanning'). With ExcelJS & Nodemailer, enhance security workflow and team collaboration.
Managing GitHub Advanced Security (GHAS) Controls at Scale
A GitHub Action that maps GHAS alerts states between two repos. Useful when migrating repositories.
Add a description, image, and links to the ghas topic page so that developers can more easily learn about it.
To associate your repository with the ghas topic, visit your repo's landing page and select "manage topics."