GitHub Advanced Security

Module 1: Introduction to GitHub Advanced Security 

What are the benefits and use cases of GitHub Advanced Security? How to purchase and enable a license for private and internal repositories? How to access and configure the security settings for your repositories and organizations? 

Module 2: Implementing Code scanning 

How to use CodeQL, a powerful semantic code analysis engine, to find and fix vulnerabilities and coding errors in your code? How to set up code scanning workflows using GitHub Actions or other CI/CD tools? How to review and manage code scanning alerts on GitHub or in your IDE? How to write and share custom CodeQL queries and libraries? 

Module 3: Secret scanning 

How to detect and prevent secrets, such as keys and tokens, from being exposed in your repositories? How to enable secret scanning for your repositories and organizations? How to review and resolve secret scanning alerts on GitHub or via email notifications? How to use push protection to block commits that contain secrets? How to create and test custom secret scanning patterns? 

Module 4: Dependency review 

How to assess the impact of changes to your dependencies before merging a pull request? How to view the details of your dependencies, such as versions, licenses, and vulnerabilities? How to use Dependabot to keep your dependencies up to date and secure?