GitHub Advanced Security Bootcamp

Prerequisites • Resources

This bootcamp is designed to help familiarize you with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.

:mega: Prerequisites

To participate in the workshop you need a GitHub account and need to be invited to the workshop organization ghas-bootcamp. If your repository hasn't been automatically created in the workshop organization, either click Use this template and create a repository under this organization, or create a new repository and push a copy of the ghas-bootcamp repository.

git clone https://github.com/ghas-bootcamp/ghas-bootcamp.git
cd ghas-bootcamp
git remote set-url origin git@github.com:{org-or-username}/{repo-name}.git

🏫 Agenda

We will go over the following topics:

:books: Resources

• About code scanning
• About dependency scanning
• About secret scanning
• Action events that trigger workflows
• Configuring builds for compiled languages
• Configuring code scanning
• Configuring notifications for dependabot alerts
• Customizing dependency updates
• Dependency update configuration options
• Filter pattern cheat sheet
• Running additional queries
• Troubleshooting code scanning workflow
• Code scanning API
• Secret scanning API
• GraphQL API
  • RepositoryVulnerabilityAlert
• REST API