- Duration: 1 day
Overview
GitHub Advanced Security (GHAS) provides a comprehensive set of security capabilities designed to strengthen the security posture of software development projects on GitHub.
This course explores how GitHub Advanced Security integrates security directly into the software development lifecycle, enabling development and security teams to identify and address vulnerabilities before they reach production.
Participants will learn how to use GHAS capabilities to help secure source code, software dependencies, and sensitive secrets, while gaining an understanding of its role within the broader application security ecosystem.
What You’ll Learn
- Gain an understanding of the key features and capabilities of GitHub Advanced Security (GHAS).
- Understand how GHAS supports security throughout the software development lifecycle.
- Learn how to use advanced security features within a GitHub environment.
- Identify potential vulnerabilities in source code and dependencies.
- Understand how to protect sensitive information and secrets.
- Apply GitHub Advanced Security capabilities to improve application security.
- Evaluate GHAS features based on organizational security requirements.
- Understand how security teams can gain visibility into organizational security posture and software supply chains.
Who Should Attend
This course is intended for professionals and students who want to understand and implement advanced security practices using GitHub Advanced Security (GHAS).
It is particularly suitable for:
- Developers and Software Engineers: Professionals who want to integrate security practices directly into their development workflows.
- DevSecOps Professionals: Individuals responsible for implementing security throughout the software development lifecycle.
- Security Professionals: Security teams seeking improved visibility into application and software supply chain security.
- IT Professionals: Individuals responsible for GitHub environments and organizational security practices.
- Development Team Leads and Managers: Professionals overseeing secure software development practices.
- Students and Security Enthusiasts: Learners interested in modern application security and developer-first security solutions.
Prerequisites
- A GitHub account.
- Basic understanding of GitHub fundamentals.
- Familiarity with software development concepts is recommended.
Curriculum
Module 01: GitHub Advanced Security – Part 1 of 2
Learn how to secure source code and development workflows using advanced GitHub security capabilities throughout the software development lifecycle.
Topics include:
- Introduction to GitHub Advanced Security
- GitHub Advanced Security capabilities
- Security throughout the development lifecycle
- Understanding developer-first security
- Code scanning
- Identifying vulnerabilities in source code
- Security findings and remediation
- Secret scanning
- Detecting exposed secrets and credentials
- Protecting sensitive information
- Integrating security into development workflows
- Securing code before deployment
Module 02: GitHub Advanced Security – Part 2 of 2
Explore additional GitHub Advanced Security capabilities for protecting software dependencies, strengthening the software supply chain, and improving organizational security visibility.
Topics include:
- Dependency management
- Identifying vulnerable dependencies
- Securing the software supply chain
- Dependency-related security risks
- Managing security vulnerabilities
- Protecting repositories and development assets
- Security visibility across organizations
- Understanding organizational security posture
- Security insights and reporting
- Using curated security intelligence
- Applying GHAS capabilities within GitHub Enterprise environments
- Evaluating GHAS features for organizational security requirements
Course Outcome
Upon successful completion of this course, participants will be able to:
- Explain the purpose and capabilities of GitHub Advanced Security.
- Understand how GHAS supports secure software development.
- Apply code scanning, secret scanning, and dependency management capabilities.
- Identify and address security risks throughout the development lifecycle.
- Understand key software supply chain security practices.
- Improve visibility into organizational security posture.
- Evaluate GHAS capabilities for their own GitHub environment.
- Apply developer-first security practices to help protect code, dependencies, and secrets before production.