heliocastro / ghas-bootcamp

This bootcamp is designed to get you familiar with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.

GitHub Advanced Security Bootcamp

Prerequisites • Resources

This bootcamp is designed to get you familiar with GitHub Advanced Security (GHAS) so that you can better understand how to use it in your own repositories.

📣 Prerequisites

To participate in the workshop you need a GitHub account and need to be invited to the workshop organization ghas-bootcamp. If your repository hasn't been automatically created in the workshop organization, create a new project and push a copy of the ghas-bootcamp project.

git clone https://github.com/ghas-bootcamp/ghas-bootcamp.git
cd ghas-bootcamp
git remote set-url origin [email protected]:{org-or-username}/{repo-name}.git

📚 Resources

• About code scanning
• About dependency scanning
• About secret scanning
• Action events that trigger workflows
• Configuring builds for compiled languages
• Configuring code scanning
• Configuring notifications for dependabot alerts
• Customizing dependency updates
• Dependency update configuration options
• Filter pattern cheat sheet
• Running additional queries
• Troubleshooting code scanning workflow
• Code scanning API
• Secret scanning API
• GraphQL API
  • RepositoryVulnerabilityAlert
• REST API