Tutorials for security and code quality
Build skills and knowledge about GitHub's security and code quality features through examples and hands-on activities.
- Secure your secrets at scale with GitHub, 1 of 12
- Trialing GitHub Advanced Security, 2 of 12
- Adopting GitHub Advanced Security at scale, 3 of 12
- Introduction to adopting GitHub Advanced Security at scale, 1 of 7
- Phase 1: Align on your rollout strategy and goals, 2 of 7
- Phase 2: Preparing to enable at scale, 3 of 7
- Phase 3: Pilot programs, 4 of 7
- Phase 4: Create internal documentation, 5 of 7
- Phase 5: Rollout and scale code scanning, 6 of 7
- Phase 6: Rollout and scale secret scanning, 7 of 7
- Securing your organization, 4 of 12
- Best practices for preventing data leaks in your organization, 1 of 9
- Running a security campaign to fix alerts at scale, 2 of 9
- Prioritizing Dependabot and code scanning alerts using production context, 3 of 9
- Interpreting secret risk assessment results, 4 of 9
- Interpreting code security risk assessment results, 5 of 9
- Organizing remediation efforts for leaked secrets, 6 of 9
- Protecting against security threats, 7 of 9
- Preparing for a security incident, 8 of 9
- Responding to a security incident, 9 of 9
- Remediate leaked secrets, 5 of 12
- Secret scanning partner program, 6 of 12
- Customize code scanning, 7 of 12
- Evaluating default setup for code scanning, 1 of 8
- Preparing your code for CodeQL analysis, 2 of 8
- Analyzing your code with CodeQL queries, 3 of 8
- Uploading CodeQL analysis results to GitHub, 4 of 8
- Running CodeQL code scanning in a container, 5 of 8
- Customizing analysis with CodeQL packs, 6 of 8
- Creating CodeQL query suites, 7 of 8
- Creating and working with CodeQL packs, 8 of 8
- Secure your dependencies, 8 of 12
- Dependabot quickstart guide, 1 of 6
- Automating Dependabot with GitHub Actions, 2 of 6
- Optimizing the creation of pull requests for Dependabot version updates, 3 of 6
- Setting up Dependabot to run on self-hosted action runners using the Actions Runner Controller, 4 of 6
- Customizing Dependabot pull requests to fit your processes, 5 of 6
- Customizing your dependency review action configuration, 6 of 6
- Implement supply chain best practices, 9 of 12
- Manage security alerts, 10 of 12
- Improving the quality of your code, 11 of 12
- Fixing reported vulnerabilities, 12 of 12