GH-500T00: GitHub Advanced Security

This intermediate course shows you how to find and fix security issues early in development with GitHub Advanced Security. You’ll learn to set up code scanning with CodeQL, detect leaked credentials with secret scanning, and manage vulnerable dependencies with Dependabot and dependency review. It also covers configuring and managing these features across repositories and organisations. It prepares you for the GitHub Advanced Security (GH-500) certification exam.

For more information, see below
Duration
8 hours (1 day)
Modules
2 Modules
Course type
Microsoft

Course Overview

This intermediate-level course introduces GitHub Advanced Security (GHAS), a suite of tools designed to embed security into every stage of the software development lifecycle. Learners will explore how GHAS helps secure code, secrets, and supply chains before deployment. The course emphasizes proactive threat detection, developer-first security practices, and visibility across organizational security posture.

Before You Begin

  • Experience with GitHub and version control workflows
  • Familiarity with CI/CD and DevOps practices
  • Basic understanding of software security principles
  • Interest in secure development and threat mitigation

Key outcomes

  • Secure Code with GitHub Scan code using GitHub Advanced Security tools.
  • Protect Secrets and Dependencies Detect secrets and check packages for vulnerabilities.
  • Monitor Security Posture Track and report risks across your organization.
  • Integrate Security in CI/CD Embed security checks into your DevOps pipelines.

Tools you’ll use

GitHub Advanced Security (GHAS)
GitHub Advanced Security (GHAS)

Skills you’ll gain

  • Automated Code Scanning
  • Secrets Management in Repos
  • Dependency Security Controls
  • Secure Dev Workflows
  • Integrated Security Practices
  • Organizational Posture Monitoring
  • Threat Response Automation
  • Proactive Risk Mitigation

What You’ll Learn

2 modules
1Lesson 1: GitHub Advanced Security Part 1 of 2
Module 1: Introduction to GitHub Advanced Security Module 2: Configure Dependabot security updates on your GitHub repo Module 3: Configure and use secret scanning in your GitHub repository Module 4: Configure code scanning on GitHub
2Lesson 2: GitHub Advanced Security Part 2 of 2
Module 1: Identify security vulnerabilities in your codebase by using CodeQL Module 2: Code scanning with GitHub CodeQL Module 3: GitHub administration for GitHub Advanced Security Module 4: Manage sensitive data and security policies within GitHub

Certification & Credentials

GH-500T00_ GitHub Advanced Security
Certificate track
8 hours (1 day)

Target Audience

Intended roles

  • QA Engineer

Frequently asked questions

Is this course suitable for non-technical roles?
It’s best suited for developers and DevOps professionals.
What does GHAS help secure?
GHAS secures code, secrets, dependencies, and supply chains.
Will I learn how to use CodeQL?
Yes, CodeQL is covered for automated code scanning.
Is certification available after this course?
Yes, GitHub Advanced Security certification is available.
Can I take this course online?
Yes, both instructor-led and self-paced formats are available.
Duration

8 hours (1 day)

Modules

2 Modules

Course type

Microsoft

Category

Microsoft

Intended roles

QA Engineer

Prerequisites

Experience with GitHub and version control workflows, Familiarity with CI/CD and DevOps practices, Basic understanding of software security principles, Interest in secure development and threat mitigation

Reviews

There are no reviews yet.

Be the first to review “GH-500T00: GitHub Advanced Security”

Your email address will not be published. Required fields are marked *