About the GH-SECURITY Exam

The GH-SECURITY (Advanced Security) is a Advanced-level certification exam. It tests your knowledge across 5 domains: Describe GHAS (10%), Configure and Use Code Scanning (25%), Configure and Use Secret Scanning (25%), Configure and Use Dependency Management (25%), GHAS Administration (15%). This study hub provides 4 topic-specific question sets, 1 cheat sheets, 1 flashcard decks, and 3 structured study plans to help you prepare comprehensively.

GitHub Certifications Overview

GitHub launched its certification programme in 2024 to validate skills across the world's largest developer platform. With over 100 million developers on GitHub, these certifications demonstrate proficiency in areas that every modern software team relies on daily.

🏠 GitHub Foundations

Covers Git basics, GitHub repositories, collaboration workflows, pull requests, issues, GitHub Pages, and project management features. The ideal starting point for anyone new to GitHub.

⚙️ GitHub Actions

Validates your ability to automate CI/CD workflows, create custom actions, manage secrets, configure runners, and implement workflow templates across organisations.

🔐 GitHub Advanced Security

Tests expertise in code scanning, secret scanning, Dependabot, supply chain security, and security policy configuration for enterprise repositories.

👨‍💼 GitHub Administration

Covers enterprise account management, team structures, repository policies, audit logging, SSO/SAML configuration, and GitHub Enterprise Cloud/Server administration.

🤖 GitHub Copilot

Validates skills in using AI-powered code completion effectively, understanding Copilot's capabilities and limitations, configuring Copilot for teams, and responsible AI practices.

Practice Questions by Advanced Security Topic

Drill down into specific Advanced Security topics with focused practice questions.

🔍Code ScanningCode Scanning with CodeQL 🔐Secret ScanningSecret Scanning 📦Supply Chain SecuritySupply Chain Security 📊Security OverviewSecurity Overview & Governance

🎯 Free GitHub Security Mock Exam

Simulate the GitHub Advanced Security certification exam.

✓ Randomized from 120+ questions
✓ 120-minute countdown timer
✓ All domains covered
✓ Instant pass/fail scoring (70%)
✓ Detailed explanations
✓ Unlimited retakes

Start Free Mock Exam Learn More

Exam Domains

The Advanced Security exam covers 5 domains. Study each domain's objectives, key topics, and tips.

Domain 110%

Describe GHAS

GHAS features and value.

Domain 225%

Configure and Use Code Scanning

CodeQL and code scanning.

Domain 325%

Configure and Use Secret Scanning

Secret detection and push protection.

Domain 425%

Configure and Use Dependency Management

Supply chain security tools.

Domain 515%

GHAS Administration

GHAS at scale.

Build Practical GitHub Skills

The best way to prepare for GitHub certifications is by using GitHub daily. Unlike cloud certifications that require expensive infrastructure, everything you need is available for free on github.com.

🔀 Contribute to Open Source

Fork a repository, create a branch, submit a pull request, and respond to code review feedback. This workflow is tested in every GitHub certification and builds real-world collaboration experience.

🔄 Build a CI/CD Pipeline

Create a GitHub Actions workflow from scratch — set up build, test, and deploy stages. Experiment with matrix builds, caching, and reusable workflows to understand the full automation platform.

🛡️ Enable Security Features

Turn on Dependabot alerts, configure code scanning with CodeQL, and set up secret scanning on a personal repository. These hands-on skills map directly to the Advanced Security certification.