GitHub Advanced Security case studies
GitHub Advanced Security · Put your knowledge to work in context.
GitHub Advanced Security (GHAS) is one of the credentials in the GitHub Certification Program, which GitHub describes as providing industry-recognized credentials that validate your proficiency with GitHub technologies. The GHAS exam is aimed at people who already work hands-on with GitHub and its security features and who secure software development workflows day to day - security engineers, platform and DevOps engineers, and developers who own code security in their repositories. The GitHub Advanced Security case studies are 5 cases and about 3,042 words.
1CodeQL rollout stalls in a polyglot monorepo
The organization enabled default setup for code scanning across 240 repositories after purchasing GitHub Advanced Security. Two weeks later, Security Overview shows 38 repositories with no analysis and 22 with configuration errors.
643 words, about 3 min2Push protection bypassed into irrelevance
An organization with 3,000 repositories enabled secret scanning and push protection for all repositories six months ago. Developers now hit about 1,850 push blocks per month.
608 words, about 3 min3Dependabot at 800 repositories, 520 of them unprotected
After onboarding 800 repositories to GitHub Advanced Security, the security team finds Dependabot alerts enabled everywhere but security updates disabled on 520 repositories. Developers report that Dependabot pull requests fail with Dependabot can't resolve your JavaScript dependency file because packages come from a private registry at https://npm.internal.example.com , authenticated by a token that currently lives in an Actions secret and in developers' local .npmrc files.
586 words, about 3 min4Consistent coverage across an enterprise after a merger
The enterprise has 300 repositories: 180 public open-source projects and 120 private business applications. Security tooling grew ad hoc: 22 private repositories have code scanning, 9 have secret scanning, and 4 have push protection.
587 words, about 3 min5SARIF ingestion from a third-party scanner
Fifteen repositories run CodeQL plus a commercial SAST tool. The vendor CLI produces SARIF 2.1.0, which a reusable workflow uploads with github/codeql-action/upload-sarif .
618 words, about 3 min