Hands-on study guide for the GH-500: GitHub Advanced Security certification. Covers all 5 exam domains with docs, demos, CodeQL, Dependabot config, and automation scripts.
-
Updated
May 30, 2026 - Shell
Hands-on study guide for the GH-500: GitHub Advanced Security certification. Covers all 5 exam domains with docs, demos, CodeQL, Dependabot config, and automation scripts.
Practise GitHub secret scanning and push protection (fake training secrets only). GH-500 domain 1.0. By Certy.
GH-500 Lab B - Build a CodeQL database and run a custom query (Module 5)
Practise code scanning with CodeQL on JS and Python training apps. GH-500 domain 2.0. By Certy.
Deliberately vulnerable training app (fake secrets only) for GitHub Advanced Security GH-500. Find, triage and fix. By Certy.
GH-500 Lab D - Triage, prioritise and document security alerts (exam domain 5)
A concise remediation playbook for secret, dependency and code scanning alerts. GH-500. By Certy.
GH-500 Lab C - Roll out security governance as code (Module 7)
Teaching hub for the GitHub Advanced Security (GH-500) course by Certy: exam map, cheat sheets, capstone, video roadmap.
Practise Dependabot and dependency review with intentionally outdated deps. GH-500 domain 3.0. By Certy.
GH-500 Lab A - Tour the three security suites in one repository (Module 1)
Scenario-based GitHub Advanced Security administration practice. GH-500 domain 4.0. By Certy.
Alert triage and remediation incident scenarios for GitHub Advanced Security. GH-500. By Certy.
To associate your repository with the gh-500 topic, visit your repo's landing page and select "manage topics."