From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Describe the differences in access management to view alerts for different security features

Describe the differences in access management to view alerts for different security features - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Describe the differences in access management to view alerts for different security features

“

- [Instructor] Now I had mentioned that Dependabot can create potentially a flood of notifications. Now some of that you may be chuckling in anticipation of what I'm going to say, but some of that might be a reflection of developers and their skills and maybe you've got an older developer who's using older components. Not that that's always a one-to-one. But anyway, I see I'm getting myself into trouble here. So let's just say in terms of our repos, who sees what in terms of security info in Dependabot? Well, GitHub does a pretty nice job of what's called security trimming. And the principle here is that a user should see in the application only that which they're allowed to see. So if you're allowed to see in a SQL database the employee's table, you shouldn't be able to run a select all on the products table. And if you're restricted from viewing some columns in that employee's table, when you run your query against it, you'll only see the columns that you have permissions to. So…

Contents