From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Unlock this course with a free trial
Join today to access over 24,700 courses taught by industry experts.
Determine if an alert is generated for a given secret, pattern, or service provider - GitHub Tutorial
From the course: GitHub Advanced Security Cert Prep by Microsoft Press
Determine if an alert is generated for a given secret, pattern, or service provider
- [Instructor] I think this exam objective is a reminder for us to stay grounded in the GitHub documentation where GitHub provides a list of not only full partners, but also non-partner patterns. Think of common environment variables that may populate into source code accidentally or inadvertently. Ones that have to do with things like SSH, database credentials like MySQL, that are normally framed in a particular key way. That's what we're talking about. The GitHub UI allows you to test your Regex patterns to make sure that you're minimizing false positive responses, and you can always contact GitHub support if you're having an issue creating a custom pattern.
Contents
-
-
-
-
-
Learning objectives43s
-
(Locked)
Describe secret scanning6m 13s
-
(Locked)
Choose when secret scanning occurs1m 16s
-
(Locked)
Contrast secret scanning availability for public and private repositories2m 18s
-
(Locked)
Enable secret scanning for private repositories1m 38s
-
(Locked)
Enable secret scanning for an organization1m 4s
-
(Locked)
Explain how to pick an appropriate response to a secret scanning alert34s
-
(Locked)
Determine if an alert is generated for a given secret, pattern, or service provider56s
-
(Locked)
Determine if a given user role will see secret scanning alerts21m 38s
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-