From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 24,700 courses taught by industry experts.

Determine if an alert is generated for a given secret, pattern, or service provider

Determine if an alert is generated for a given secret, pattern, or service provider - GitHub Tutorial

From the course: GitHub Advanced Security Cert Prep by Microsoft Press

Determine if an alert is generated for a given secret, pattern, or service provider

- [Instructor] I think this exam objective is a reminder for us to stay grounded in the GitHub documentation where GitHub provides a list of not only full partners, but also non-partner patterns. Think of common environment variables that may populate into source code accidentally or inadvertently. Ones that have to do with things like SSH, database credentials like MySQL, that are normally framed in a particular key way. That's what we're talking about. The GitHub UI allows you to test your Regex patterns to make sure that you're minimizing false positive responses, and you can always contact GitHub support if you're having an issue creating a custom pattern.

Contents