Microsoft GitHub Advanced Security (GH-500)
The GH-500 exam is designed for professionals who implement and configure GitHub. It validates your ability to describe GitHub Security suites, features, and ecosystem, configure and use Secret Protection, configure and use supply chain security, configure and use Code Security, security operations: best practices, prioritization, and remediation, and GitHub Security suites administration.
For credential details, see GitHub Advanced Security on Microsoft Learn.
Exam details
- Certification
- GitHub Advanced Security
- Application
- GitHub
- Exam code
- GH-500
- Level
- Intermediate
- Passing score
- 700 out of 1000
- Renewal
- Valid for 2 years; GitHub is transitioning to Microsoft's recertification process.
Skills measured
Describe GitHub Security suites, features, and ecosystem (15–20%)
- Compare Code Security, Secret Protection, and Supply Chain Security.
- Use the security overview and apply secure software development practices.
Configure and use Secret Protection (15–20%)
- Configure secret scanning and push protection.
- Triage, investigate, and remediate secret alerts.
Configure and use supply chain security (15–20%)
- Use Dependabot and dependency review to identify vulnerable dependencies.
- Prioritize and address supply chain security alerts.
Configure and use Code Security (10–15%)
- Configure code scanning with CodeQL.
- Triage and remediate code scanning alerts.
Security operations: best practices, prioritization, and remediation (15–20%)
- Prioritize security work and coordinate remediation.
- Use policies, workflows, and automation to improve security operations.
GitHub Security suites administration (10–15%)
- Manage security suite settings and access.
- Apply GitHub security features consistently across organizations.