- Triggers for scheduled, manual, webhook and repository events, with the right scope and permissions.
- Jobs, steps, conditions, job dependencies, service containers and matrix strategies.
- Contexts, expressions, environment variables, YAML anchors, and workflow_dispatch and workflow_call inputs.
- Caching, artifacts, job outputs, job summaries, status badges and environment protections.
GitHub Certification Training Course
GitHub Actions (GH-200) Certification Training Course
Build, run and secure CI/CD with GitHub Actions, and get ready for the GitHub Actions (GH-200) exam with Accumentum’s live online training.
Course focus: Author and troubleshoot workflows, build and publish actions, manage runners and secrets at scale, secure your automation, and prepare for the GitHub Actions (GH-200) exam.
Course Overview
Build, troubleshoot and secure CI/CD workflows with GitHub Actions.
GitHub Actions is where a lot of teams now run their builds, tests and deployments. This course is for the developers and DevOps engineers who own that pipeline. We cover how to write workflows, how to build your own actions, and how to run Actions across an organization or enterprise.
The course follows the official GH-200 skills outline. You will work with triggers and events, jobs and matrix strategies, contexts and expressions, caching and artifacts, reusable workflows, self-hosted runners, secrets and variables, and the security controls that keep your automation safe.
By the end you will be able to read a failed run and fix it, ship a reusable action, and set sensible Actions policies for your organization. You will also be ready to sit the GitHub Actions exam.
Course Objectives
Build GitHub Actions skills and GH-200 exam readiness.
01
Workflow Authoring
Write workflows that run on the right events, with clear job structure, matrix builds, contexts, expressions and outputs.
02
Troubleshooting
Read logs, run history and matrix results to find out why a workflow failed and rerun only what you need.
03
Custom Actions
Build JavaScript, Docker and composite actions, define their metadata, and publish and version them.
04
GH-200 Exam Readiness
Cover all five domains in the official GH-200 skills outline, including enterprise management and security.
Who Should Attend
- Software developers who write and maintain the CI/CD workflows for their team.
- DevOps and platform engineers who own build, test and deployment pipelines on GitHub.
- IT professionals who manage runners, secrets and Actions policies for an organization or enterprise.
- Engineers moving pipelines to GitHub Actions from another CI/CD tool who want to set things up right the first time.
Prerequisites
- There are no formal prerequisites for the GH-200 exam or for this course.
- GitHub recommends reviewing the related Microsoft Learn modules before the exam. We cover the same skills in class.
- The exam is intermediate level and aimed at people with hands-on GitHub Actions experience, so time spent writing workflows will help.
- You should be comfortable with GitHub repositories, basic YAML and the idea of CI/CD. GitHub Foundations (GH-900) is a good base if you are newer to GitHub.
Pathway Map
The GitHub Actions course follows the five GH-200 skill domains.
Each module maps to an official exam domain and its published weight, from writing workflows to running Actions securely at enterprise scale.
Course Content
- Reading configuration and logs to see what triggered a run and what it did.
- Diagnosing failed runs, interpreting matrix expansions and rerunning individual jobs.
- Finding workflows, logs and artifacts in the UI and through the API.
- Starter workflows, reusable workflows and composite actions, and when to use each.
- JavaScript, Docker and composite action types, and troubleshooting action errors.
- Required files, directory structure and action metadata.
- Using workflow commands inside actions.
- Public, private and Marketplace distribution, plus versioning and release strategy.
- Reusable components and templates, and controlling access to actions and workflows.
- Organization use policies for GitHub Actions.
- GitHub-hosted and self-hosted runners, runner groups, IP allow lists and networking.
- Encrypted secrets and variables at the organization, repository and environment levels, including the REST API.
- Environment protections, approval gates and choosing trustworthy Marketplace actions.
- Preventing script injection, scoping GITHUB_TOKEN permissions and using OIDC instead of long-lived cloud secrets.
- Pinning actions to full commit SHAs, action allow lists and artifact attestations.
- Caching, retention policies and strategies for scaling workflows.
Course Features
Built for practical GitHub Actions training and GH-200 exam prep.
Interactive Learning
Participate in training sessions, discussions, and hands-on labs with experienced instructors.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Practical Scenarios
Engage in real-world exercises and case studies to apply GitHub Actions concepts.
Certification Preparation
Receive guidance and tips to successfully pass the GitHub Actions exam.
Certification Exam
Prepare for the official GitHub Actions exam.
GH-200 Exam Readiness
Accumentum’s GitHub Actions course follows the official GH-200 skills outline and prepares you for every domain on the exam.
After the course you will be ready to take the official GitHub Actions (GH-200) exam. GitHub designed it for DevOps engineers, software developers and IT professionals with intermediate experience in GitHub Actions, including workflow creation, automation and CI/CD pipeline management.
The exam is intermediate level and runs 100 minutes. You can take it at a Pearson VUE testing center or online, in English, Portuguese, Spanish, Korean or Japanese. A score of 700 or higher is required to pass.
The certification is valid for 2 years. GitHub is moving to Microsoft’s recertification process, which will let you keep your certification current without retaking the full exam.
Skills Measured
The full GH-200 skills outline.
Microsoft publishes the skills measured for Exam GH-200 as of January 2026. Here are all 5 domains, 14 skill groups and 53 tasks in Microsoft's own wording. Our course maps a lesson or lab to each one.
Configure workflow triggers and events
Part of Author and manage workflows (20 to 25%)
- Configure workflows to run for scheduled, manual, webhook, and repository events
- Choose appropriate scope, permissions, and events for workflow automation
- Define and validate workflow_dispatch inputs (types, required, defaults) and pass inputs to reusable workflows via workflow_call with inputs and secrets mapping
Design and implement workflow structure
Part of Author and manage workflows (20 to 25%)
- Use jobs, steps, and conditional logic
- Implement dependencies between jobs
- Use workflow commands and environment variables
- Use service containers (services:) for dependent services (databases, queues), configure ports, health checks, and container options
- Use strategy and matrix to generate job variations (OS, language/runtime versions), apply include/exclude, control fail-fast and max-parallel, optimize matrix size for cost and performance, account for runner image changes (Ubuntu 20.04 deprecation, Windows Server 2025 migration for windows-latest)
- Implement YAML anchors and aliases (&, * and merge <<) to reuse repeated mappings/steps within a single workflow file
- Use predefined contexts (github, runner, env, vars, secrets, inputs, matrix, needs, strategy, job, steps, github.event, github.ref) to access workflow, repository, and runtime metadata, understand immutable actions behavior and version pinning requirements
- Evaluate expressions with ${{ }} referencing contexts, distinguish static (workflow parse) vs runtime evaluation, prevent secret leakage in logs and expressions
- Leverage editor tooling (GitHub Actions VS Code extension / YAML schema completion, metadata IntelliSense, validation) to author and maintain workflows efficiently
Manage workflow execution and outputs
Part of Author and manage workflows (20 to 25%)
- Configure caching and artifact management, apply retention policies via REST APIs (logs, artifacts, workflow runs) at org/repo level
- Pass data between jobs and steps (artifacts, outputs, environment files via GITHUB_ENV and GITHUB_OUTPUT, reusable workflow outputs)
- Generate job summaries using GITHUB_STEP_SUMMARY for rich Markdown reports (test results, coverage, links)
- Add workflow status badges and environment protections
Interpret workflow behavior and results
Part of Consume and troubleshoot workflows (15 to 20%)
- Identify workflow triggers and effects from configuration and logs
- Diagnose failed workflow runs using logs and run history
- Expand and interpret YAML anchors, aliases, and merged mappings when analyzing workflow configuration
- Interpret matrix expansions, correlate job names to matrix axes, analyze failures across variants, and selectively rerun individual matrix jobs
Access workflow artifacts and logs
Part of Consume and troubleshoot workflows (15 to 20%)
- Locate workflows, logs, and artifacts in the UI and via API
- Download and manage workflow artifacts
Use and manage workflow templates
Part of Consume and troubleshoot workflows (15 to 20%)
- Consume organization-level and reusable workflows
- Consume non-public organization workflow templates
- Use starter workflows (public and private/non-public templates), customize and adapt, distinguish from reusable workflows and composite actions
- Differentiate starter workflows (copy scaffold, independent after creation) vs reusable workflows (central versioned definition invoked via workflow_call) vs composite actions (encapsulated step logic)
- Contrast disabling and deleting workflows
Create and troubleshoot custom actions
Part of Author and maintain actions (15 to 20%)
- Identify and implement action types (JavaScript, Docker, composite), understand immutable actions rollout on hosted runners and implications for version pinning and registry sources
- Troubleshoot action execution and errors
Define action structure and metadata
Part of Author and maintain actions (15 to 20%)
- Specify required files, directory structure, and metadata
- Implement workflow commands within actions
Distribute and maintain actions
Part of Author and maintain actions (15 to 20%)
- Select distribution models (public, private, marketplace)
- Publish actions to the GitHub Marketplace
- Apply versioning and release strategies
Distribute and govern actions and workflows
Part of Manage GitHub Actions for the enterprise (20 to 25%)
- Define and manage reusable components and templates
- Control access to actions and workflows within the enterprise
- Configure organizational use policies
Manage runners at scale
Part of Manage GitHub Actions for the enterprise (20 to 25%)
- Configure and monitor GitHub-hosted and self-hosted runners
- Apply IP allow lists and networking settings
- Manage runner groups and troubleshoot runner issues
- Identify preinstalled software/tool versions on GitHub-hosted runners (image release notes, toolcache) and install additional software at runtime (setup-* actions, package managers, caching, container images, custom self-hosted images)
Manage encrypted secrets and variables
Part of Manage GitHub Actions for the enterprise (20 to 25%)
- Define and scope encrypted secrets and variables at the organization, repository, and environment levels
- Access and use secrets and variables in workflows and actions, manage secrets and variables programmatically via REST APIs
Implement security best practices
Part of Secure and optimize automation (10 to 15%)
- Use environment protections and approval gates
- Identify and use trustworthy actions from the Marketplace
- Mitigate script injection (sanitize/validate inputs, least-privilege permissions, avoid untrusted data in run:, proper shell quoting, prefer vetted actions over inline scripts)
- Understand GITHUB_TOKEN lifecycle (ephemeral, scoped), configure granular permissions, contrast with PAT, restrict write scopes
- Use OIDC token (id-token permission) for cloud provider federation to eliminate long-lived cloud secrets
- Pin third-party actions to full commit SHAs, align with immutable actions enforcement on hosted runners, avoid floating @main/@v\* without justification
- Enforce action usage policies (organization/repository allow/deny lists, required reviewers for unverified actions)
- Generate and verify artifact attestations / provenance (for example SLSA, build metadata) and integrate into deployment verification
Optimize workflow performance and cost
Part of Secure and optimize automation (10 to 15%)
- Configure caching and artifact retention for efficiency, apply retention policies programmatically via REST APIs
- Recommend strategies for scaling and optimizing workflows
Who It Is For
The GH-200 candidate profile.
Here's how Microsoft describes the person this exam is built for. Candidates for this exam should have expertise in automating software development workflows with GitHub Actions. This includes creating and maintaining workflows and actions, managing GitHub Actions at scale, and ensuring secure and efficient automation for organizations and enterprises. Candidates should also be familiar with CI/CD, GitHub repositories, GitHub Packages, and integrating third-party services.
Study Plan
A practical path to GH-200.
We open with Author and manage workflows, which Microsoft weights at 20 to 25%. Its skill groups are "Configure workflow triggers and events", "Design and implement workflow structure" and "Manage workflow execution and outputs".
Next comes Consume and troubleshoot workflows, worth 15 to 20% of the exam. Microsoft breaks it into "Interpret workflow behavior and results", "Access workflow artifacts and logs" and "Use and manage workflow templates".
After that we move to Author and maintain actions, which counts for 15 to 20%. You'll see it split into "Create and troubleshoot custom actions", "Define action structure and metadata" and "Distribute and maintain actions".
Then we take on Manage GitHub Actions for the enterprise, at 20 to 25% of your score. Inside it are "Distribute and govern actions and workflows", "Manage runners at scale" and "Manage encrypted secrets and variables".
We close with Secure and optimize automation, which Microsoft weights at 10 to 15%. The groups here are "Implement security best practices" and "Optimize workflow performance and cost".
Author and manage workflows carries the most weight, so it gets the most lab time. In the last week you take Microsoft's free practice assessment, review whatever it flags and try the exam sandbox so the interface holds no surprises.
Exam Policies
What to know before you book GH-200.
GH-200 leads to the GitHub Actions certification. Microsoft requires a score of 700 or greater to pass, and you get 100 minutes to complete the exam. It's proctored and may include interactive components.
The exam is offered in English, Spanish, Portuguese (Brazil), Korean and Japanese. If it isn't available in your preferred language, Microsoft lets you request an extra 30 minutes. You can also request accommodations if you use assistive devices or need extra time.
If you don't pass, you can retake the exam 24 hours after your first attempt. Waits for later retakes vary under Microsoft's retake policy. Exam price depends on the country or region where the exam is proctored.
Microsoft notes that the bullets under each skill show how the skill is assessed, and related topics may also appear. Most questions cover generally available features, though Preview features can show up if they're commonly used.
GitHub certifications are valid for 2 years. GitHub is moving to Microsoft's recertification process so you can maintain a certification without retaking the full exam, and certifications that expire before that process is available are extended by 6 months.
See the GitHub Actions certification page on Microsoft Learn.
Career Outlook
Where GH-200 can take you.
For a sense of pay, BLS puts the May 2025 median annual wage for software developers, quality assurance analysts and testers at $134,040. A median is the midpoint, so half earned more and half earned less, and your own pay will depend on location, experience and employer. Source: BLS Occupational Outlook Handbook.
Funding and PathPay
Ways to pay for GH-200 training.
Paying on your own? GH-200 prep is eligible for PathPay, our monthly payment plan. Terms of 3, 4 and 6 months carry no added fee. 9, 12 and 18 month terms add 5%, 10% and 15%. Course access opens when your first payment clears.
Our funding page lists every other way to pay, and you can always talk with us or email info@accumentum.net before you enroll.
Frequently Asked Questions
Answers to common questions about Accumentum’s GitHub Actions course, the GH-200 exam, eligibility, delivery and payment.
It shows you can automate software workflows with GitHub Actions. That covers writing workflows and actions, managing Actions at scale and keeping automation secure. The exam code is GH-200.
Developers and DevOps engineers who own CI/CD, and IT professionals who run Actions for an organization. If you write or fix workflows as part of your job, this course is a good fit.
There are no formal prerequisites. The exam is intermediate level, so hands-on time with GitHub Actions helps. GitHub recommends reviewing the related Microsoft Learn modules first.
Five domains: author and manage workflows (20 to 25%), consume and troubleshoot workflows (15 to 20%), author and maintain actions (15 to 20%), manage GitHub Actions for the enterprise (20 to 25%), and secure and optimize automation (10 to 15%).
The exam runs 100 minutes. You can take it at a Pearson VUE testing center or online. It is offered in English, Portuguese, Spanish, Korean and Japanese.
You need a score of 700 or higher.
It is valid for 2 years. GitHub is moving to Microsoft’s recertification process, which will let you renew without retaking the full exam.
The course is delivered live online by an instructor, with hands-on practice in GitHub between sessions.
Yes. PathPay lets you pay for your training over time instead of all at once. You can enroll through PathPay from this page or contact us with any questions.
Microsoft lists these domains:
- Author and manage workflows, 20 to 25%
- Consume and troubleshoot workflows, 15 to 20%
- Author and maintain actions, 15 to 20%
- Manage GitHub Actions for the enterprise, 20 to 25%
- Secure and optimize automation, 10 to 15%
Author and manage workflows is the largest at 20 to 25%. We give it the most lab time.
You can retake it 24 hours after your first attempt. Later retakes have longer waits under Microsoft's retake policy.
Yes. Microsoft offers a free practice assessment, plus an exam sandbox that shows you the exam interface.
Enrollment
Enroll in the GitHub Actions (GH-200) Certification Training Course with Accumentum.
Enroll in the GitHub Actions (GH-200) Certification Training Course with Accumentum to learn how to build, run and secure CI/CD on GitHub. You will cover every GH-200 domain, from triggers and matrix builds to custom actions, runners, secrets and supply chain protections.
When you finish, you will be ready to sit the GitHub Actions exam and put what you learned straight into your own pipelines. For upcoming class dates and to save your seat, use the registration page linked below.
Take ownership of your CI/CD with GitHub Actions training.
Prepare for the GitHub Actions (GH-200) exam, write cleaner workflows, and run automation your security team can trust.