- How Code Security, Secret Protection and Supply Chain Security fit together, and what is available for public repositories versus enterprise.
- The Security Overview and security campaigns.
- An end-to-end secure SDLC, and prevention-first versus gate-based security.
- Alert management, dismissal best practices, and who owns what between developers, security and admins.
GitHub Certification Training Course
GitHub Advanced Security (GH-500) Certification Training Course
Find and fix vulnerabilities, leaked secrets and risky dependencies before they ship, and get ready for the GitHub Advanced Security (GH-500) exam with Accumentum’s live online training.
Course focus: Configure Secret Protection, Code Security with CodeQL and supply chain security, triage and fix alerts, run security at scale, and prepare for the GitHub Advanced Security (GH-500) exam.
Course Overview
Secure code, secrets and dependencies where developers already work.
GitHub Advanced Security puts code scanning, secret detection and dependency protection right where developers work. This course is for the AppSec and DevSecOps people who set it up and act on what it finds. We cover each security suite, how to configure it, and how to turn alerts into fixes.
The course follows the official GH-500 skills outline. You will work with Secret Protection and push protection, the dependency graph, SBOMs, Dependabot and dependency review, Code Security with CodeQL and SARIF, security campaigns, and the policies and roles that control who can dismiss what.
By the end you will know how to roll out GitHub security features across an organization and run a prevention-first program. You will also be ready to sit the GitHub Advanced Security exam.
Course Objectives
Build GitHub security skills and GH-500 exam readiness.
01
Secret Protection
Enable Secret Protection and push protection, respond to secret alerts, and manage custom patterns and bypass rules.
02
Supply Chain Security
Use the dependency graph, SBOMs, Dependabot alerts and dependency review to manage risk in third-party code.
03
Code Security with CodeQL
Set up code scanning with CodeQL or third-party tools, read the results, and fix or dismiss alerts the right way.
04
GH-500 Exam Readiness
Cover all six domains in the official GH-500 skills outline, including security operations and administration at scale.
Who Should Attend
- Application security engineers who own code scanning, secret scanning and dependency risk.
- DevSecOps engineers who build security checks into GitHub workflows and pull requests.
- Developers and DevOps engineers who triage and fix security alerts in their own repositories.
- Administrators and solution architects rolling out GitHub security features across an organization or enterprise.
Prerequisites
- There are no formal prerequisites for the GH-500 exam or for this course.
- GitHub recommends reviewing the related Microsoft Learn modules before the exam. We cover the same skills in class.
- You should be familiar with GitHub fundamentals, CI/CD and secure development concepts.
- The exam is intermediate level, so hands-on time with GitHub security features will help.
Pathway Map
The GitHub Advanced Security course follows the six GH-500 skill domains.
Each module maps to an official exam domain and its published weight, from the security suites themselves to running them at enterprise scale.
Course Content
- Enabling Secret Protection at the repository and organization levels.
- Push protection, validity checks and prioritized alerts for high-confidence secrets.
- The secret alert lifecycle and how to respond and remediate.
- Role-based and delegated bypass, alert recipients, exclusions and custom secret patterns.
- The dependency graph, vulnerability databases and SBOM export.
- Supply chain alerts and security updates, including EPSS scoring for prioritization.
- Dependency review for pre-merge checks and license compliance.
- Update rules, grouping, auto-dismiss, permissions, webhooks and integrations.
- Native CodeQL and third-party code scanning, and SARIF file ingestion.
- Enabling code security with GitHub Actions or an external CI system.
- Reading results and dataflow analysis, autofix and remediation workflows.
- Dismissing alerts, severity classification and fixing scan failures.
- CVE, CWE and GitHub Security Advisory concepts.
- Severity and remediation rulesets, campaign-based remediation and bulk alert management.
- Customizing CodeQL query suites to match your organization’s risk.
- Shifting left with push protection, dependency scanning and pre-merge analysis.
- Enabling security suites at the enterprise, organization and repository levels.
- Feature differences between GitHub Enterprise Cloud and GitHub Enterprise Server.
- Default configurations, inheritance, policies, rulesets and bypass permissions.
- Security roles, alert permissions, CodeQL workflows and APIs for security at scale.
Course Features
Built for practical GitHub security training and GH-500 exam prep.
Interactive Learning
Participate in training sessions, discussions, and hands-on labs with experienced instructors.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Practical Scenarios
Engage in real-world exercises and case studies to apply GitHub Advanced Security concepts.
Certification Preparation
Receive guidance and tips to successfully pass the GitHub Advanced Security exam.
Certification Exam
Prepare for the official GitHub Advanced Security exam.
GH-500 Exam Readiness
Accumentum’s GitHub Advanced Security course follows the official GH-500 skills outline and prepares you for every domain on the exam.
After the course you will be ready to take the official GitHub Advanced Security (GH-500) exam. GitHub designed it for people with a deep understanding of GitHub and its security features and hands-on experience securing software development workflows.
The exam is intermediate level and runs 100 minutes. You can take it at a Pearson VUE testing center or online, in English, Portuguese, Spanish, Korean or Japanese. A score of 700 or higher is required to pass.
The certification is valid for 2 years. GitHub is moving to Microsoft’s recertification process, which will let you keep your certification current without retaking the full exam.
Frequently Asked Questions
Answers to common questions about Accumentum’s GitHub Advanced Security course, the GH-500 exam, eligibility, delivery and payment.
It shows you can use GitHub Advanced Security to protect code, secrets and dependencies across the software development lifecycle, from configuration to triage and remediation. The exam code is GH-500.
AppSec and DevSecOps engineers, plus developers, DevOps engineers and admins who configure GitHub security features or act on their alerts.
There are no formal prerequisites. You should be familiar with GitHub fundamentals, CI/CD and secure development concepts. GitHub recommends reviewing the related Microsoft Learn modules first.
Six domains: GitHub security suites, features and ecosystem (15 to 20%), Secret Protection (15 to 20%), supply chain security (15 to 20%), Code Security with CodeQL (10 to 15%), security operations (15 to 20%), and security suites administration (10 to 15%).
The exam runs 100 minutes. You can take it at a Pearson VUE testing center or online. It is offered in English, Portuguese, Spanish, Korean and Japanese.
You need a score of 700 or higher.
It is valid for 2 years. GitHub is moving to Microsoft’s recertification process, which will let you renew without retaking the full exam.
The course is delivered live online by an instructor, with hands-on practice in GitHub between sessions.
Yes. PathPay lets you pay for your training over time instead of all at once. You can enroll through PathPay from this page or contact us with any questions.
Enrollment
Enroll in the GitHub Advanced Security (GH-500) Certification Training Course with Accumentum.
Enroll in the GitHub Advanced Security (GH-500) Certification Training Course with Accumentum to learn how to find and fix security problems where developers work. You will cover every GH-500 domain, from Secret Protection and push protection to CodeQL, dependency review, security campaigns and administration at scale.
When you finish, you will be ready to sit the GitHub Advanced Security exam and run a stronger security program on GitHub. For upcoming class dates and to save your seat, use the registration page linked below.
Shift security left with GitHub Advanced Security training.
Prepare for the GitHub Advanced Security (GH-500) exam and learn to stop leaked secrets, vulnerable code and risky dependencies before they reach production.