GH-500 validates that you can use GitHub Advanced Security to find and fix vulnerabilities and exposed secrets before they reach production. It covers the GitHub Security suites and how they fit together, configuring and using Secret Protection (push protection, validity checks, custom patterns), supply chain security (the dependency graph, Dependabot alerts and updates, dependency review), and Code Security (code scanning and CodeQL). It also covers security operations, meaning how to prioritize and remediate alerts, and administering the security suites across repositories and organizations. For partners pursuing the Solutions Partner for Digital & App Innovation designation, it is one of the GitHub exams that counts toward the designation.
85 questions organized across 10 focused study days. Each day targets a specific exam domain with detailed explanations.
GH-500 covers 6 functional areas. Study time is weighted by topic importance to help you focus where it matters most.