GitHub Fundamentals for Enterprise Security and Automation

• An understanding of software development processes
• Experience with version control systems such as Git
• Familiarity with basic command line usage

Audience

• Software developers
• DevOps engineers
• Technical leads and IT security professionals

GitHub is a platform for version control and collaboration, enabling teams to manage their code and workflows efficiently while integrating essential security and DevOps practices.

This instructor-led, live training (online or onsite) is aimed at intermediate-level developers and DevOps professionals who wish to improve the security, governance, and automation of their GitHub environments, particularly within an enterprise context.

By the end of this training, participants will be able to:

• Configure and manage GitHub security settings and repository access.
• Implement security best practices using GitHub tools like Dependabot and CodeQL.
• Create, reuse, and maintain GitHub Actions and workflows.
• Monitor and audit activity for compliance and governance at scale.

Format of the Course

• Interactive lecture and discussion.
• Lots of exercises and practice.
• Hands-on implementation in a live-lab environment.

Course Customization Options

• To request a customized training for this course, please contact us to arrange.

Introduction to GitHub Enterprise

• Overview of GitHub’s capabilities and enterprise features
• Understanding GitHub security and compliance priorities
• Setting up enterprise environments

Security Features and Functionalities

• Security configuration for repositories
• Permission and access management
• Configuration of branch protection rules
• Implementation of security best practices

Advanced Security Best Practices

• Using Dependabot and CodeQL for security analysis
• Monitoring vulnerabilities and patches
• Implementation of secrets scanning and security policies

Advanced Security Tools on GitHub Enterprise

• Configuring SSO and multifactor authentication
• Auditing and activity logs on GitHub
• Configuring compliance rules

Creating and Maintaining Workflows

• Introduction to GitHub Actions
• Creating automated workflows
• Triggers and execution conditions

Consuming Workflows

• Reusing workflows across repositories
• Monitoring and debugging workflows

Authoring and Maintaining Actions

• Creating custom actions
• Publishing and sharing actions

Managing GitHub Actions for the Enterprise

• Controlling the use of GitHub Actions in your organization
• Configuring execution permissions
• Monitoring enterprise workflows

Summary and Next Steps