What is GitHub Advanced Security (GHAS), and which features does it include?
Select all correct answers, then click Submit.
Short Explanation and Infographic
GHAS is GitHub's security feature bundle for enterprises. It's the license that unlocks code scanning (CodeQL and third-party SAST), advanced secret scanning with push protection, and supply chain security features for your private repos.
Full explanation below image
Full Explanation
GitHub Advanced Security (GHAS) is a licensed add-on for GitHub Enterprise (Cloud and Server) that enables advanced security features for private repositories. GHAS includes: (1) Code Scanning — static analysis using CodeQL and third-party SAST tools to find security vulnerabilities in code. (2) Secret Scanning — pattern-based detection of hardcoded credentials with push protection to prevent them from being committed. (3) Supply chain security — Dependency Review for PRs showing vulnerable dependency changes. Note: Code scanning, secret scanning (basic), and Dependabot alerts are available for free on public repositories. GHAS unlocks these features for private/internal repositories. GHAS is NOT an SSO/identity product nor is it specifically an audit log tool.