GH-500 試験問題を無料オンラインアクセス

Where can you find a deleted line of code that contained a secret value?

• A.Issues
• B.Dependency graph
• C.Commits
• D.Insights

When using the advanced CodeQL code scanning setup, what is the name of the workflow file?

• A.codeql-workflow.yml
• B.codeql-analysis.yml
• C.codeql-config.yml
• D.codeql-scan.yml

As a developer with write access, you navigate to a code scanning alert in your repository. When will GitHub close this alert?

• A.After you triage the pull request containing the alert
• B.After you fix the code by committing within the pull request
• C.When you use data-flow analysis to find potential security issues in code
• D.After you find the code and click the alert within the pull request

When secret scanning detects a set of credentials on a public repository, what does GitHub do?

• A.It sends a notification to repository members.
• B.It notifies the service provider who issued the secret.
• C.It displays a public alert in the Security tab of the repository.
• D.It scans the contents of the commits for additional secrets.

Where can you use CodeQL analysis for code scanning? (Each answer presents part of the solution. Choose two.)

• A.In a workflow
• B.In the Files changed tab of the pull request
• C.In an external continuous integration (CI) system
• D.In a third-party Git repository