CINXE.COM

<!DOCTYPE html><html dir="ltr" lang="en-US"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self' analytics.githubassets.com ghcc.githubassets.com js.monitor.azure.com/scripts/c/ms.analytics-web-4.min.js www.youtube.com; style-src 'self' 'unsafe-inline'; connect-src 'self' browser.events.data.microsoft.com collector.githubapp.com edge.fullstory.com rs.fullstory.com; font-src 'self' data:; img-src 'self' data: github.githubassets.com images.ctfassets.net rs.fullstory.com ad.doubleclick.net pixel.quantserve.com sp.analytics.yahoo.com www.facebook.com px.ads.linkedin.com alb.reddit.com px4.ads.linkedin.com adservice.google.com; manifest-src 'self'; frame-src 'self' www.youtube.com player.vimeo.com play.vidyard.com octocaptcha.com; media-src 'self';"/><link rel="canonical" href="https://resources.github.com/learn/pathways/security/"/><meta name="ha-url" content="https://collector.githubapp.com/resources/collect"/><meta name="ghcc-locale" content="en-US"/><link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"/><link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png"/><link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png"/><link rel="manifest" href="/site.webmanifest"/><link rel="mask-icon" href="/safari-pinned-tab.svg" color="#ab3f8b"/><meta name="apple-mobile-web-app-title" content="GitHub Resources"/><meta name="application-name" content="GitHub Resources"/><meta name="msapplication-TileColor" content="#ab3f8b"/><meta name="theme-color" content="#151920"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:site" content="@github"/><meta name="twitter:creator" content="@GitHub"/><meta property="og:url" content="https://resources.github.com/learn/pathways/security/"/><meta property="og:type" content="website"/><meta property="og:locale" content="en_US"/><meta property="og:site_name" content="GitHub Resources"/><title>Secure at every step - GitHub Resources</title><meta name="robots" content="index,follow"/><meta name="description" content="Learn how industry experts use GitHub Advanced Security to protect their code without sacrificing developer productivity"/><meta property="og:title" content="Secure at every step"/><meta property="og:description" content="Learn how industry experts use GitHub Advanced Security to protect their code without sacrificing developer productivity"/><meta property="og:image" content="https://images.ctfassets.net/wfutmusr1t3h/2c5pvD8RaUBtqrcEULhGV9/05d3a8abb0117edb962d6a5b0507b275/PrimaryLP_1200x630px_2x.png"/><meta property="og:image:alt" content="GitHub logo Learning Pathways with swirling multicolored shapes"/><meta property="og:image:width" content="1200"/><meta property="og:image:height" content="630"/><meta name="ha-page-type" content="marketing"/><link rel="preload" as="image" imageSrcSet="//images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 544w, //images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 768w, //images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 1012w, //images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 1280w" imageSizes="100vw"/><meta name="next-head-count" content="33"/><link data-next-font="" rel="preconnect" href="/" crossorigin="anonymous"/><link rel="preload" href="/_next/static/css/238ca3e7f90c682f.css" as="style"/><link rel="stylesheet" href="/_next/static/css/238ca3e7f90c682f.css" data-n-g=""/><link rel="preload" href="/_next/static/css/c2a527101433f11d.css" as="style"/><link rel="stylesheet" href="/_next/static/css/c2a527101433f11d.css" data-n-p=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js"></script><script src="https://ghcc.githubassets.com/ghcc.min.js" defer="" data-nscript="beforeInteractive"></script><script src="/_next/static/chunks/webpack-38cee4c0e358b1a3.js" defer=""></script><script src="/_next/static/chunks/framework-49c6cecf1f6d5795.js" defer=""></script><script src="/_next/static/chunks/main-43041a92397b9ba5.js" defer=""></script><script src="/_next/static/chunks/pages/_app-4918fa68b0b899e4.js" defer=""></script><script src="/_next/static/chunks/285-f0ec2e7d96e240db.js" defer=""></script><script src="/_next/static/chunks/pages/%5B...path%5D-4685a8a8e88aa8ea.js" defer=""></script><script src="/_next/static/ZokmF09g2SkORXwoG0TZr/_buildManifest.js" defer=""></script><script src="/_next/static/ZokmF09g2SkORXwoG0TZr/_ssgManifest.js" defer=""></script></head><body><div id="__next"><div data-color-mode="light" class="d-flex flex-column"><div id="site-navigation-container" data-color-mode="light" data-light-theme="light" style="z-index:999" class="site-navigation-container position-fixed top-0 width-full color-bg-transparent"><div class="position-relative site-navigation-container--background"><div class="position-absolute nav-dropdown color-bg-white" data-color-mode="light" data-light-theme="light"><div class="container-xl"><form class="d-flex flex-column"><button class="btn-link flex-self-end Link--muted" type="button" aria-label="Close dropdown" data-analytics-click="Search,search pane closed, query: "><svg aria-hidden="true" role="img" class="octicon octicon-x" viewBox="0 0 24 24" width="36" height="36" fill="currentColor" style="display:inline-block;user-select:none;vertical-align:text-bottom;overflow:visible"><path fill-rule="evenodd" d="M5.72 5.72a.75.75 0 011.06 0L12 10.94l5.22-5.22a.75.75 0 111.06 1.06L13.06 12l5.22 5.22a.75.75 0 11-1.06 1.06L12 13.06l-5.22 5.22a.75.75 0 01-1.06-1.06L10.94 12 5.72 6.78a.75.75 0 010-1.06z"></path></svg></button><div class="d-flex flex-column flex-md-row flex-items-center"><input type="text" class="search-input form-control input-lg color-bg-transparent color-fg-muted flex-1 width-full mb-3 mb-md-0 mr-0 mr-md-3" placeholder="What are you looking for?" autofocus="" value=""/><button class="btn-mktg arrow-target-mktg flex-shrink-0 width-full width-md-auto">Search</button></div></form></div></div><ul class="position-absolute nav-dropdown mobile-nav pt-8 pb-4 color-bg-dark color-fg-white d-lg-none" data-color-mode="dark" data-dark-theme="dark"><div class="container-sm px-6 overflow-auto height-full"><div class="d-flex flex-column color-bg-dark height-full flex-justify-between"><div></div><div class="d-flex flex-column d-md-none"></div></div></div></ul><header data-testid="site-navigation-mobile" class="site-navigation d-lg-none"><nav class="container-xl py-1" aria-label="Site navigation"><div class="d-flex flex-items-center flex-justify-between"><a title="Visit GitHub Resources" class="gh-icon Header-link" data-testid="navigation-home-link-mobile" href="/"><svg aria-hidden="true" role="img" class="octicon octicon-mark-github" viewBox="0 0 16 16" width="32" height="32" fill="currentColor" style="display:inline-block;user-select:none;vertical-align:text-bottom;overflow:visible"><path fill-rule="evenodd" d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z"></path></svg></a><div class="d-none d-md-flex d-lg-none"></div></div></nav></header><header data-testid="site-navigation" class="site-navigation"><nav class="container-xl py-1 d-none d-lg-flex flex-items-center flex-justify-between" aria-label="Site navigation"><ul class="d-flex flex-items-center"><li><a href="https://github.com" target="_blank" rel="noreferrer" class="gh-icon Header-link d-none d-lg-block py-3 position-relative" aria-label="GitHub homepage"><svg aria-hidden="true" role="img" class="nav-back-arrow position-absolute" viewBox="0 0 24 24" width="32" height="32" fill="currentColor" style="display:inline-block;user-select:none;vertical-align:text-bottom;overflow:visible"><path fill-rule="evenodd" d="M15.28 5.22a.75.75 0 00-1.06 0l-6.25 6.25a.75.75 0 000 1.06l6.25 6.25a.75.75 0 101.06-1.06L9.56 12l5.72-5.72a.75.75 0 000-1.06z"></path></svg><svg aria-hidden="true" role="img" class="octicon octicon-mark-github" viewBox="0 0 16 16" width="32" height="32" fill="currentColor" style="display:inline-block;user-select:none;vertical-align:text-bottom;overflow:visible"><path fill-rule="evenodd" d="M8 0C3.58 0 0 3.58 0 8c0 3.54 2.29 6.53 5.47 7.59.4.07.55-.17.55-.38 0-.19-.01-.82-.01-1.49-2.01.37-2.53-.49-2.69-.94-.09-.23-.48-.94-.82-1.13-.28-.15-.68-.52-.01-.53.63-.01 1.08.58 1.23.82.72 1.21 1.87.87 2.33.66.07-.52.28-.87.51-1.07-1.78-.2-3.64-.89-3.64-3.95 0-.87.31-1.59.82-2.15-.08-.2-.36-1.02.08-2.12 0 0 .67-.21 2.2.82.64-.18 1.32-.27 2-.27.68 0 1.36.09 2 .27 1.53-1.04 2.2-.82 2.2-.82.44 1.1.16 1.92.08 2.12.51.56.82 1.27.82 2.15 0 3.07-1.87 3.75-3.65 3.95.29.25.54.73.54 1.48 0 1.07-.01 1.93-.01 2.2 0 .21.15.46.55.38A8.013 8.013 0 0016 8c0-4.42-3.58-8-8-8z"></path></svg></a></li><li class="d-flex flex-items-center"><span class="ml-3 f1-mktg f2-md-mktg opacity-30">/</span><a data-testid="navigation-home-link" data-analytics-click="Navigation, go to homepage" class="d-none d-lg-inline-block Header-link font-weight-semibold p-3 f2" aria-label="GitHub resources homepage" href="/">Resources</a></li></ul><ul class="d-flex flex-items-center"></ul><div class="site-navigation--background position-absolute top-0 bottom-0 left-0 right-0"></div></nav></header></div></div><main class="flex-1 position-relative"><div class="Primer_Brand__Stack-module__Stack___tASKe Primer_Brand__Stack-module__Stack--vertical___CFzE7 Primer_Brand__Stack-module__Stack-narrow--gap-normal___smNw5 Primer_Brand__Stack-module__Stack-regular--gap-normal___dRchQ Primer_Brand__Stack-module__Stack-wide--gap-spacious___WXQyb Primer_Brand__Stack-module__Stack--padding-none___RCMh9 mkt-landing-page pt-8 pb-8"><section style="position:relative"><div data-color-mode="light" style="background-color:transparent"><div class="bg-image" style="opacity:1"><span style="box-sizing:border-box;display:block;overflow:hidden;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0;position:absolute;top:0;left:0;bottom:0;right:0"><img alt="" sizes="100vw" srcSet="//images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 544w, //images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 768w, //images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 1012w, //images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75 1280w" src="//images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png?w=2560&q=75" decoding="async" data-nimg="fill" style="position:absolute;top:0;left:0;bottom:0;right:0;box-sizing:border-box;padding:0;border:none;margin:auto;display:block;width:0;height:0;min-width:100%;max-width:100%;min-height:100%;max-height:100%;object-fit:cover"/></span></div><div class="container-xl position-relative"><section class="Primer_Brand__Hero-module__Hero___EM3jf Primer_Brand__Hero-module__Hero--align-start___m8GEr" aria-labelledby="hero-section-brand-heading"><div class="Primer_Brand__Grid-module__Grid___q48mT Primer_Brand__Grid-module__Grid--full-width___pIgWW Primer_Brand__Hero-module__Hero-grid___ty4Y7 Primer_Brand__Hero-module__Hero-grid--block-end___vzO3L" data-testid="Grid-:R8n6:"><div class="Primer_Brand__Grid-module__Grid__column___HTpsw Primer_Brand__Grid-module__Grid__column--medium-span-12___eT5YS"><div class="Primer_Brand__Stack-module__Stack___tASKe Primer_Brand__Stack-module__Stack--vertical___CFzE7 Primer_Brand__Stack-module__Stack--gap-none___M7T_v Primer_Brand__Stack-module__Stack--align-items-flex-start___Vh1Ca Primer_Brand__Stack-module__Stack--justify-content-flex-start___VIkHJ Primer_Brand__Stack-module__Stack--padding-none___RCMh9"><h1 class="Primer_Brand__Heading-module__Heading___IVpmp Primer_Brand__Heading-module__Heading-font--mona-sans___SCnTx Primer_Brand__Heading-module__Heading--1___Ufc7G Primer_Brand__Hero-module__Hero-heading___QuVBH" id="hero-section-brand-heading">Secure at every step</h1><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__Hero-module__Hero-description___vG4iA">Learn how industry experts use GitHub Advanced Security to protect their code without sacrificing developer productivity</p><div class="Primer_Brand__Hero-module__Hero-actions___oH1NT"><a class="Primer_Brand__Button-module__Button___lDruK Primer_Brand__Button-module__Button--primary___xIC7G Primer_Brand__Button-module__Button--size-medium___EyCyw" href="https://resources.github.com/learn/pathways/security/essentials/essentials-github-advanced-security" data-ref="hero-component-primary-action"><span class="Primer_Brand__Button-module__Button__text___Z3ocU"><span class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__Text-module__Text--weight-semibold___Ns19j Primer_Brand__Button-module__Button--label___lUBc0 Primer_Brand__Button-module__Button--label-primary___Leisi">Start your learning pathway</span></span><span class="Primer_Brand__Button-module__Button__trailing-visual___zg8jd"><svg class="Primer_Brand__ExpandableArrow-module__ExpandableArrow___rkfek Primer_Brand__Button-module__Button-arrow___SkJXQ" width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" focusable="false" data-testid="Button-expandable-arrow"><path fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z"></path><path class="Primer_Brand__ExpandableArrow-module__ExpandableArrow-stem___g4mdy" stroke="currentColor" d="M1.75 8H11" stroke-width="1.5" stroke-linecap="round"></path></svg></span></a></div></div></div></div></section></div></div></section><section class="container-xl markdown-body width-full"><h2 class="Primer_Brand__Heading-module__Heading___IVpmp Primer_Brand__Heading-module__Heading-font--mona-sans___SCnTx Primer_Brand__Heading-module__Heading--2___TFg09">Get secure. Stay secure.</h2><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT"> Security is paramount for every organization today. But so is innovation. DevSecOps teams need tools that keep users safe without getting in developers' way and impacting time to market. Traditional security reviews can last for months, requiring developers to fix vulnerabilities in older code long after they've moved on to new projects, which disrupts their workflow and necessitates re-familiarizing themselves with past work. In other cases, security can feel like a barrier to getting things done, limiting the sorts of tools and libraries developers can bring to bear on a project. Plus, many security testing tools produce false positives that can block developers from committing their code, or condition them to ignore alerts.</p><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT"> </p><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT">GitHub Advanced Security (GHAS) makes shifting left easy. It empowers DevSecOps teams to prioritize innovation and developer productivity while ensuring that security isn’t sacrificed to meet feature delivery timelines. Automated security checks run with every pull request, empowering developers to remediate problems before pushing to production. By placing alerts and, in many cases, solutions right in the development workflow, security issues can be remediated in minutes, instead of months. Tests are highly curated to minimize the risk of false positives. Additionally, GHAS gives security teams visibility into the cross-organizational security posture and supply chain, and unparalleled access to curated security intelligence from millions of developers and security researchers around the world.</p><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT"> </p><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT">In these guides, DevSecOps veterans from leading companies share their insights and best practices for getting started with GHAS and tuning it to your organization’s specific needs.</p><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT"><b>Nick Liffen</b> | <a href="https://github.com/nickliffen" class="Primer_Brand__InlineLink-module__InlineLink___U_Ama">@nickliffen</a> | Director of Field Services, Security, GitHub</p><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT"></p></section><section class="container-xl"><div class="Primer_Brand__Stack-module__Stack___tASKe Primer_Brand__Stack-module__Stack--horizontal___YJFas Primer_Brand__Stack-module__Stack--gap-spacious___w5ugZ Primer_Brand__Stack-module__Stack--align-items-center___xWKxj Primer_Brand__Stack-module__Stack-narrow--justify-content-center___kdlmI Primer_Brand__Stack-module__Stack-regular--justify-content-center___oEcdF Primer_Brand__Stack-module__Stack-wide--justify-content-space-between___HEm_x Primer_Brand__Stack-module__Stack--padding-condensed___mo7Aq flex-wrap"><img style="filter:brightness(0) invert(0);height:48px;max-width:200px;object-fit:contain" alt="Telus logo" src="//images.ctfassets.net/wfutmusr1t3h/5PU7nfURQqpTP3vPOP2T4o/26904203137763bab05798c6d7684fd1/Telus-Logo-trimmy.png" width="252" height="48"/><img style="filter:brightness(0) invert(0);height:48px;max-width:200px;object-fit:contain" alt="LinkedIn logo" src="//images.ctfassets.net/wfutmusr1t3h/3KAaDSTu44C8lr0W3i3FVe/d1133032ec550e7248790467c5d14928/LI-Logo.png" width="2212" height="540"/><img style="filter:brightness(0) invert(0);height:48px;max-width:200px;object-fit:contain" alt="KPMG logo " src="//images.ctfassets.net/wfutmusr1t3h/h9s3PWlfFGIEOusEddrni/dccbf63a47cf936d33a5cd06170f1644/KPMG-CMYK.png" width="3938" height="1582"/></div></section><section class="container-xl"><section class="Primer_Brand__river-shared-module__River___eSXvR Primer_Brand__river-shared-module__River--50-50___y5_l2 Primer_Brand__river-shared-module__River--align-start___wo12V"><div class="Primer_Brand__river-shared-module__River__content___p4EdY"><div class="Primer_Brand__river-shared-module__River__heading___tl6zS"><h3 class="Primer_Brand__Heading-module__Heading___IVpmp Primer_Brand__Heading-module__Heading-font--mona-sans___SCnTx Primer_Brand__Heading-module__Heading--4___C9jDG">Essentials of GitHub Advanced Security</h3></div><div class="Primer_Brand__river-shared-module__River__body-text___aJne5"><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__river-shared-module__River__text___TQQhU">Your security journey starts with a few clicks. Learn how to automate your application security testing and remediation with GitHub Advanced Security.<br/><a href="https://resources.github.com/learn/pathways/security/essentials/essentials-github-advanced-security/" class="link-mktg color-fg-default text-semibold pt-3 f3-mktg">Begin with the basics <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="octicon arrow-symbol-mktg" width="16" height="16" viewBox="0 0 16 16" fill="none"><path fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z"></path><path stroke="currentColor" d="M1.75 8H11" stroke-width="1.5" stroke-linecap="round"></path></svg></a></p></div></div><div class="Primer_Brand__river-shared-module__River__visual___kjFE2 Primer_Brand__river-shared-module__River__visual--fill-media___psmFL Primer_Brand__river-shared-module__River__visual--rounded___x1iTx"><span style="box-sizing:border-box;display:inline-block;overflow:hidden;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0;position:relative;max-width:100%"><span style="box-sizing:border-box;display:block;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0;max-width:100%"><img style="display:block;max-width:100%;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0" alt="" aria-hidden="true" src="data:image/svg+xml,%3csvg%20xmlns=%27http://www.w3.org/2000/svg%27%20version=%271.1%27%20width=%27600%27%20height=%27360%27/%3e"/></span><img alt="Guards guarding a castle" src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" decoding="async" data-nimg="intrinsic" style="position:absolute;top:0;left:0;bottom:0;right:0;box-sizing:border-box;padding:0;border:none;margin:auto;display:block;width:0;height:0;min-width:100%;max-width:100%;min-height:100%;max-height:100%"/><noscript><img alt="Guards guarding a castle" loading="lazy" decoding="async" data-nimg="intrinsic" style="position:absolute;top:0;left:0;bottom:0;right:0;box-sizing:border-box;padding:0;border:none;margin:auto;display:block;width:0;height:0;min-width:100%;max-width:100%;min-height:100%;max-height:100%" srcSet="//images.ctfassets.net/wfutmusr1t3h/2xDeRgVpaEOk10fSEsHc7a/57a0dc2e18d2620d36b7d84bea5d98fa/L100_HeroArt_Tim__1__1__5_.png?w=768&q=75 1x, //images.ctfassets.net/wfutmusr1t3h/2xDeRgVpaEOk10fSEsHc7a/57a0dc2e18d2620d36b7d84bea5d98fa/L100_HeroArt_Tim__1__1__5_.png?w=1280&q=75 2x" src="//images.ctfassets.net/wfutmusr1t3h/2xDeRgVpaEOk10fSEsHc7a/57a0dc2e18d2620d36b7d84bea5d98fa/L100_HeroArt_Tim__1__1__5_.png?w=1280&q=75"/></noscript></span></div></section><section class="Primer_Brand__river-shared-module__River___eSXvR Primer_Brand__river-shared-module__River--50-50___y5_l2 Primer_Brand__river-shared-module__River--align-end___aNjz4"><div class="Primer_Brand__river-shared-module__River__visual___kjFE2 Primer_Brand__river-shared-module__River__visual--fill-media___psmFL Primer_Brand__river-shared-module__River__visual--rounded___x1iTx"><span style="box-sizing:border-box;display:inline-block;overflow:hidden;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0;position:relative;max-width:100%"><span style="box-sizing:border-box;display:block;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0;max-width:100%"><img style="display:block;max-width:100%;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0" alt="" aria-hidden="true" src="data:image/svg+xml,%3csvg%20xmlns=%27http://www.w3.org/2000/svg%27%20version=%271.1%27%20width=%27600%27%20height=%27360%27/%3e"/></span><img alt="Cartoon rock climber using proper security techniques while climbing a rock wall" src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" decoding="async" data-nimg="intrinsic" style="position:absolute;top:0;left:0;bottom:0;right:0;box-sizing:border-box;padding:0;border:none;margin:auto;display:block;width:0;height:0;min-width:100%;max-width:100%;min-height:100%;max-height:100%"/><noscript><img alt="Cartoon rock climber using proper security techniques while climbing a rock wall" loading="lazy" decoding="async" data-nimg="intrinsic" style="position:absolute;top:0;left:0;bottom:0;right:0;box-sizing:border-box;padding:0;border:none;margin:auto;display:block;width:0;height:0;min-width:100%;max-width:100%;min-height:100%;max-height:100%" srcSet="//images.ctfassets.net/wfutmusr1t3h/3W0otC0pmWXu4E69Ie93nc/f46a34f077f1adac472339bb21f16530/L100_HeroArt_Tim__1__1__6_.png?w=768&q=75 1x, //images.ctfassets.net/wfutmusr1t3h/3W0otC0pmWXu4E69Ie93nc/f46a34f077f1adac472339bb21f16530/L100_HeroArt_Tim__1__1__6_.png?w=1280&q=75 2x" src="//images.ctfassets.net/wfutmusr1t3h/3W0otC0pmWXu4E69Ie93nc/f46a34f077f1adac472339bb21f16530/L100_HeroArt_Tim__1__1__6_.png?w=1280&q=75"/></noscript></span></div><div class="Primer_Brand__river-shared-module__River__content___p4EdY"><div class="Primer_Brand__river-shared-module__River__heading___tl6zS"><h3 class="Primer_Brand__Heading-module__Heading___IVpmp Primer_Brand__Heading-module__Heading-font--mona-sans___SCnTx Primer_Brand__Heading-module__Heading--4___C9jDG">Intermediate guides to GitHub Advanced Security</h3></div><div class="Primer_Brand__river-shared-module__River__body-text___aJne5"><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__river-shared-module__River__text___TQQhU">Build beyond the basics and configure GitHub Advanced Security to meet the specific needs of your organization with custom configurations, third-party integrations, and more. <br/><a href="https://resources.github.com/learn/pathways/security/intermediate/intermediate-guides-github-advanced-security/" class="link-mktg color-fg-default text-semibold pt-3 f3-mktg">Continue your journey <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="octicon arrow-symbol-mktg" width="16" height="16" viewBox="0 0 16 16" fill="none"><path fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z"></path><path stroke="currentColor" d="M1.75 8H11" stroke-width="1.5" stroke-linecap="round"></path></svg></a></p></div></div></section><section class="Primer_Brand__river-shared-module__River___eSXvR Primer_Brand__river-shared-module__River--50-50___y5_l2 Primer_Brand__river-shared-module__River--align-start___wo12V"><div class="Primer_Brand__river-shared-module__River__content___p4EdY"><div class="Primer_Brand__river-shared-module__River__heading___tl6zS"><h3 class="Primer_Brand__Heading-module__Heading___IVpmp Primer_Brand__Heading-module__Heading-font--mona-sans___SCnTx Primer_Brand__Heading-module__Heading--4___C9jDG">Advanced guides to GitHub Advanced Security</h3></div><div class="Primer_Brand__river-shared-module__River__body-text___aJne5"><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__river-shared-module__River__text___TQQhU">Dive into advanced functionality, such as central management, supply chain security testing configuration, and automated software-bill-of-materials generation. <br/><a href="https://resources.github.com/learn/pathways/security/advanced/advanced-module-github-advanced-security/" class="link-mktg color-fg-default text-semibold pt-3 f3-mktg">Become the expert <svg aria-hidden="true" role="presentation" xmlns="http://www.w3.org/2000/svg" class="octicon arrow-symbol-mktg" width="16" height="16" viewBox="0 0 16 16" fill="none"><path fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z"></path><path stroke="currentColor" d="M1.75 8H11" stroke-width="1.5" stroke-linecap="round"></path></svg></a></p></div></div><div class="Primer_Brand__river-shared-module__River__visual___kjFE2 Primer_Brand__river-shared-module__River__visual--fill-media___psmFL Primer_Brand__river-shared-module__River__visual--rounded___x1iTx"><span style="box-sizing:border-box;display:inline-block;overflow:hidden;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0;position:relative;max-width:100%"><span style="box-sizing:border-box;display:block;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0;max-width:100%"><img style="display:block;max-width:100%;width:initial;height:initial;background:none;opacity:1;border:0;margin:0;padding:0" alt="" aria-hidden="true" src="data:image/svg+xml,%3csvg%20xmlns=%27http://www.w3.org/2000/svg%27%20version=%271.1%27%20width=%27600%27%20height=%27360%27/%3e"/></span><img alt="Three guards guarding art in a museum" src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" decoding="async" data-nimg="intrinsic" style="position:absolute;top:0;left:0;bottom:0;right:0;box-sizing:border-box;padding:0;border:none;margin:auto;display:block;width:0;height:0;min-width:100%;max-width:100%;min-height:100%;max-height:100%"/><noscript><img alt="Three guards guarding art in a museum" loading="lazy" decoding="async" data-nimg="intrinsic" style="position:absolute;top:0;left:0;bottom:0;right:0;box-sizing:border-box;padding:0;border:none;margin:auto;display:block;width:0;height:0;min-width:100%;max-width:100%;min-height:100%;max-height:100%" srcSet="//images.ctfassets.net/wfutmusr1t3h/547u8R29yNzeb7sBAOMqIL/b529a3f1b90ff7af9f584c87de882324/L100_HeroArt_Tim__1__1__1_.png?w=768&q=75 1x, //images.ctfassets.net/wfutmusr1t3h/547u8R29yNzeb7sBAOMqIL/b529a3f1b90ff7af9f584c87de882324/L100_HeroArt_Tim__1__1__1_.png?w=1280&q=75 2x" src="//images.ctfassets.net/wfutmusr1t3h/547u8R29yNzeb7sBAOMqIL/b529a3f1b90ff7af9f584c87de882324/L100_HeroArt_Tim__1__1__1_.png?w=1280&q=75"/></noscript></span></div></section></section><section class="container-xl"><figure class="Primer_Brand__Testimonial-module__Testimonial___UUywT" style="--testimonial-accent-color:default"><div aria-hidden="true" class="Primer_Brand__Testimonial-module__Testimonial__quoteMark___cC2M1 Primer_Brand__Testimonial-module__Testimonial__quoteMark--default___nAhKC">“</div><blockquote><span class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__Testimonial-module__Testimonial-quote___QXF1F testimonial-quote f0-mktg">It’s easy to add tools but never check the results. By pulling everything into one place, GitHub Advanced Security makes it easy to benefit from all our different tools.</span></blockquote><div class="Primer_Brand__Testimonial-module__Testimonial__media___JbJUQ"><span class="Primer_Brand__Avatar-module__Avatar___QrJMw Primer_Brand__Avatar-module__Avatar--size-48___TvwXR Primer_Brand__Avatar-module__Avatar--shape-circle___VvaB7 Primer_Brand__Testimonial-module__Testimonial-avatar___Kaxqh" data-testid="Avatar"><img class="Primer_Brand__Avatar-module__Avatar__image___AajXN" src="//images.ctfassets.net/wfutmusr1t3h/3UeWgAdeBB9vCLhzJ45qZn/ccce707b14d2b44737cd0c347960bf86/Untitled_2__3_.png" alt="Phil Wright-Christie" data-testid="Avatar__image"/></span><figcaption class="Primer_Brand__Testimonial-module__Testimonial-caption___Wvb67 testimonial-author"><span class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__Testimonial-module__Testimonial-from___Kfj__">Phil Wright-Christie</span><span class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--muted___lTaVa Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__Testimonial-module__Testimonial-position___j2h0f">Lead DevOps Engineer // KPMG</span></figcaption></div></figure></section><section class="container-xl width-full"><section class="Primer_Brand__CTABanner-module__CTABanner___m0t8s Primer_Brand__CTABanner-module__CTABanner--shadow___BA030 mkt-landing-page-cta-banner"><div class="Primer_Brand__CTABanner-module__CTABanner-container___iRzd1 Primer_Brand__CTABanner-module__CTABanner-container--border___FbAer Primer_Brand__CTABanner-module__CTABanner-container--background___v1yTH"><div class="Primer_Brand__CTABanner-module__CTABanner-content___sZo6_ Primer_Brand__CTABanner-module__CTABanner-content--center___S0ChQ"><h3 class="Primer_Brand__Heading-module__Heading___IVpmp Primer_Brand__Heading-module__Heading-font--mona-sans___SCnTx Primer_Brand__Heading-module__Heading--1___Ufc7G">Shift left with a few clicks</h3><p class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__CTABanner-module__CTABanner-description___I7md6">Learn how to unlock the power of GitHub Advanced Security to safeguard your code at every step of development.</p><section class="Primer_Brand__ButtonGroup-module__ButtonGroup___QQSsj"><a class="Primer_Brand__Button-module__Button___lDruK Primer_Brand__Button-module__Button--primary___xIC7G Primer_Brand__Button-module__Button--size-medium___EyCyw" href="https://resources.github.com/learn/pathways/security/essentials/essentials-github-advanced-security" target="_self" data-ref="cta-banner-component-3BxZa8Pu4K0M08khU7uuIy"><span class="Primer_Brand__Button-module__Button__text___Z3ocU"><span class="Primer_Brand__Text-module__Text___pecHN Primer_Brand__Text-module__Text-font--mona-sans___GpzSG Primer_Brand__Text-module__Text--default___DChoE Primer_Brand__Text-module__Text--200___XAIGT Primer_Brand__Text-module__Text--weight-semibold___Ns19j Primer_Brand__Button-module__Button--label___lUBc0 Primer_Brand__Button-module__Button--label-primary___Leisi">Start your learning pathway</span></span><span class="Primer_Brand__Button-module__Button__trailing-visual___zg8jd"><svg class="Primer_Brand__ExpandableArrow-module__ExpandableArrow___rkfek Primer_Brand__Button-module__Button-arrow___SkJXQ" width="16" height="16" viewBox="0 0 16 16" fill="none" aria-hidden="true" focusable="false" data-testid="Button-expandable-arrow"><path fill="currentColor" d="M7.28033 3.21967C6.98744 2.92678 6.51256 2.92678 6.21967 3.21967C5.92678 3.51256 5.92678 3.98744 6.21967 4.28033L7.28033 3.21967ZM11 8L11.5303 8.53033C11.8232 8.23744 11.8232 7.76256 11.5303 7.46967L11 8ZM6.21967 11.7197C5.92678 12.0126 5.92678 12.4874 6.21967 12.7803C6.51256 13.0732 6.98744 13.0732 7.28033 12.7803L6.21967 11.7197ZM6.21967 4.28033L10.4697 8.53033L11.5303 7.46967L7.28033 3.21967L6.21967 4.28033ZM10.4697 7.46967L6.21967 11.7197L7.28033 12.7803L11.5303 8.53033L10.4697 7.46967Z"></path><path class="Primer_Brand__ExpandableArrow-module__ExpandableArrow-stem___g4mdy" stroke="currentColor" d="M1.75 8H11" stroke-width="1.5" stroke-linecap="round"></path></svg></span></a></section></div></div></section></section></div></main></div></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{"page":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"5E1TPh9dczhImOG9ZLP9HS","type":"Entry","createdAt":"2023-09-22T23:46:28.565Z","updatedAt":"2024-02-22T15:13:31.386Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":9,"revision":3,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"page"}}},"fields":{"path":"/learn/pathways/security","content":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"2bKDhdmEEiWyQ1pWpv23lC","type":"Entry","createdAt":"2023-09-22T23:41:45.383Z","updatedAt":"2023-09-22T23:41:45.383Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":14,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"containerLandingPage"}}},"fields":{"title":"Landing Page for /learn/learning-pathways/security","sections":[{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"63MTChi1eKkSkzAtRwN472","type":"Entry","createdAt":"2023-09-22T23:41:33.429Z","updatedAt":"2023-09-22T23:41:33.429Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":3,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"sectionHero"}}},"fields":{"title":"/learn/learning-pathways/security Hero","hero":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"4BnfDzGNwpTR1ykrG4fjzQ","type":"Entry","createdAt":"2023-09-22T23:41:38.181Z","updatedAt":"2024-10-09T18:40:11.520Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":32,"revision":12,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentHero"}}},"fields":{"title":"/learn/learning-pathways/security Hero","heading":"Secure at every step","text":"Learn how industry experts use GitHub Advanced Security to protect their code without sacrificing developer productivity","callToActionPrimary":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"6HI2CF2apQnpq5LNRGWczb","type":"Entry","createdAt":"2023-09-22T23:40:04.735Z","updatedAt":"2024-10-09T19:04:04.940Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":101,"revision":42,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentCta"}}},"fields":{"title":"\"Start security\" /learn/pathways/security/essentials/essentials-github-advanced-security","text":"Start your learning pathway","link":"https://resources.github.com/learn/pathways/security/essentials/essentials-github-advanced-security","openInNewWindow":false}},"align":"Left"}},"backgroundImage":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"7f9pgRe8iwpqx089sDD7yU","type":"Asset","createdAt":"2023-09-22T23:41:29.005Z","updatedAt":"2023-09-22T23:41:29.005Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":6,"revision":1},"fields":{"title":"Security background","description":"","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/7f9pgRe8iwpqx089sDD7yU/e8a8b5c67a16c69195ce81de391c569f/Security_Thumbnail_Small_616x424px-2_1.png","details":{"size":45074,"image":{"width":616,"height":425}},"fileName":"Security_Thumbnail_Small_616x424px-2 1.png","contentType":"image/png"}}},"theme":"light"}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3OERSjqDdah5bhFzEYKZvz","type":"Entry","createdAt":"2023-09-19T18:16:07.007Z","updatedAt":"2023-09-19T18:16:07.007Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":2,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"sectionProse"}}},"fields":{"internalTitle":"/learn/learning-pathways/security - Prose","prose":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"2IKAn7ffAQKJtt3umHrKqQ","type":"Entry","createdAt":"2023-09-19T17:14:32.046Z","updatedAt":"2024-10-09T18:35:17.338Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":46,"revision":15,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentProse"}}},"fields":{"internalTitle":"/learn/learning-pathways/security - Prose","text":{"data":{},"content":[{"data":{},"content":[{"data":{},"marks":[],"value":"Get secure. Stay secure.","nodeType":"text"}],"nodeType":"heading-2"},{"data":{},"content":[{"data":{},"marks":[],"value":"\nSecurity is paramount for every organization today. But so is innovation. DevSecOps teams need tools that keep users safe without getting in developers' way and impacting time to market. Traditional security reviews can last for months, requiring developers to fix vulnerabilities in older code long after they've moved on to new projects, which disrupts their workflow and necessitates re-familiarizing themselves with past work. In other cases, security can feel like a barrier to getting things done, limiting the sorts of tools and libraries developers can bring to bear on a project. Plus, many security testing tools produce false positives that can block developers from committing their code, or condition them to ignore alerts.","nodeType":"text"}],"nodeType":"paragraph"},{"data":{},"content":[{"data":{},"marks":[],"value":"\n","nodeType":"text"}],"nodeType":"paragraph"},{"data":{},"content":[{"data":{},"marks":[],"value":"GitHub Advanced Security (GHAS) makes shifting left easy. It empowers DevSecOps teams to prioritize innovation and developer productivity while ensuring that security isn’t sacrificed to meet feature delivery timelines. Automated security checks run with every pull request, empowering developers to remediate problems before pushing to production. By placing alerts and, in many cases, solutions right in the development workflow, security issues can be remediated in minutes, instead of months. Tests are highly curated to minimize the risk of false positives. Additionally, GHAS gives security teams visibility into the cross-organizational security posture and supply chain, and unparalleled access to curated security intelligence from millions of developers and security researchers around the world.","nodeType":"text"}],"nodeType":"paragraph"},{"data":{},"content":[{"data":{},"marks":[],"value":"\n","nodeType":"text"}],"nodeType":"paragraph"},{"data":{},"content":[{"data":{},"marks":[],"value":"In these guides, DevSecOps veterans from leading companies share their insights and best practices for getting started with GHAS and tuning it to your organization’s specific needs.","nodeType":"text"}],"nodeType":"paragraph"},{"data":{},"content":[{"data":{},"marks":[{"type":"bold"}],"value":"Nick Liffen","nodeType":"text"},{"data":{},"marks":[],"value":" | ","nodeType":"text"},{"data":{"uri":"https://github.com/nickliffen"},"content":[{"data":{},"marks":[],"value":"@nickliffen","nodeType":"text"}],"nodeType":"hyperlink"},{"data":{},"marks":[],"value":" | Director of Field Services, Security, GitHub","nodeType":"text"}],"nodeType":"paragraph"},{"data":{},"content":[{"data":{},"marks":[],"value":"","nodeType":"text"}],"nodeType":"paragraph"}],"nodeType":"document"}}}}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3LjtOIYY3Ce3QyGUNWO4ce","type":"Entry","createdAt":"2023-09-22T16:28:18.125Z","updatedAt":"2023-09-22T16:28:18.125Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":2,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"sectionLogos"}}},"fields":{"title":"/learn/learning-pathways/security Logos","logos":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"1dXKgspeKqDThwq9ErQefW","type":"Entry","createdAt":"2023-09-22T16:25:42.108Z","updatedAt":"2023-09-22T16:25:42.108Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":4,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentLogos"}}},"fields":{"title":"/learn/learning-pathways/security Logos","logos":[{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"5PU7nfURQqpTP3vPOP2T4o","type":"Asset","createdAt":"2023-06-23T19:25:51.046Z","updatedAt":"2023-06-23T19:25:51.046Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":5,"revision":1},"fields":{"title":"Telus logo","description":"Telus logo","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/5PU7nfURQqpTP3vPOP2T4o/26904203137763bab05798c6d7684fd1/Telus-Logo-trimmy.png","details":{"size":3091,"image":{"width":252,"height":48}},"fileName":"Telus-Logo-trimmy.png","contentType":"image/png"}}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3KAaDSTu44C8lr0W3i3FVe","type":"Asset","createdAt":"2023-03-28T19:20:55.777Z","updatedAt":"2023-09-22T16:24:34.449Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":9,"revision":2},"fields":{"title":"LinkedIn logo","description":"LinkedIn logo","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/3KAaDSTu44C8lr0W3i3FVe/d1133032ec550e7248790467c5d14928/LI-Logo.png","details":{"size":25367,"image":{"width":2212,"height":540}},"fileName":"LI-Logo.png","contentType":"image/png"}}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"h9s3PWlfFGIEOusEddrni","type":"Asset","createdAt":"2023-09-22T16:25:08.710Z","updatedAt":"2023-09-22T16:25:08.710Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":5,"revision":1},"fields":{"title":"KPMG logo ","description":"KPMG logo","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/h9s3PWlfFGIEOusEddrni/dccbf63a47cf936d33a5cd06170f1644/KPMG-CMYK.png","details":{"size":66629,"image":{"width":3938,"height":1582}},"fileName":"KPMG-CMYK.png","contentType":"image/png"}}}]}}}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"2PoVxhGAenVbiTy204wzdb","type":"Entry","createdAt":"2023-09-22T23:41:21.605Z","updatedAt":"2023-09-22T23:41:21.605Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":5,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"sectionRivers"}}},"fields":{"title":"/learn/learning-pathways/security Rivers","rivers":[{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"1YGCaaH0EvuFVOXWMS8eWC","type":"Entry","createdAt":"2023-09-22T23:41:00.120Z","updatedAt":"2024-10-09T18:13:31.079Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":32,"revision":12,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentRiver"}}},"fields":{"title":"/learn/learning-pathways/security River - Essentials of GitHub Advanced Security","heading":"Essentials of GitHub Advanced Security","text":"Your security journey starts with a few clicks. Learn how to automate your application security testing and remediation with GitHub Advanced Security.","callToAction":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3JwUx4kcPxWx5u3xCAAoUp","type":"Entry","createdAt":"2023-09-22T23:40:57.091Z","updatedAt":"2024-10-09T19:06:21.071Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":100,"revision":41,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentCta"}}},"fields":{"title":"\"Shift left now\" /learn/pathways/security/essentials/essential-github-advanced-security/","text":"Begin with the basics","link":"https://resources.github.com/learn/pathways/security/essentials/essentials-github-advanced-security/","openInNewWindow":false}},"media":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"2xDeRgVpaEOk10fSEsHc7a","type":"Asset","createdAt":"2023-09-22T23:40:51.158Z","updatedAt":"2023-09-22T23:40:51.158Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":6,"revision":1},"fields":{"title":"Guards guarding a castle","description":"Guards guarding a castle","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/2xDeRgVpaEOk10fSEsHc7a/57a0dc2e18d2620d36b7d84bea5d98fa/L100_HeroArt_Tim__1__1__5_.png","details":{"size":467732,"image":{"width":600,"height":360}},"fileName":"L100_HeroArt_Tim__1_ 1 (5).png","contentType":"image/png"}}},"align":"start","imageTextRatio":"50:50"}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"1Gie0NuP7brQKzvtsBor64","type":"Entry","createdAt":"2023-09-22T23:41:17.444Z","updatedAt":"2024-10-09T18:13:34.906Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":36,"revision":12,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentRiver"}}},"fields":{"title":"/learn/learning-pathways/security River - Intermediate guides to GitHub Advanced Security","heading":"Intermediate guides to GitHub Advanced Security","text":"Build beyond the basics and configure GitHub Advanced Security to meet the specific needs of your organization with custom configurations, third-party integrations, and more.\n","callToAction":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"1T6O4jcQyXbWeJTBZ1UFde","type":"Entry","createdAt":"2023-09-22T23:41:14.146Z","updatedAt":"2024-10-09T19:06:23.544Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":91,"revision":41,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentCta"}}},"fields":{"title":"\"Shift left now\" /learn/pathways/security/intermediate/intermediate-guides-github-advanced-security/","text":"Continue your journey","link":"https://resources.github.com/learn/pathways/security/intermediate/intermediate-guides-github-advanced-security/","openInNewWindow":false}},"media":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3W0otC0pmWXu4E69Ie93nc","type":"Asset","createdAt":"2023-09-22T23:41:08.424Z","updatedAt":"2023-09-22T23:41:08.424Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":6,"revision":1},"fields":{"title":"Cartoon rock climber using proper security techniques while climbing a rock wall","description":"Cartoon rock climber using proper security techniques while climbing a rock wall","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/3W0otC0pmWXu4E69Ie93nc/f46a34f077f1adac472339bb21f16530/L100_HeroArt_Tim__1__1__6_.png","details":{"size":556778,"image":{"width":600,"height":360}},"fileName":"L100_HeroArt_Tim__1_ 1 (6).png","contentType":"image/png"}}},"align":"end","imageTextRatio":"50:50"}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"5jI89jLmPywPwbcn5VGpbE","type":"Entry","createdAt":"2023-09-22T23:40:42.325Z","updatedAt":"2024-10-09T18:13:27.242Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":33,"revision":12,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentRiver"}}},"fields":{"title":"/learn/learning-pathways/security River - Advanced guides to GitHub Advanced Security","heading":"Advanced guides to GitHub Advanced Security","text":"Dive into advanced functionality, such as central management, supply chain security testing configuration, and automated software-bill-of-materials generation.\n","callToAction":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"6wN2frA9ZGWsq9PahPgI2Z","type":"Entry","createdAt":"2023-09-22T23:40:38.984Z","updatedAt":"2024-10-09T19:06:18.582Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":90,"revision":41,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentCta"}}},"fields":{"title":"\"Shift left now\" /learn/pathways/security/advanced/advanced-module-github-advanced-security/","text":"Become the expert","link":"https://resources.github.com/learn/pathways/security/advanced/advanced-module-github-advanced-security/","openInNewWindow":false}},"media":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"547u8R29yNzeb7sBAOMqIL","type":"Asset","createdAt":"2023-09-22T23:40:33.232Z","updatedAt":"2023-09-22T23:40:33.232Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":6,"revision":1},"fields":{"title":"Three guards guarding art in a museum","description":"Three guards guarding art in a museum","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/547u8R29yNzeb7sBAOMqIL/b529a3f1b90ff7af9f584c87de882324/L100_HeroArt_Tim__1__1__1_.png","details":{"size":467135,"image":{"width":600,"height":360}},"fileName":"L100_HeroArt_Tim__1_ 1 (1).png","contentType":"image/png"}}},"align":"start","imageTextRatio":"50:50"}}]}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"5lHlBL5nIsYNVxuEb9vPcY","type":"Entry","createdAt":"2023-09-22T23:40:21.582Z","updatedAt":"2024-08-05T16:25:21.559Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":66,"revision":32,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"sectionTestimonials"}}},"fields":{"title":"/learn/pathways/security - Quote","heading":"/learn/pathways/security - Quote","testimonials":[{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"5WK6hJDpD9Ytlj9k8Ltx3G","type":"Entry","createdAt":"2023-09-22T23:40:18.569Z","updatedAt":"2024-10-09T15:34:21.192Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":85,"revision":36,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentTestimonial"}}},"fields":{"quote":"It’s easy to add tools but never check the results. By pulling everything into one place, GitHub Advanced Security makes it easy to benefit from all our different tools.","name":"Phil Wright-Christie","jobTitle":"Lead DevOps Engineer // KPMG","image":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3UeWgAdeBB9vCLhzJ45qZn","type":"Asset","createdAt":"2023-09-22T22:40:20.821Z","updatedAt":"2023-09-22T22:40:20.821Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":4,"revision":1},"fields":{"title":"Phil Wright-Christie","description":"Phil Wright-Christie","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/3UeWgAdeBB9vCLhzJ45qZn/ccce707b14d2b44737cd0c347960bf86/Untitled_2__3_.png","details":{"size":7650,"image":{"width":100,"height":100}},"fileName":"Untitled 2 (3).png","contentType":"image/png"}}}}}]}},{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"39ep37lL6Hrqn7hK1G8BTA","type":"Entry","createdAt":"2023-09-22T23:40:10.757Z","updatedAt":"2023-09-22T23:40:10.757Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":3,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"sectionCtaBanner"}}},"fields":{"title":"/learn/learning-pathways/security CTA banner","ctaBanner":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3BxZa8Pu4K0M08khU7uuIy","type":"Entry","createdAt":"2023-09-22T23:40:08.094Z","updatedAt":"2024-10-09T19:15:34.155Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":31,"revision":12,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentCtaBanner"}}},"fields":{"title":"/learn/learning-pathways/security CTA banner","heading":"Shift left with a few clicks","text":{"data":{},"content":[{"data":{},"content":[{"data":{},"marks":[],"value":"Learn how to unlock the power of GitHub Advanced Security to safeguard your code at every step of development.","nodeType":"text"}],"nodeType":"paragraph"}],"nodeType":"document"},"callToActionPrimary":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"6HI2CF2apQnpq5LNRGWczb","type":"Entry","createdAt":"2023-09-22T23:40:04.735Z","updatedAt":"2024-10-09T19:04:04.940Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":101,"revision":42,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"primerComponentCta"}}},"fields":{"title":"\"Start security\" /learn/pathways/security/essentials/essentials-github-advanced-security","text":"Start your learning pathway","link":"https://resources.github.com/learn/pathways/security/essentials/essentials-github-advanced-security","openInNewWindow":false}},"align":"center","hasBorder":true,"hasBackground":true,"hasShadow":true}}}}]}},"seo":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"2lYV9GuiZbin7s5GqCrMdp","type":"Entry","createdAt":"2023-09-26T13:21:37.665Z","updatedAt":"2023-09-26T13:21:37.665Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":2,"revision":1,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"seo"}}},"fields":{"metaImage":{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"2c5pvD8RaUBtqrcEULhGV9","type":"Asset","createdAt":"2023-09-26T13:19:26.143Z","updatedAt":"2023-10-12T19:48:14.583Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":18,"revision":4},"fields":{"title":"SEO image","description":"GitHub logo Learning Pathways with swirling multicolored shapes","file":{"url":"//images.ctfassets.net/wfutmusr1t3h/2c5pvD8RaUBtqrcEULhGV9/05d3a8abb0117edb962d6a5b0507b275/PrimaryLP_1200x630px_2x.png","details":{"size":2310407,"image":{"width":2400,"height":1261}},"fileName":"PrimaryLP_1200x630px@2x.png","contentType":"image/png"}}}}},"topics":[{"metadata":{"tags":[],"concepts":[]},"sys":{"space":{"sys":{"type":"Link","linkType":"Space","id":"wfutmusr1t3h"}},"id":"3eooBSzENNTxGyphoW95TR","type":"Entry","createdAt":"2024-01-11T21:00:28.899Z","updatedAt":"2024-11-21T18:58:04.176Z","environment":{"sys":{"id":"master","type":"Link","linkType":"Environment"}},"publishedVersion":142,"revision":73,"contentType":{"sys":{"type":"Link","linkType":"ContentType","id":"topic"}}},"fields":{"slug":"security","label":"Security"}}]}},"path":"/learn/pathways/security","indexData":null,"type":"containerLandingPage","featureFlags":{"featureEnabledNewFormsService":false,"featureEnabledNewAppNavigation":true,"featureEnableSearch":false},"config":{"formsEndpoint":"https://marketing-forms-api.github.com/"}},"__N_SSP":true},"page":"/[...path]","query":{"path":["learn","pathways","security"]},"buildId":"ZokmF09g2SkORXwoG0TZr","isFallback":false,"isExperimentalCompile":false,"gssp":true,"locale":"en-US","locales":["en-US","ja","pt-BR","es-419","ko-KR"],"defaultLocale":"en-US","scriptLoader":[]}</script><div id="ghcc" style="position:sticky;bottom:0;z-index:99999"></div></body></html>