Build skills and knowledge about GitHub's security and code quality features through examples and hands-on activities.
Secure your secrets at scale with GitHub
Leaked credentials expose your organization to data breaches. GitHub Secret Protection detects and prevents secret leaks automatically. Follow this five-phase adoption path to assess your current risk, evaluate GitHub Secret Protection, run a pilot, monitor its value, and scale protection across your organization.
Improve code quality at scale with GitHub
Inconsistent code quality slows every team down and adds risk you can't easily see. GitHub Code Quality catches issues before they merge and reports on code health across your organization. Follow this adoption path to evaluate the feature, run a pilot, prove its value, and roll it out at scale.
Trialing GitHub Advanced Security
Determine how you can meet your security goals using GitHub Secret Protection and GitHub Code Security.
Build skills to help you prevent vulnerabilities and address alerts in your organization.
Learn how to identify and remediate leaked secrets in your codebase.
Secret scanning partner program
As a service provider, you can partner with GitHub to have your secret token formats secured through secret scanning, which searches for accidental commits of your secret format and can be sent to a service provider's verify endpoint.
Learn how to customize code scanning to meet your project's unique security needs by creating and using CodeQL packs and custom queries.
Build skills to help you keep your dependencies up to date and protected from vulnerabilities using automated tools and workflows.
Implement supply chain best practices
How to think about securing your user accounts, your code, and your build process
Build skills and knowledge about GitHub's security and code quality features through examples and hands-on activities.
Improving the quality of your code
Build skills and knowledge about GitHub Code Quality through examples.
Fixing reported vulnerabilities
Build skills in collaborating on fixing security vulnerabilities in repositories.