Summary

Completed

In this module, we talked about the importance of securing and maintaining a GitHub repository.

You learned about:

• The importance of securing your repository and shifting left in the development lifecycle.
• Security features and best practices within a GitHub repository.
• Detection of outdated dependencies with security vulnerabilities.
• How to add a .gitignore file to a repository.
• Advanced security features such as code scanning and secret scanning.

Now that you're familiar with security best practices, learn to Automate DevOps processes by using GitHub Apps.

Learn more

Here are some links to more information on the topics we discussed in this module.

• Viewing and updating Dependabot alerts
• Dependabot official site
• Security apps on GitHub Marketplace
• Adding a security policy to your repository
• Ignoring files
• Removing sensitive data from a repository