GH-100 Question #22: Real Exam Question with Answer & Explanation

Question

Which of the following accurately contrasts a GitHub App and a GitHub Action?

Options

• AGitHub Apps can only be used inside .github/workflows
• BGitHub Actions are limited to reading repository content only
• CGitHub Apps run only on GitHub-provided virtual machines, while GitHub Actions run only on
• DGitHub Actions can only be used to respond to events within a single repository while GitHub Apps

Explanation

Option D is correct because GitHub Actions workflows are scoped to the repository where they are defined - they respond to events (push, pull_request, etc.) within that single repo. GitHub Apps, by contrast, are installable integrations that can be granted access to multiple repositories or an entire organization, making them suited for cross-repository tooling (e.g., bots, code quality services).

Why the distractors are wrong:

• A is backwards - .github/workflows is where Actions are defined, not GitHub Apps. Apps are installed as integrations, not stored in workflow files.
• B is false - GitHub Actions can write to repos, create issues, trigger deployments, publish packages, and more via the GITHUB_TOKEN and other credentials.
• C reverses reality - Actions run on GitHub-provided (or self-hosted) virtual machines/runners. GitHub Apps are external web services that receive webhook payloads; they don't "run on" GitHub's VMs.

Memory tip: Think Actions = Automation within one repo (a workflow file you commit), and Apps = Account-level integrations across repos (something you install like a marketplace plugin). The scope difference - single repo vs. multi-repo - is the key exam signal.

No community discussion yet for this question.