nerdexam
Microsoft

GH-500 · Question #102

By default, what is the minimum role needed to bypass push protection in a repository?

The correct answer is D. Write. By default, any user with at least the Write role on a repository can bypass push protection when a secret is detected during a push. Users with Write, Maintain, or Admin roles are all permitted to override the block by providing a reason (e.g., it's a test credential, it's a…

Configure and use secret scanning

Question

By default, what is the minimum role needed to bypass push protection in a repository?

Options

  • AMaintain
  • BAdmin
  • CTriage
  • DWrite

How the community answered

(34 responses)
  • B
    3% (1)
  • C
    6% (2)
  • D
    91% (31)

Explanation

By default, any user with at least the Write role on a repository can bypass push protection when a secret is detected during a push. Users with Write, Maintain, or Admin roles are all permitted to override the block by providing a reason (e.g., it's a test credential, it's a false positive). Read and Triage roles do not have this capability. Organization administrators can restrict bypass permissions further, requiring higher roles or manager approval, but Write is the default minimum.

Topics

#Push protection#Repository roles#GitHub permissions#Secret scanning

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice