GH-500 · Question #89
How does GitHub Advanced Security (GHAS) help integrate security into each step of the software development life cycle?
The correct answer is B. By automating security checks with every pull request, surfacing issues in the context of the. GHAS embeds security into the SDLC by automating security checks on every pull request, surfacing findings in the code review context so developers can remediate issues before merging.
Question
How does GitHub Advanced Security (GHAS) help integrate security into each step of the software development life cycle?
Options
- ABy providing a comprehensive dashboard summarizing the security status of the repository.
- BBy automating security checks with every pull request, surfacing issues in the context of the
- CBy generating alerts for outdated dependencies in a project.
- DBy providing access to curated security intelligence from millions of developers and security
How the community answered
(24 responses)- B96% (23)
- D4% (1)
Why each option
GHAS embeds security into the SDLC by automating security checks on every pull request, surfacing findings in the code review context so developers can remediate issues before merging.
A summary security dashboard provides visibility into the repository's overall posture but does not describe how GHAS actively integrates into each step of the development lifecycle.
GHAS integrates security at each SDLC stage primarily by triggering automated code scanning, secret scanning, and dependency review checks on every pull request, presenting results as inline annotations and check statuses - this shifts security left by making it a natural part of the code review process rather than a post-deployment concern.
Generating alerts for outdated dependencies is a Dependabot-specific function and represents only one narrow aspect of GHAS, not the overarching mechanism by which GHAS integrates security across the SDLC.
Providing access to curated security intelligence describes the GitHub Advisory Database, which is a data source consumed by GHAS features rather than the mechanism by which GHAS integrates into the SDLC.
Concept tested: GHAS shift-left security integration across the software development lifecycle
Source: https://docs.github.com/en/code-security/getting-started/github-security-features
Topics
Community Discussion
No community discussion yet for this question.