BloomTech’s Downfall: A Long Time Coming

Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

How to Secure Your GitHub Actions

NDC Conferences via YouTube

Start learning Write review

Overview

This course aims to teach DevOps engineers using GitHub Actions how to enhance the security of their workflows. By covering aspects such as access control, secrets management, best practices for code and repository security, and utilizing self-hosted runners, participants will learn how to improve their security stance without hindering their DevOps processes. The course employs a hands-on approach, providing practical recommendations and best practices for securing GitHub Actions.

Syllabus

GitHub Actions Security
What are GitHub workflows?
Workflow example
Repository security
Code - Who has access?
Configuring access
From the user
Workflow secrets
Who has access to your secrets?
Your code - Best practices
Your code/repo – trace changes (org level)
Self-hosted runners
Self hosted runners
Workflow Runners Security
Best practice: Run the action inside of a container
Persisting data between runs
Workflow runners - Best practice
Protective measures
Recommendation
Forking actions
Enable DevOps teams to test actions
Staying up to date
Create an update process yourself
Automate the update Use a workflow
Best practices summarized

Taught by

NDC Conferences

Reviews

Start your review of How to Secure Your GitHub Actions

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.