GH-900 Exam Dumps - Microsoft GitHub Administrator Questions and Answers

GitHub Secret Scanning helps protect repositories by detecting committed credentials and other sensitive values that should not be exposed in source code. SSH private keys are sensitive because they can allow unauthorized access to servers or repositories. API keys are also critical because they can grant access to external services, cloud platforms, or applications. Database connection strings may expose usernames, passwords, hosts, or database endpoints, making them dangerous if leaked. Secret Scanning is designed to identify these kinds of credential patterns and alert repository maintainers or security teams. Hardcoded email addresses are usually not treated as secrets, and code formatting issues are handled by linters or code quality tools, not Secret Scanning.

GitHub supports special closing keywords that connect a pull request to an issue and automatically close the issue when the pull request is merged into the default branch. Examples include keywords such as “fixes,” “closes,” or “resolves,” followed by the issue number. Using a reference like Fixes #42 in the pull request description tells GitHub that the pull request resolves that issue. Assigning the issue to the pull request author does not create automatic closure behavior. Mentioning the issue after merging may create a reference, but it does not automatically close the issue retroactively. Adding the issue number to the pull request title may help humans understand the relationship, but the supported automatic closing behavior depends on the keyword reference.

As mentioned in the answer to Question no. 66, GitHub Actions workflows can reference actions from a variety of sources:

Any Public Repository:

Option A is correct. Actions can be sourced from any public GitHub repository.

The Same Repository as Your Workflow File:

Option B is correct. Actions within the same repository as the workflow file can be referenced directly.

A Published Docker Container Image on Docker Hub:

Option E is correct. Workflows can also use actions provided as Docker container images from Docker Hub.

Incorrect Options:

Option C and D are not relevant for directly referencing actions in workflows.

In GitHub, labels are used to categorize issues and pull requests, and certain default labels are provided to help manage tasks:

Help Wanted Label:

Option C is correct. The " Help wanted " label is used to indicate that the maintainer of the repository needs assistance on a particular issue or pull request. This label helps in attracting contributors who might be interested in helping with specific tasks.

Other Options:

Option A ( " Enhancement " ) is incorrect because it indicates a request for a new feature or improvement rather than a call for help.

Option B ( " Question " ) is incorrect because it is used to flag issues or pull requests that seek clarification or additional information, not necessarily requiring assistance.

Option D ( " Documentation " ) is incorrect because it labels issues or PRs related to documentation, not for seeking help.

The primary benefits of using GitHub issues templates include:

A. To automatically label or assign newly created issues : Issue templates can be configured to automatically apply labels or assign users when the issue is created, helping to streamline triage and management processes.

B. To provide an easy-to-fill-out form for creating new issues : Templates provide a standardized format for submitting issues, ensuring that all necessary information is captured and reducing the need for follow-up questions.

Coercing existing issues into a standard format or automatically creating new branches when issues are created are not functions provided by GitHub issues templates.

=================

For private repositories on GitHub, the Wiki is accessible to anyone who has Read access to the repository. This means that if you can view the code and files in the repository, you can also view its Wiki. This makes Wikis a useful tool for documenting projects in a way that is available to all collaborators without requiring special permissions beyond those needed to access the repository itself.

=================

The qualifier mentions: is used in GitHub ' s search functionality to find issues that mention a certain user. For example, if you want to find all issues where a specific user is mentioned, you would use mentions:username . This helps in tracking where a user has been involved in discussions across issues or pull requests.

=================