GitHub Advanced Security Training Website
Use this site to prep your team for Microsoft’s Level 300 GHAS class, with a focus on C#, .NET, and Blazor. It includes account setup steps, feature overviews, labs, and an intentionally vulnerable .NET playground repo.
What you’ll learn
- How GHAS fits into a modern DevSecOps pipeline for .NET teams
- How CodeQL finds vulnerabilities (and how to triage alerts)
- How to use Dependabot and dependency review effectively
- How secret scanning helps prevent credential leaks
- How to practice safely using an intentionally vulnerable .NET playground repo
Recommended path
Key focus areas (Level 300)
Code ScanningCodeQL queries, alert triage, PR gating
DependenciesDependabot alerts, updates, policy
SecretsLeak prevention, response workflow
Tip: Use the search box to filter sections on the current page.