– [Describe GitHub Advanced Security Best Practices] Which of the following benefits do code scanning, secret scanning, and dependency review provide?

GitHub Advanced Security (GHAS) is a suite of security features. The question specifically asks about three of its core components:

1. Code scanning analyzes your code to find security vulnerabilities and coding errors.

2. Secret scanning detects secrets, such as API keys and tokens, that have been checked into the repository.

3. Dependency review allows you to visualize dependency changes and their security impact directly within a pull request, helping you understand the full effect before merging.

Option A accurately summarizes the primary function of each of these three distinct features.

B. This describes private vulnerability reporting, a feature that allows security researchers to disclose vulnerabilities to repository maintainers confidentially, which is separate from the listed GHAS tools.

C. This describes Dependabot alerts, which notify you about existing dependencies with known vulnerabilities in your repository, but it doesn't cover code scanning or secret scanning.

D. This describes Dependabot security and version updates, which automatically create pull requests to update dependencies, a different function from the three features mentioned in the question.

1. GitHub Docs

"About GitHub Advanced Security." This document provides an overview

stating

"GitHub Advanced Security features are available for enterprise accounts on GitHub Enterprise Cloud and GitHub Enterprise Server... [It] provides additional features... such as code scanning

secret scanning

and dependency review."

Source: https://docs.github.com/en/get-started/learning-about-github/about-github-advanced-security

2. GitHub Docs

"About code scanning." Section: "About code scanning." It states

"Code scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors."

Source: https://docs.github.com/en/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning

3. GitHub Docs

"About secret scanning." Section: "About secret scanning." It explains

"Secret scanning helps protect you by searching repositories for known types of secrets... GitHub scans the content for secrets."

Source: https://docs.github.com/en/code-security/secret-scanning/about-secret-scanning

4. GitHub Docs

"About dependency review." Section: "What is dependency review?" It details

"Dependency review helps you understand dependency changes and the security impact of these changes at every pull request... You can clearly see what's changed in a pull request."

Source: https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review