This course will show you how to build, host, and maintain a secure repository on GitHub. By following simple security best practices, you can rest easy knowing your project is secure for contributors and contributions today and in the future.
Collaboration is key to building great software. As you welcome more contributions, keeping your project secure becomes more important than ever.
In this course, you’ll learn how to:
You'll be able to answer questions like:
Our Octocat memory game is a fun simple project for you to work with as you learn security strategies.
We assume you know GitHub concepts before you start this course. If you need a review, try out Introduction to GitHub. We assume you understand what a package and package manager or dependency manager is.
This is a great course for anyone who has a GitHub repository, public or private. These practices will help keep your project safe. This is also a great course for anyone who wants to start a new project on GitHub.
Enable settings in your repository for the next activities.
Find the vulnerable dependency, and comment with the suggested update version.
Edit the file in the pull request to update the dependency.
Merge the pull request you've opened to update the vulnerability dependency.
.gitignore file is ready to be edited in an open pull request. Add the
.env file to the
Merge the second pull request with updates to the
All public courses on Learning Lab are free.