Free Practice Questions for GitHub GitHub-Advanced-Security Exam

To exclude specific files or directories from being scanned by secret scanning in GitHub Actions, you can use thepaths-ignore:key within your YAML workflow file.

This tells GitHub toignore specified pathswhen scanning for secrets, which can be useful for excluding test data or non-sensitive mock content.

Other options listed are invalid:

branches-ignore: excludes branches, not files.

decrypt_secret.sh is not a YAML key.

secret scanning.yml is not a recognized filename for configuration.

Secrets committed and then deleted are still accessible in therepository’s Git history. To locate them, navigate to theCommitstab. GitHub's secret scanning can detect secrets in both current and historical commits, which is why remediation should also includerevoking the secret, not just removing it from the latest code.