GH-100 GitHub Administration Questions and Answers

Only organization-level rulesets are enforced over repository-level ones

All applicable rulesets will be evaluated, and their combined rules enforced

Only the most recently created ruleset will be enforced

Rulesets will override each other, leading to unpredictable behavior

Enterprise policies and organization policies are independent, with organization policies taking precedence for repositories within the organization.

Enterprise policies configure mandatory settings for organizations.

Enterprise policies apply only to public repositories, while organization policies apply to public, internal, and private repositories.

Enterprise policies can block specific actions, while organization policies can only enable or disable actions entirely.

Disabling the audit log stream

Setting an infrequent sync schedule to reduce performance impact

Allowing manual updates to team memberships

Clearly define how identity provider groups will align with GitHub teams and roles

Group SCIM requires less initial configuration than Team Sync.

Team Sync supports more identity providers than Group SCIM.

Team Syncprovides more automated user deprovisioningthan Group SCIM.

Group SCIM enablescentralized user and group management through the IdP.

It waits for manual triage of all CVEs.

It uses the dependency graph and Dependabot alerts to open PRs for patched versions.

It reads the GitHub Issues and automatically suggests fixes.

It compares your codebase to the GitHub Trending list.

Automatically removes unused users from billing

Enables tracking of GitHub Copilot usage byuser

Allows self-service plan upgrades

Offers real-time Slack alerts for billing

The user will automatically have the same role across all organizations.

The user's repository access and/or team membership needs to be managed separately for each organization.

The user will need to authorize credentials separately for each SAML-enabled organization.

The user will have different permission levels in each organization.

The user's profile information becomes private to non-organization members.

The user's personal repositories will become accessible to all organizations.

GitHub-hosted larger runners with Azure private networking

GitHub-hosted standard runners, using the IP addresses provided in "actions" from https://api.github.com/meta

GitHub-hosted standard runners, using the IP addresses provided in "api" from https://api.github.com/meta

GitHub-hosted larger runners with static IP addresses

writing scripts.

installing GitHub Enterprise Server.

setting up hardware.

integrating with third-party applications.

Each API action made with the token generates a separate audit log entry

Only the first repository accessed is recorded

GitHub creates a ZIP archive of all token activity

The audit log stores only the token name and not its actions

ssh -p 122 adming@ghe.avocado.corp -- 'ghe-support-bundle -o' > support-bundle.tgz

ssh -p 122 adming@ghe.avocado.corp – 'ghe-diagnostics' > support-bundle.tgz

curl -u admin https://ghe.avocado.corp/diagnostics/support-bundle.tgz -o

ssh -p 122 adming@ghe.avocado.corp -- 'ghe-config generate-support-bundle' > support-bundle.tgz

Marketplace actions are allowed only with SSO enabled

Actions can only be triggered by organization members

Only actions created within the enterprise are allowed

All public actions are allowed

Maintain clear documentation of existing policies and policy changes.

Implement the new enterprise policies across the organization first and then consult with the security team to identify- any necessary adjustments or retrofits

Implement changes without consulting stakeholders.

Regularly assess and adjust policies based on evolving risks.

They guarantee no downtime during enterprise GitHub maintenance windows

They often include integrations with external services, reducing the need for custom code

Apps eliminate the need for GitHub Actions entirely

All apps come pre-approved by GitHub's internal security team

Git LFS bandwidth

GitHub Actions minutes

GitHub Discussions engagement

GitHub Packages storage

helps organization administrators analyze and configure permissions to the least privilege required

helps developers improve and maintain the security and quality of code

helps enterprise administrators improve and maintain network security for their GitHub Enterprise Server instances

helps organization administrators manage security tokens