From the course: GitHub Actions Cert Prep by Microsoft Press

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Add environment protections

Add environment protections - GitHub Tutorial

From the course: GitHub Actions Cert Prep by Microsoft Press

Start my 1-month free trial Buy for my team

Add environment protections

“

- [Instructor] When I first saw this certification objective, I was confused, because environment can be a slippery word. Earlier, I'd mentioned the slipperiness of some words in GitHub actions land. That's certainly true. Well, this is another one. The idea of environment protections is what you and your team are doing to enforce security and control access to sensitive data in your repository. There's RBAC, role-based access control. There's also least privileged security. That's what I'm talking about here, and that's what the exam's talking about, specifically by using secrets that you're going to learn in this demo finally how they work at the environment level, but we can also have repository-level secrets, so you can use the secrets in different contexts when you use environments. You should use masking to obfuscate sensitive data in logs. These are just tips. And potentially, if you're already bought into a third-party secret store, that's fine, but it sure is convenient to be…

Contents