<< Prev Question Next Question >>

Question 10/32

As a contributor, you discovered a vulnerability in a repository. Where should you look for the instructions on how to report the vulnerability?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (32q)
Question 1: Assuming that notification settings and Dependabot alert rec...
Question 2: Where can you use CodeQL analysis for code scanning? (Each a...
Question 3: Which security feature shows a vulnerable dependency in a pu...
Question 4: When using CodeQL, what extension stores query suite definit...
Question 5: Which Dependabot configuration fields are required? (Each an...
Question 6: The autobuild step in the CodeQL workflow has failed. What s...
Question 7: What does a CodeQL database of your repository contain?...
Question 8: Which of the following formats are used to describe a Depend...
Question 9: Which details do you have to provide to create a custom patt...
Question 10: As a contributor, you discovered a vulnerability in a reposi...
Question 11: How many alerts are created when two instances of the same s...
Question 12: Which of the following workflow events would trigger a depen...
Question 13: As a repository owner, you want to receive specific notifica...
Question 14: Which of the following information can be found in a reposit...
Question 15: Which of the following Watch settings could you use to get D...
Question 16: Which of the following is the best way to prevent developers...
Question 17: A dependency has a known vulnerability. What does the warnin...
Question 18: When using CodeQL, how does extraction for compiled language...
Question 19: What should you do after receiving an alert about a dependen...
Question 20: Which of the following tasks can be performed by a security ...
Question 21: What is required to trigger code scanning on a specified bra...
Question 22: If default code security settings have not been changed at t...
Question 23: Which of the following secret scanning features can verify w...
Question 24: Why should you dismiss a code scanning alert?...
Question 25: How would you build your code within the CodeQL analysis wor...
Question 26: Which of the following benefits do code scanning, secret sca...
Question 27: Assuming security and analysis features are not configured a...
Question 28: A secret scanning alert should be closed as "used in tests" ...
Question 29: Assuming there is no custom Dependabot behavior configured, ...
Question 30: When using the advanced CodeQL code scanning setup, what is ...
Question 31: If notification and alert recipients are not customized, whi...
Question 32: Which of the following statements best describes secret scan...