Knowledge checks for the Quiz Github Actions training path, in English
859 questions in the bank 59 topics 59 linked guides
How this exam works Questions drawn at random from the whole bank, shuffled answers, no time limit, explanations when graded.
An exam draws from the whole bank (859 questions, 59 topics) and gives a result per topic, whereas a lesson quiz only checks that lesson. The level sets the number of questions; the duration shown is an estimate, no timer stops the exam. Every draw is different: retaking the same level does not bring back the same questions.
Random: questions drawn at random
Shuffled: answers reordered
No limit: take your time
Explanations: links to the docs
Choose your level
Questions are drawn at random on every attempt: you can retake the same level without getting the same questions.
Related documentation
Read these pages to go deeper before or after the quiz:
- act: running GitHub Actions workflows locally
- actionlint: validating your GitHub Actions workflows
- Promoting an artifact: build once, deploy twice
- GitHub Actions environments: targeting a deployment
- Lab: promoting an approved deployment
See the 54 other pages
- GitHub deployment protection rules
- GitHub releases and GHCR images: publishing what you deploy
- Rollback and deployment concurrency in GitHub Actions
- GitHub Actions Marketplace: evaluating third-party actions
- GitHub Actions secrets and configuration
- First security reflexes for GitHub Actions workflows
- What is a GitHub Actions workflow?
- GitHub CLI (gh): managing GitHub from the terminal
- Restricting the allowed actions in an organisation
- CODEOWNERS: enforcing a review on your workflows
- GitHub rulesets: protecting the branch that carries your workflows
- Runner groups: bounding what a run can reach
- Artifacts vs Cache: making the right choice
- GitHub Actions Artifacts: sharing files between jobs
- Java, Maven and Gradle caching in GitHub Actions
- Node.js and npm caching in GitHub Actions
- Python and pip caching in GitHub Actions
- GitHub Actions cache: speeding up your workflows
- GitHub Actions concurrency: avoiding parallel runs
- Debugging GitHub Actions workflows
- Ephemeral GitHub Actions runners
- GitHub-hosted versus self-hosted runners
- Isolating GitHub Actions runners
- Maintaining self-hosted runners
- Securing self-hosted runners
- GitHub Actions attestations
- GitHub Actions workflow security checklist
- Hardening GitHub Actions runners with Harden-Runner
- Bootstrapping a secure GitHub repository
- Hardened CI pipeline: passing the four scanners
- Branch protection and governance
- Scoring and hardening: the 19 Scorecard checks
- Verifiable build: SLSA provenance, SBOM and signature
- GitHub Actions OIDC: AWS, Azure, GCP
- GitHub Actions OIDC: authentication without secrets
- GitHub Actions permissions: the GITHUB_TOKEN
- Pinning actions by SHA
- Scanning your CI/CD pipelines with poutine
- Securing pull_request_target
- Maintaining SHA-pinned actions at scale
- Supply chain attacks on GitHub Actions: real cases and protections
- Threat modelling a GitHub Actions workflow
- Verifying GitHub attestations
- Auditing your GitHub Actions workflows with zizmor
- Composite actions in GitHub Actions
- Conditions and if in GitHub Actions
- Contexts and expressions in GitHub Actions
- Matrix strategy in GitHub Actions
- needs and job outputs: modelling a pipeline as a graph
- Reusable workflows in GitHub Actions
- Service containers and job containers
- GitHub Actions triggers: events and filters
- Variables and secrets in GitHub Actions
- Plumber: securing your GitLab CI and GitHub Actions pipelines
Topics covered
docs pipeline cicd gitlab outils plumber 25
fondations workflow 15
optimiser cache 15
runners ephemeres 15
securite lab pipeline ci 15
securite pull request target 15
workflows matrix strategy 15
fondations securite bases 15
See the 51 other topics
optimiser artifacts vs cache 15
runners isolation 15
securite lab protection gouvernance 15
securite oidc 15
workflows reusable workflows 15
fondations secrets 15
optimiser cache python 15
runners maintenance 15
securite lab scoring durcissement 15
securite oidc cloud 15
workflows composite actions 15
fondations marketplace 15
gh cli 15
optimiser cache node 15
securite attestations 15
securite pinner sha 15
act 15
optimiser cache java 15
securite attaques supply chain 15
securite verifier attestations 15
workflows contexts expressions 15
actionlint 15
optimiser concurrency 15
securite checklist 15
securite zizmor 15
optimiser debug 15
runners hosted vs self hosted 15
securite lab bootstrap 15
securite poutine 15
optimiser artifacts 15
runners securiser 15
securite lab build verifiable 15
securite permissions 15
workflows conditions if 15
workflows variables secrets 15
workflows declencheurs 15
securite maintenance sha 14
securite harden runner 14
securite threat model 14
deployer lab promotion 13
workflows needs outputs 13
workflows services conteneurs 13
deployer promotion artefact 12
deployer releases packages 12
deployer rollback 12
gouvernance rulesets 12
deployer environments 12
gouvernance codeowners 12
deployer protection rules 12
gouvernance actions autorisees 12
gouvernance runner groups 12