Skip to content
GH-500
Configure and use Code Scanning with CodeQL
medium
Question 5 of 49

Which prerequisite combination makes a repository eligible for code scanning default setup?

AGitHub Actions is enabled, and the repository is public or has GitHub Code Security enabled
BDependabot alerts and push protection are both enabled
CThe repository has a dependabot.yml file and security overview access
DArtifact attestations are enabled and the dependency graph is public

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion