4Manage GitHub Actions for the Enterprise

• 4.1Governing Actions and Workflows

  Understand how an enterprise/organization defines and manages reusable components and templates, controls which actions/workflows may run (allow/deny lists, allow only verified actions, required reviewers for unverified actions), and configures organizational use policies.

• 4.2Managing Runners at Scale

  Understand GitHub-hosted vs self-hosted runners and when to use each, runner groups for access control, IP allow lists and networking, identifying preinstalled software/tool versions and installing more at runtime, and monitoring/troubleshooting runners.

• 4.3Encrypted Secrets and Variables

  Understand the scope and precedence of encrypted secrets and variables at organization, repository, and environment levels, referencing and masking them in workflows and actions, and managing them programmatically via REST APIs.