Question
Which features require GitHub Advanced Security to be enabled for internal and private repositories in an organization? Each correct answer presents part of the solution. (Choose two.)
- A. security policy
- B. secret scanning Correct
- C. packages
- D. dependency review Correct
Explanation
Secret scanning and dependency review are free on public repositories, but on private and internal repositories they need a paid GitHub Advanced Security product: GitHub Secret Protection for secret scanning and GitHub Code Security for dependency review. Without it, the feature cannot be used on those repositories. A security policy is simply a SECURITY.md file that any repository can add, and GitHub Packages is a separate package hosting service, so neither depends on an Advanced Security license.
