Quiz — Pipeline
10 APPLY items on GitHub Actions hygiene, permissions pinning, and runner hygiene on $DEVSEC_LAB.
Pipeline Security — Module Quiz
Ten APPLY items. Name pipeline security on YOUR $DEVSEC_LAB — never production secret dumps, stranger-org workflows, or unauthorized runner abuse. Original Cyberlium. Next: SAST Named.
APPLY: GitHub Actions hygiene on Cyberlium includes:
APPLY: True or False: Action pins should use full commit SHAs.
APPLY: Runner hygiene includes:
APPLY: Tutorial copies stranger org workflow with embedded secrets — you:
APPLY: Lockfiles primarily enable:
APPLY: Cyberlium NEVER allows:
APPLY: Default workflow permissions should be:
APPLY: True or False: Self-hosted runners require patching and pool isolation.
APPLY: chmod 600 on pipeline notes means:
APPLY: Next lesson after this quiz: