試験GH-600 トピック1 問題50 スレッド
Microsoft GH-600のリアル試験問題集
問題 #: 50
トピック #: 1
問題 #: 50
トピック #: 1
Drag and Drop Question
You have a GitHub repository that uses GitHub Actions for CI on pull requests.
You have a GitHub Copilot coding agent that opens pull requests for backlog items, and your company requires automated checks for agent-generated changes.
You plan to standardize success criteria so that pull requests created by agents only succeed when unit tests pass and CodeQL analysis completes.
You need to configure a GitHub Actions workflow that runs on pull requests, executes unit tests, and performs CodeQL analysis.
How should you complete the workflow? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
You have a GitHub repository that uses GitHub Actions for CI on pull requests.
You have a GitHub Copilot coding agent that opens pull requests for backlog items, and your company requires automated checks for agent-generated changes.
You plan to standardize success criteria so that pull requests created by agents only succeed when unit tests pass and CodeQL analysis completes.
You need to configure a GitHub Actions workflow that runs on pull requests, executes unit tests, and performs CodeQL analysis.
How should you complete the workflow? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
おすすめの解答：
Explanation:
Box 1: npm test
npm test (or mvn test, pytest, dotnet test depending on your language stack).
The run keyword requires a shell command to execute your test runner.
Box 2: init
The CodeQL workflow must initialize its database and environment before building code. The official action for this is github/codeql-action/init.
Box 3: analyze
After the code is prepared (and built if using a compiled language), the final step scans the codebase and uploads the SARIF results to GitHub Security. The official action is github/codeql- action/analyze.
Reference:
https://gitprotect.io/blog/github-actions-how-to-use-it-for-security-and-compliance-needs/
Tsuchiya 2026-08-20 04:58:14
コメント
他人の解答コメントを賛成するのも、その解答に一票を入れることになります。したがって、すでに同じ意見の投票コメントが存在する場合、新規コメントをする代わりに賛成することもできます。
コメントを通報する
コメント中
今すぐ 新規登録 / ログイン （無料です）。