GH-200: GitHub Actions Exam

As a developer, you need to integrate a GitHub Actions workflow with a third-party code quality provider that uses the Checks API. How should you trigger a follow-up workflow?

Add the check_run webhook event as a trigger for the workflow when the code quality integration is completed
Add the deployment webhook event as a trigger for the workflow when the code quality integration is completed
Add the pull_request webhook event as a trigger for the workflow when the code quality integration is synchronized
Add the workflow_run webhook event as a trigger for the workflow for the code quality integration name

Correct answer: A

Explanation:

Thecheck_runevent is triggered when a check (such as a code quality check) completes, including when the status of a check changes. By adding this event as a trigger, you can initiate a follow-up workflow when the code quality integration finishes its checks.

As a DevOps engineer, you are developing a container action. You need to execute a cleanup script after completing the main script execution. Which code block should be used to define the cleanup script?

Correct answer: D

Explanation:

The correct syntax for specifying a cleanup script to be run after the main entry point is executed in a Docker- based GitHub Action is to use thepostkey. This ensures thatcleanup.shruns after the main script (main.sh) has completed.

As a developer, what options should you recommend to implement standards for automation reuse? (Choose two.)

Create a marketplace partition to publish reusable automation for the company.
Create workflow templates and store them in the organization's .github repository.
Store shared corporate actions in subfolders in a defined and documented internally accessible repository.
Create reusable actions and workflows that can be called from other workflows.

Correct answer: BD

Explanation:

Creating workflow templates in the organization's .github repository allows the organization to standardize workflows and make them easily reusable across multiple repositories. This ensures consistency and simplifies maintenance.Creating reusable actions and workflows that can be called from other workflows helps modularize and standardize automation tasks. These reusable components can be maintained centrally and called from different workflows across repositories.

Creating workflow templates in the organization's .github repository allows the organization to standardize workflows and make them easily reusable across multiple repositories. This ensures consistency and simplifies maintenance.

Creating reusable actions and workflows that can be called from other workflows helps modularize and standardize automation tasks. These reusable components can be maintained centrally and called from different workflows across repositories.

Your organization is managing secrets using GitHub encrypted secrets, including a secret named SuperSecret.

As a developer, you need to create a version of that secret that contains a different value for use in a workflow that is scoped to a specific repository named MyRepo. How should you store the secret to access your specific version within your workflow?

Create and access SuperSecret from the secrets store in MyRepo.
Create MyRepo_SuperSecret in GitHub encrypted secrets to specify the scope to MyRepo.
Create a duplicate entry for SuperSecret in the encrypted secret store and specify MyRepo as the scope.
Create a file with the SuperSecret. information in the .qithub/secrets folder in MyRepo.

Correct answer: B

Explanation:

To scope a secret to a specific repository, you can create a new secret with a name likeMyRepo_SuperSecretin thesecretssection of theMyReporepository's settings. This ensures that the secret is specific to that repository and can be used within its workflows.

How should you install the bats NPM package in your workflow?

Correct answer: C

Explanation:

The correct syntax includes specifying the job (example-job), the runner (ubuntu-latest), and the necessary step (npm install -g bats) within the workflow. This ensures that the package is installed properly during the execution of the job.

As a developer, you are optimizing a GitHub workflow that uses and produces many different files. You need to determine when to use caching versus workflow artifacts. Which two statements are true? (Choose two.)

Use cachingwhen reusing files that change rarely between jobs or workflow runs.
Use artifacts to access theGitHub Package Registry and download a package for a workflow
Use artifacts when referencingfiles produced by a job after a workflow has ended.
Use caching to store cache entries for up to 30 days between accesses.

Correct answer: AC

What is the smallest scope for an environment variable?

the workflow env mapping
a job
the workflow settings
a step

Correct answer: D

Explanation:

The smallest scope for an environment variable is within astep. Environment variables defined within a step are only accessible to that particular step, which makes it the smallest scope for a variable in a GitHub Actions workflow.

How can GitHub Actions encrypted secrets be used in if: conditionals within a workflow job?

Create a job dependency that exposes the encrypted secret as a job output, which can then be leveraged in a subsequent dependent job.
Use a workflow command to expose the encrypted secret via a step's output parameter and then use the step output in the job's if: conditional.
Set the encrypted secret as a job-level environment variable and then reference the environment variable within the conditional statement.
Use the secrets context within the conditional statement, e.g. ${{ secrets.MySuperSecret }}.

Correct answer: D

Explanation:

GitHub Actions encrypted secrets can be accessed in workflows using thesecretscontext. You can directly reference the secret within anif:conditional using${{ secrets.MySuperSecret }}to determine whether a job or step should run based on the secret's value.

Which syntax correctly accesses a job output (output1) of an upstream job (job1) from a dependent job within a workflow?

${{job1.outputs.output1}}
${{needs.job1.outputs.output1}}
${{depends.job1.output1}}
${{needs.job1.output1}}

Correct answer: B

Explanation:

Theneedscontext is used to reference the outputs of jobs that are dependencies of the current job. In this case, needs.job1.outputs.output1correctly accesses the output ofoutput1from the jobjob1in the dependent job.

What are the two ways to pass data between jobs? (Choose two.)

Use the copy action with restore parameter to restore the data from the cache
Use the copy action with cache parameter to cache the data
Use job outputs
Use data storage.
Use the copy action to save the data that should be passed in the artifacts folder.
Use artifact storage.

Correct answer: CF

Explanation:

Job outputs are used to pass data from one job to another in a workflow. A job can produce output values (like variables or files), which can be referenced by subsequent jobs using theneedskeyword and${{ steps.step_id.outputs.output_name }}syntax.Artifact storage allows data (such as files or results) to be saved by a job and then retrieved by another job in a later step. This is commonly used for passing large amounts of data or files between jobs.

Job outputs are used to pass data from one job to another in a workflow. A job can produce output values (like variables or files), which can be referenced by subsequent jobs using theneedskeyword and${{ steps.step_id.

outputs.output_name }}syntax.

Artifact storage allows data (such as files or results) to be saved by a job and then retrieved by another job in a later step. This is commonly used for passing large amounts of data or files between jobs.