GITHUBGitHub Actions Certification
The GitHub Actions Certification validates your proficiency in automating workflows and accelerating software development with GitHub Actions. It is designed for developers and DevOps practitioners who build, streamline, and optimize CI/CD pipelines. Earning this certification demonstrates that you can turn repetitive tasks into reliable, automated workflows that speed up delivery.
295 practice questions · Updated 2026-07-30
5Domains
14Objectives
104Concepts
295Questions
GH-200 Curriculum
Every domain, objective, and concept the GH-200 exam measures.
- Scheduled events
- Manual events
- Webhook events
- Repository events
- Event scope and permissions
- workflow_dispatch inputs
- workflow_call inputs and secrets
- Jobs, steps, and conditional logic
- Job dependencies
- Workflow commands and environment variables
- Service containers configuration
- Strategy and matrix basics
- Matrix control and optimization
- YAML anchors and aliases
- Predefined contexts
- Expression evaluation and secret safety
- Editor tooling and validation
- Caching and artifact management
- Passing data between jobs and steps
- Generating job summaries
- Adding workflow status badges
- Environment protections
- Workflow trigger identification
- Trigger effects on workflow execution
- Diagnosing failed workflow runs
- Reading workflow run logs
- YAML anchors and aliases expansion
- Merged mappings interpretation
- Matrix expansion interpretation
- Correlating job names to matrix axes
- Analyzing matrix job failures
- Selectively rerunning matrix jobs
- Locate workflow runs in the UI
- Locate workflow logs in the UI
- Locate workflow artifacts in the UI
- Locate workflows, logs, and artifacts via the API
- Download workflow artifacts
- Manage workflow artifacts
- Consume organization-level reusable workflows
- Consume reusable workflows from other repositories
- Consume non-public organization workflow templates
- Use starter workflows (public and private/non-public templates)
- Customize and adapt starter workflows
- Differentiate starter workflows from reusable workflows
- Differentiate starter workflows from composite actions
- Contrast disabling and deleting workflows
- Identify JavaScript action structure
- Identify Docker action structure
- Identify composite action structure
- Understand immutable actions rollout on hosted runners
- Apply version pinning strategies for actions
- Troubleshoot action execution errors
- Troubleshoot action runtime failures
- Action directory structure
- Action metadata file (action.yml)
- Action types and runs configuration
- Inputs and outputs metadata
- Workflow commands syntax
- Workflow command parameters and escaping
- Setting outputs and environment variables
- Logging and error reporting commands
- Distribution model selection
- Publishing actions to GitHub Marketplace
- Versioning strategies for actions
- Release strategies for actions
- Reusable components
- Reusable templates
- Access control for actions
- Access control for workflows
- Organizational use policies
- GitHub-hosted runner configuration
- Self-hosted runner setup
- Monitoring runner health and performance
- IP allow lists for GitHub-hosted runners
- Networking settings for self-hosted runners
- Runner group management
- Troubleshooting runner issues
- Identifying preinstalled software on GitHub-hosted runners
- Installing additional software at runtime
- Encrypted secrets vs. variables
- Secret and variable scopes
- Creating organization-level secrets and variables
- Creating repository-level secrets and variables
- Creating environment-level secrets and variables
- Referencing secrets and variables in workflows
- Using secrets and variables in actions
- Managing secrets and variables via REST API
- Encrypting secrets for API operations
- Environment protections and approval gates
- Identifying trustworthy actions
- Mitigating script injection
- Least-privilege permissions
- GITHUB_TOKEN lifecycle and scopes
- Contrasting GITHUB_TOKEN with PATs
- OIDC for cloud federation
- Pinning actions to full commit SHAs
- Enforcing action usage policies
- Artifact attestations and provenance
- Caching dependencies and build outputs
- Artifact retention policies
- Programmatic retention policy management via REST API
- Workflow scaling strategies
- Optimizing workflow performance
- Cost optimization techniques
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for GH-200, so none is invented.