Free GH-200: GitHub Actions Exam Questions and Answers

Your organization contains a repository named platform that has a reusable workflow at .github/workflows/deploy.yml. The reusable workflow contains the following. on: workflow_call: inputs: target: type: string required: true jobs: deploy: runs-on: ubuntu-latest steps: - run: ./deploy.sh "${{ inputs.target }}" env: API_KEY: ${{ secrets.API_KEY }} A repository named storefront in the same organization has a repository secret named API_KEY and the following workflow job. jobs: call-deploy: uses: contoso/platform/.github/workflows/deploy.yml@v2 with: target: staging When the storefront workflow runs, deploy.sh fails because API_KEY is empty. You need to fix the problem. What should you do?

• AA. Add API_KEY as a key under the with section of the call-deploy job
• BB. Add secrets: inherit to the call-deploy job
• CC. Declare API_KEY under on.workflow_call.inputs in the called workflow
• DD. Add permissions: secrets: read to the call-deploy job

You have a workflow job that runs unit tests and writes the results to a Markdown table in a shell variable named REPORT. You need the table to be displayed on the summary page of the workflow run. What should you do in the step?

• AA. Write the value of REPORT to the file referenced by GITHUB_OUTPUT
• BB. Print the value of REPORT by using the ::notice:: workflow command
• CC. Append the value of REPORT to the file referenced by GITHUB_STEP_SUMMARY
• DD. Append the value of REPORT to the file referenced by GITHUB_ENV

You are developing a composite action. A workflow that uses the action fails with the error "Required property is missing: shell". The action.yml file contains the following. name: Lint description: Runs the linter runs: using: composite steps: - run: npm run lint You need to fix the error. What should you do?

• AA. Change the value of using from composite to node20
• BB. Add an id to the run step
• CC. Add shell: bash to the run step
• DD. Add runs-on: ubuntu-latest to the runs section

A job contains the following strategy. strategy: matrix: os: [ubuntu-latest, windows-latest] version: [14, 16] include: - os: ubuntu-latest version: 18 - os: macos-latest version: 16 exclude: - os: windows-latest version: 14 How many jobs does the workflow run for this matrix?

• AA. 3
• BB. 4
• CC. 5
• DD. 6

A repository contains a Docker container action in .github/actions/scan, with an action.yml file and a Dockerfile in that directory. A workflow in the same repository contains the following job. jobs: scan: runs-on: ubuntu-latest steps: - uses: ./.github/actions/scan The job fails with the error "Can't find 'action.yml', 'action.yaml' or 'Dockerfile' for action". The action.yml file is valid. You need to fix the problem. What should you do?

• AA. Rename action.yml to action.yaml in the .github/actions/scan directory
• BB. Change the uses value to docker://./.github/actions/scan
• CC. Move action.yml and the Dockerfile to the repository root and change uses to ./
• DD. Add a step that uses actions/checkout before the step that uses the local action

You write a script that calls the GitHub REST API to create a repository secret. What must the script do with the secret value before sending it in the request?

• AA. Encrypt it with the personal access token that authenticates the call
• BB. Encrypt it with the repository public key by using libsodium
• CC. Hash it with SHA-256 by using the repository node ID as the salt
• DD. Convert it to Base64 and send the result as encrypted_value

Your organization has 13 repositories whose workflows use a credential named API_TOKEN in nonproduction jobs. One of the repositories, orders-service, also has a production deployment job. The production job must use a different API_TOKEN value than the other jobs and must not start until a release manager approves it. You need to store the credentials so that each job receives the correct value. Which two actions should you perform? Each correct answer presents part of the solution. (Choose two.) NOTE: Each correct selection is worth one point.

Select 2 answers.

• AA. Create a repository secret named API_TOKEN in orders-service with the production value and add required reviewers to the repository.
• BB. Create an organization variable named API_TOKEN with the nonproduction value and grant access to the 13 selected repositories.
• CC. Create an organization secret named API_TOKEN with the nonproduction value and grant access to the 13 selected repositories.
• DD. Create an environment named production in orders-service, add an API_TOKEN secret with the production value, and add required reviewers.

You maintain a public repository named fabrikam/tools that contains two actions. Each action is defined by an action.yml file in its own folder, build/ and deploy/. You need to list both actions on GitHub Marketplace. What should you do?

• AA. Tag the build/ and deploy/ folders separately with build-v1 and deploy-v1, and publish a release for each tag.
• BB. Move each action into its own public repository with action.yml at the root, and publish a release from each repository.
• CC. Publish a release from fabrikam/tools and select both action.yml files in the Marketplace listing form.
• DD. Add a root action.yml that calls the build/ and deploy/ folders as composite steps, and publish one release with two categories.

You have the following workflow. ```yaml env: DEPLOY_ENABLED: 'true' jobs: deploy: if: ${{ env.DEPLOY_ENABLED == 'true' }} runs-on: ubuntu-latest steps: - run: ./deploy.sh ``` The workflow fails validation with an error that the env context is not recognized in jobs.deploy.if. You need to control whether the deploy job runs by using a value that administrators can change without editing the workflow file. What should you do?

• AA. Define a secret named DEPLOY_ENABLED and use ${{ secrets.DEPLOY_ENABLED == 'true' }} in the condition.
• BB. Keep the workflow-level env block and use ${{ github.env.DEPLOY_ENABLED == 'true' }} in the condition.
• CC. Define a configuration variable named DEPLOY_ENABLED and use ${{ vars.DEPLOY_ENABLED == 'true' }} in the condition.
• DD. Define the value in a job-level env block and keep the env context in the condition.

You need a script to download the artifact named coverage-report that was uploaded by workflow run 8841 in the repository contoso/web-shop. The script authenticates with a token that has the actions: read permission and uses the GitHub REST API. Which sequence of calls should the script make?

• AA. List the artifacts for run 8841, then request the zip archive by using the ID of coverage-report.
• BB. Request the artifact zip directly by using coverage-report as the artifact identifier in the URL.
• CC. Request the logs archive for run 8841, then extract the coverage-report files from the archive.
• DD. Request the jobs for run 8841, then request the artifacts of the job that ran the upload step.