GitHub GitHub-Advanced-Security - GitHub Advanced Security GHAS Exam

Thesecurity-extendedquery suite includes additional CodeQL queries that detectlower severity issuesthan those in the default security-and-quality suite.

It’s often used when projects want broader visibility into code hygiene and potential weak spots beyond critical vulnerabilities.

The other options listed arepaths to language packs, not query suites themselves.

In a dependabot.yml configuration file,package-ecosystemis arequired key. It defines the package manager being used in that update configuration (e.g., npm, pip, maven, etc.).

Without this key, Dependabot cannot determine how to analyze or update dependencies. Other keys like rebase-strategy or commit-message are optional and used for customizing behavior.