GitHub Advanced Security is several products and workflows wearing one security label. The distinctions worth retaining are practical: which suite owns a control, where push protection ends and credential remediation begins, what the dependency graph feeds, and when CodeQL default setup stops being enough. I condensed those decision points into a printable one-page GH-500 Final Review Guide.
The guide covers Secret Protection, supply chain security, Code Security and CodeQL, administration, vulnerability terminology, abbreviations, and current high-signal limits. It follows the July 2026 blueprint and is intended for a final pass after hands-on preparation, not as a replacement for the official GH-500 study guide, whose objectives can change.
