Updating GH-500 Completion

Author: gobinathm

README.md

@@ -12,7 +12,7 @@ Study notes I prepared while clearing technology certifications.
 |---|---|---|
 | [GH-100: GitHub Administration](https://notes.gobinath.com/certifications/github/gh-100/) | GitHub | In Progress |
 | [GH-300: GitHub Copilot](https://notes.gobinath.com/certifications/github/gh-300/) | GitHub | In Progress |
-| [GH-500: GitHub Advanced Security](https://notes.gobinath.com/certifications/github/gh-500/) | GitHub | In Progress |
+| [GH-500: GitHub Advanced Security](https://notes.gobinath.com/certifications/github/gh-500/) | GitHub | Passed Mar 2026 |
 | [MLA-C01: AWS ML Engineer Associate](https://notes.gobinath.com/certifications/aws/mla-c01/) | AWS | In Progress |
 | [GCP-GAIL: Generative AI Leader](https://notes.gobinath.com/certifications/google-cloud/gen-ai-leader/) | Google Cloud | In Progress |
 | [AI-102: Azure AI Engineer Associate](https://notes.gobinath.com/certifications/azure/ai-102/) | Microsoft | In Progress |

certifications/github/gh-500/domain-7.md

@@ -131,6 +131,21 @@ Enterprise and organization admins do not need to do all alert triage themselves
 - Security managers are **not** a substitute for owners/admins when the task is enabling GHAS or changing organization and enterprise policy
 - Security managers also cannot manage organization-wide enforcement controls such as **required workflows**
 
+### GHAS Role Capability Matrix
+
+| Capability | Security Manager | Org Owner | Repo Admin | Developer |
+|---|---|---|---|---|
+| View Alerts (Org/Enterprise) | ✅ | ✅ | ❌ | ❌ |
+| View Alerts (Repo level) | ✅ | ✅ | ✅ | ✅ |
+| Dismiss Alerts (False Positive / Risk Accepted) | ✅ | ✅ | ✅ | ❌* |
+| Reopen Dismissed Alerts | ✅ | ✅ | ✅ | ❌ |
+| Create / Edit Security Advisories | ✅ | ✅ | ✅ | ❌ |
+| Change Alert Severity (Code Scanning) | ✅ | ✅ | ✅ | ❌ |
+| Enable / Disable GHAS Features | ❌ | ✅ | ✅ | ❌ |
+| Manage Required Workflows | ❌ | ✅ | ❌ | ❌ |
+
+\* Developers may participate in remediation, but dismissal and policy-level actions are typically reserved for repository admins, organization owners, or security managers.
+
 ### IP Allow Lists and External Integrations
 
 If the enterprise uses an **IP allow list**, GitHub-integrated automation must still be able to reach GitHub from approved addresses.

certifications/github/gh-500/index.md

@@ -17,10 +17,11 @@ An intermediate certification for developers, security engineers, and DevSecOps
 Think like a security-aware developer or DevSecOps engineer. Questions test your ability to configure GHAS features, interpret their results, and apply corrective measures — not just define what they are.
 :::
 
-::: info Currently Studying ⏳
-**Target Date**: TBD
+::: tip Certification Achieved ✅
+**Earned**: March 2026
+**Credential**: [Verify Certificate](https://learn.microsoft.com/api/credentials/share/en-us/gobinathm/405C37D72F2C5594?sharingId=DF3DC239EE30F0A4)
 
-**Notes Prepared**: March 2026 · **Last Updated**: 2026-03-13
+**Notes Prepared**: March 2026 · **Last Updated**: 2026-03-16
 :::
 
 <ImageModal

index.md

@@ -9,11 +9,11 @@ description: Study notes from technology certifications I've cleared and ones I'
   <p class="cert-hero-subtitle">I study for certs by writing notes. When I decided to share them, I added interactive tools to make them more useful for anyone studying alongside me.</p>
   <div class="cert-hero-stats">
     <div class="cert-stat">
-      <span class="cert-stat-num">7</span>
+      <span class="cert-stat-num">8</span>
       <span class="cert-stat-label">Passed</span>
     </div>
     <div class="cert-stat">
-      <span class="cert-stat-num">6</span>
+      <span class="cert-stat-num">5</span>
       <span class="cert-stat-label">In Progress</span>
     </div>
     <div class="cert-stat">
@@ -40,29 +40,11 @@ These started as plain markdown files. When I decided to share them as a site, I
 
 <div class="section-header">
   <h2>Currently Studying</h2>
-  <span class="section-count">7 active</span>
+  <span class="section-count">5 active</span>
 </div>
 
 <div class="cert-grid">
 
-<div class="cert-card studying">
-  <div class="cert-ribbon intermediate">Intermediate</div>
-  <span class="provider-tag github">GitHub</span>
-  <h3><a href="./certifications/github/gh-500/">GH-500: GitHub Advanced Security</a></h3>
-  <p>Configure and use GHAS features — secret scanning, Dependabot, dependency review, and CodeQL code scanning — to secure the software supply chain.</p>
-  <div class="cert-prereqs">GitHub experience, software development fundamentals, basic security awareness</div>
-  <div class="cert-dates">
-    <div class="cert-date-item study-by">
-      <span class="date-label">Study by</span>
-      <span class="date-val">Mar 10</span>
-    </div>
-    <div class="cert-date-item exam-target">
-      <span class="date-label">Exam</span>
-      <span class="date-val">Mar 10</span>
-    </div>
-  </div>
-</div>
-
 <div class="cert-card studying">
   <div class="cert-ribbon advanced">Advanced</div>
   <span class="provider-tag aws">AWS</span>
@@ -189,11 +171,24 @@ These started as plain markdown files. When I decided to share them as a site, I
 
 <div class="section-header">
   <h2>Completed</h2>
-  <span class="section-count">6 certs</span>
+  <span class="section-count">8 certs</span>
 </div>
 
 <div class="cert-tl-track">
 
+  <div class="cert-tl-group">
+    <div class="cert-tl-month-node">
+      <span class="cert-tl-month-label">Mar 2026</span>
+      <span class="cert-tl-dot"></span>
+    </div>
+    <div class="cert-tl-entries">
+      <div class="cert-tl-entry intermediate">
+        <span class="provider-tag github">GitHub</span>
+        <a class="cert-tl-name" href="./certifications/github/gh-500/">GH-500: GitHub Advanced Security</a>
+      </div>
+    </div>
+  </div>
+
   <div class="cert-tl-group">
     <div class="cert-tl-month-node">
       <span class="cert-tl-month-label">Feb 2026</span>