What is the GitHub Actions certification?

The GitHub Actions certification is earned by passing Exam GH-200: GitHub Actions. It validates that you can author and troubleshoot workflows, build and distribute custom actions, manage runners, secrets and policies at enterprise scale, and secure automation with OIDC, SHA pinning and least-privilege permissions. The study guide is published on Microsoft Learn.

How much does the GitHub Actions certification cost?

Microsoft's published exam pricing feed lists GitHub certification exams under a single GH family code at $99 in the United States. GH-200 does not appear under its own code, so no source can honestly quote a GH-200-specific figure beyond that family price. Confirm the fee at registration before you book.

How hard is the GitHub Actions certification exam?

Harder than its reputation. Writing pipelines daily prepares you for roughly two of the five domains. Manage GitHub Actions for the enterprise is worth 20 to 25 percent on its own, and secure and optimize automation adds 10 to 15 percent more, covering OIDC federation, script injection mitigation, GITHUB_TOKEN scoping and artifact attestations. That third of the paper is what daily use never teaches.

What is on the GH-200 exam?

Five domains: author and manage workflows (20 to 25 percent), consume and troubleshoot workflows (15 to 20 percent), author and maintain actions (15 to 20 percent), manage GitHub Actions for the enterprise (20 to 25 percent), and secure and optimize automation (10 to 15 percent). The current outline names YAML anchors, immutable actions, OIDC, service containers, matrix strategies and artifact attestations.

How many questions are on the GitHub Actions exam?

Neither GitHub nor Microsoft publishes an official question count for GH-200. The certification page does state the time limit: you will have 100 minutes to complete the assessment, and the exam is proctored. Treat any site quoting an exact question count as unofficial.

Did the GitHub Actions exam change in 2026?

Yes, significantly. The official change log states the exam changed significantly in January 2026: objectives added, removed, moved and reworded. The current outline names immutable actions, artifact attestations with SLSA provenance, YAML anchors and aliases, and even runner image migrations. Question banks written against the older outline miss all of it.

Is the GitHub Actions certification worth it?

For CI/CD, platform and DevOps engineers, it is one of the more defensible vendor certs because the exam content is the daily job: workflows, runners, secrets and supply-chain security. If your organization runs on GitHub, the enterprise governance domain maps directly onto real responsibilities. It carries more practical weight than a fundamentals cert, though less brand recognition than the big cloud associates.

GH-200 practice exam

GitHub Actions Certification Practice Exam, GH-200 Practice Test and Questions

Upload your CI/CD notes, and the AI writes unlimited GH-200 practice questions with an answer key in seconds. Weighted to the five domains on the official outline, including the enterprise and security material that daily pipeline work never teaches.

Your study files are processed securely and deleted automatically after your practice questions are built.

Upload your GitHub Actions notes and generate your first question set

Click to upload or drag and drop

PDF, DOCX, PPTX, TXT, JPG, JPEG, PNG, HEIC, ODP, ODT, BMP, or TIFF

up to 20MB

Please wait, your quiz is being created...

Uploading...

The GitHub Actions certification is earned by passing Exam GH-200: GitHub Actions. It has five domains, you get 100 minutes, and Microsoft's pricing feed lists GitHub exams under one family code at $99 US. The word workflow appears 44 times in the roughly 850-word outline and action 29 times, but the trap is elsewhere: manage GitHub Actions for the enterprise is worth 20 to 25 percent, as much as authoring workflows itself, and the official change log says the exam changed significantly in January 2026. The rewrite added named objectives on immutable actions, OIDC federation, YAML anchors, artifact attestations and SLSA provenance that older question banks have never seen.

Last updated July 2026

What GH-200 actually tests. Count the words.

We counted terms in the official skills-measured outline on Microsoft Learn, the same method we use across every certification page on this site. The density map tells you where the questions come from.

Term in the official outline	Count	What it tells you
workflow	44	In a ~850-word outline: one mention every 19 words. Workflows are the exam
action	29	Authoring, distributing and governing custom actions is its own domain
runner	9	Hosted and self-hosted runners, runner groups, IP allow lists, toolcache
secret	8	Scoping secrets at organization, repository and environment level, plus leak prevention
artifact	8	Artifact management, retention via REST APIs, and attestations with provenance
enterprise	4	A full 20 to 25 percent domain on governing Actions at company scale
OIDC	1	One bullet, big implications: cloud federation without long-lived secrets

The January 2026 rewrite made the outline unusually specific. It names YAML anchors and aliases with merge keys, immutable actions and version pinning, service containers, matrix include/exclude with fail-fast control, GITHUB_STEP_SUMMARY job summaries, and even the Ubuntu 20.04 runner deprecation. A question bank written against the older outline predates every one of those bullets. Build questions from the current study guide instead: generate practice questions from your own Actions notes and weight them to the five real domains.

US fee (GH family code): $99
Exam time: 100 min
"workflow" in the outline: 44 times
Practice questions: Unlimited

GH-200 skills measured, straight from the official study guide

Five domains. The two authoring domains get the attention, but enterprise management alone matches the biggest of them, and security is its own scored domain on top.

Domain	What is actually in it	Weight
Author and manage workflows	Triggers and events including workflow_dispatch inputs and workflow_call mapping. Jobs, steps, conditionals and dependencies. Service containers with health checks. Matrix strategies with include/exclude, fail-fast and max-parallel. YAML anchors and aliases. Contexts and expression evaluation, caching, artifacts, GITHUB_ENV, GITHUB_OUTPUT and job summaries.	20 to 25%
Manage GitHub Actions for the enterprise	The equal-biggest domain, and the one daily use skips. Reusable components and templates, access control, organizational use policies, hosted and self-hosted runners, runner groups, IP allow lists, preinstalled tool versions, and secrets and variables scoped at organization, repository and environment level, managed via REST APIs.	20 to 25%
Consume and troubleshoot workflows	Reading triggers and effects from configuration and logs, diagnosing failed runs, expanding YAML anchors when analyzing config, interpreting matrix expansions and rerunning individual matrix jobs, locating artifacts via UI and API, and telling starter workflows from reusable workflows from composite actions.	15 to 20%
Author and maintain actions	The three action types (JavaScript, Docker, composite), immutable actions rollout and version pinning implications, required files and metadata, workflow commands, distribution models and publishing to the Marketplace with versioning strategies.	15 to 20%
Secure and optimize automation	Environment protections and approval gates, script injection mitigation, GITHUB_TOKEN lifecycle versus PATs, OIDC federation for cloud providers, pinning third-party actions to commit SHAs, allow/deny policies, artifact attestations with SLSA provenance, and cost optimization through caching and retention.	10 to 15%

Add it up: enterprise management plus security is 30 to 40 percent of the paper. That is the failing margin for working engineers, because writing green pipelines every day teaches you neither runner group governance nor SLSA attestations.

GH-200 has an official Microsoft practice assessment worth taking at least once. Neither GitHub nor Microsoft publishes a question count or a pass rate on the study guide. The certification page states the time limit: 100 minutes, proctored.

Why engineers who ship pipelines daily still fail GH-200

The exam was rewritten for the person who has to run Actions for a whole company, not just make one repository's checks pass. Compare what daily use teaches against what the outline asks.

What you know from writing pipelines	What the exam also expects
Your workflows trigger on push and pull_request	Define workflow_dispatch input types and defaults, and map inputs and secrets through workflow_call
You copy a starter workflow and adapt it	Contrast starter workflows, reusable workflows and composite actions, and know when each is wrong
You use secrets from the repo settings page	Scope secrets across organization, repository and environment levels and manage them via REST APIs
You pin actions to @v4 like everyone else	Pin to full commit SHAs, explain immutable actions enforcement, and justify any floating reference
Your cloud deploy uses a stored credential	Replace it with OIDC federation using the id-token permission and explain why long-lived secrets lose

Every right-hand cell is a named objective on the current outline. Generated question drills are the cheapest way to find out which of those you can only half-explain, before the proctored clock is running.

How to build GH-200 practice questions that match the real blueprint

The January 2026 rewrite dates every older bank. Build from current material and spend the saved time on the two domains daily work never touches.

1 Upload current material: The GH-200 study guide, GitHub's Actions docs, or your own notes. If your material never mentions immutable actions or attestations, it predates the current outline.
2 Drill enterprise hardest: Runner groups, IP allow lists, org-level policies and secret scoping add up to a quarter of the exam, and none of it comes from making one repo's checks green.
3 Learn the security story: GITHUB_TOKEN versus PAT, OIDC federation, SHA pinning, script injection and SLSA attestations. Generate scenario questions until the reasoning is automatic.
4 Finish with the official mock: GH-200 has an official Microsoft practice assessment. Use generated questions to close gaps domain by domain, then confirm readiness on the official mock before booking.

GitHub Actions certification questions, answered

What is the GitHub Actions certification?: It is earned by passing Exam GH-200: GitHub Actions. The exam validates that you can author and troubleshoot workflows, build and distribute custom actions, manage runners, secrets and policies at enterprise scale, and secure automation with OIDC, SHA pinning and least-privilege permissions. The study guide is published on Microsoft Learn.
How much does the GitHub Actions certification cost?: Microsoft's published exam pricing feed lists GitHub certification exams under a single GH family code at $99 in the United States. GH-200 does not appear under its own code, so no source can honestly quote a GH-200-specific figure beyond that family price. Confirm the fee at registration before you book.
How hard is the GitHub Actions certification exam?: Harder than its reputation. Writing pipelines daily prepares you for roughly two of the five domains. Manage GitHub Actions for the enterprise is worth 20 to 25 percent on its own, and secure and optimize automation adds 10 to 15 percent more, covering OIDC federation, script injection mitigation, GITHUB_TOKEN scoping and artifact attestations. That third of the paper is what daily use never teaches, and it is where the failing margin lives.
What is on the GH-200 exam?: Five domains: author and manage workflows (20 to 25 percent), consume and troubleshoot workflows (15 to 20 percent), author and maintain actions (15 to 20 percent), manage GitHub Actions for the enterprise (20 to 25 percent), and secure and optimize automation (10 to 15 percent). The current outline names YAML anchors, immutable actions, OIDC, service containers, matrix strategies and artifact attestations verbatim.
How many questions are on the GitHub Actions exam?: Neither GitHub nor Microsoft publishes an official question count for GH-200. The certification page does state the time limit: you will have 100 minutes to complete the assessment, and the exam is proctored. Treat any site quoting an exact question count as unofficial.
Did the GitHub Actions exam change in 2026?: Yes, significantly. The official change log states the exam changed significantly in January 2026: objectives added, removed, moved and reworded. The current outline names immutable actions, artifact attestations with SLSA provenance, YAML anchors and aliases, and even runner image migrations like the Ubuntu 20.04 deprecation. Question banks written against the older outline miss all of it, which is the strongest argument for generating questions from current sources.
Is the GitHub Actions certification worth it?: For CI/CD, platform and DevOps engineers, it is one of the more defensible vendor certs because the exam content is the daily job: workflows, runners, secrets and supply-chain security. If your organization runs on GitHub, the enterprise governance domain maps directly onto real responsibilities. New to GitHub certs entirely? Start with the GitHub Foundations practice test (GH-900) and step up from there.

PDFQuiz is not affiliated with, endorsed by, or sponsored by GitHub or Microsoft. GitHub and GitHub Actions are trademarks of GitHub, Inc. This generator builds practice questions from material you upload and is a study aid, not a substitute for official learning paths. Actions ships changes monthly: always confirm the current skills-measured document before you book.

Related study tools

GH-200 sits in the middle of the GitHub track: the GitHub Foundations practice test covers the fundamentals below it, the GitHub Copilot certification practice test covers the AI pair-programming exam, and the new GitHub agentic AI certification practice test covers GH-600, where agents get invoked from the CI workflows this exam teaches. The governance side of the same estate is covered by the GitHub Administration certification practice test and the GitHub Advanced Security certification practice test, whose scans run on these workflows. On the Microsoft side, the AZ-400 practice test covers the DevOps Engineer Expert exam that samples this Actions blueprint alongside Azure Pipelines. Any study guide works with the certification exam generator.

Build your first GH-200 practice set

Upload your GitHub Actions notes and generate exam-style questions with an answer key in under a minute, weighted toward the enterprise and security domains that decide the pass.

Start Creating Practice Questions

Z tej samej rodziny narzędzi