GitHub Professional Certificate GitHub Packages and Container Registry 3

Question 1

Which GitHub Actions permission block setting is required to allow a workflow to write packages to GitHub Packages?

Accepted Answer

permissions: packages: write

Answer

Setting permissions: packages: write in the workflow YAML grants the GITHUB_TOKEN the ability to publish packages.

Question 2

How do you install a NuGet package hosted on GitHub Packages in a .NET project?

Accepted Answer

dotnet add package MyPackage --source https://nuget.pkg.github.com/OWNER/index.json

Answer

The dotnet add package command accepts a --source flag pointing to the GitHub Packages NuGet feed URL for the owner.

Question 3

What is the recommended way to handle GitHub Packages authentication for organization members in a CI/CD pipeline?

Accepted Answer

Use a dedicated machine user's PAT or rely on GITHUB_TOKEN with appropriate permissions

Answer

Using GITHUB_TOKEN (preferred) or a dedicated machine user's PAT ensures secure, auditable, and least-privilege access in CI/CD pipelines.

Question 4

How can you make a package in GitHub Container Registry publicly accessible without authentication?

Accepted Answer

Change the package visibility to 'Public' in the package settings on GitHub

Answer

You must explicitly change the package's visibility to Public in the package settings page on GitHub for it to be pulled without authentication.

Question 5

Which Gradle configuration correctly sets up publishing to GitHub Packages?

Accepted Answer

Configure a maven repository in the publishing block with url = uri('https://maven.pkg.github.com/OWNER/REPO') and credentials using github username and token

Answer

Gradle uses the maven-publish plugin with a repository URL pointing to GitHub Packages and credentials provided via environment variables or gradle.properties.

GitHub Professional Certificate Practice Test

GitHub Professional Certificate Practice Test

GitHub Professional Certificate GitHub Packages and Container Registry 3