In GHAS, what does Automated refer to?

• A. No automation features exist.
• B. Integration with external ticketing systems only.
• C. Feature rich APIs and compute platform.
• D. Manual security reviews only.

Answer: (C)

Automated in GHAS refers to the capabilities that run security checks with minimal manual steps, using programmatic access and scalable processing. It means you can automate security tasks through feature-rich APIs and a compute platform that executes analyses (like CodeQL queries) at scale, and integrate these results into your CI/CD pipelines and workflows. This enables continuous scanning, automatic triage, and automated enforcement without needing to rely solely on manual reviews.

So the best description is that GHAS provides feature rich APIs and a compute platform to drive automated security work. The other options miss the breadth of automation: GHAS isn’t about having no automation, nor is it limited to just external ticketing integrations, and it certainly isn’t about manual reviews only.