Which of the following is a trait of GHAS?

• A. Developer-First: Security where developers work and collaborate.
• B. Non-native: Security built outside the dev platform.
• C. Manual: All security tasks require manual steps only.
• D. Reactive: Only after issues discovered.

Answer: (A)

GitHub Advanced Security is built to fit into how developers actually work, making security an integrated part of the daily development flow. This Developer-First approach means security tooling lives where code is written and reviewed—inside pull requests, repos, and CI pipelines—so developers can find, discuss, and fix issues together with security teams rather than in a separate, outside system. That’s why this trait—security where developers work and collaborate—is the best fit for GHAS.

Non-native security would imply tools built outside the dev platform, which isn’t how GHAS operates. Manual-only processes ignore the automation GHAS provides, and reactive security focuses on fixes after problems arise, whereas GHAS emphasizes proactive, integrated scanning and remediation within the development workflow.