GitHub Interview Questions
9 questions
Questions on GitHub as a platform — repository administration, permissions, and workflow features beyond plain Git.
A required status check on a GitHub branch protection rule is permanently stuck showing "Expected — Waiting for status to be reported", blocking every PR from merging. What's going on?
IntermediateGitHub7 min
An internal tool making GitHub API calls started getting 403 errors, but checking the rate limit endpoint shows plenty of requests remaining. What else could be causing this?
IntermediateGitHub7 min
Your team needs to build an integration that automatically comments on PRs across the organization's repos. Should you use a GitHub App, an OAuth App, or a personal access token?
IntermediateGitHub7 min
Your org requires branch protection on main everywhere, but a critical tool has just one maintainer who finds required review genuinely slows down urgent fixes. How do you balance this?
IntermediateGitHub6 min
A CODEOWNERS file lists a team as owner of a directory, but PRs touching that directory aren't automatically requesting review from that team. What's likely misconfigured?
IntermediateGitHub6 min
A team wants to auto-merge every Dependabot PR that passes CI, to reduce the toil of manually reviewing hundreds of dependency bumps. What's the actual risk, and how would you design this safely?
AdvancedGitHubDevSecOps8 min
A security review finds a contractor has write access to a sensitive repository, but nobody remembers explicitly granting it. How did this happen, and how do you audit for it going forward?
IntermediateGitHub6 min
Should you publish your container images to GitHub Container Registry (part of GitHub Packages) or a dedicated external registry like ECR or Docker Hub? What actually drives that decision?
IntermediateGitHubDocker6 min
A service accepts GitHub webhook payloads and triggers a deployment based on push events, but doesn't verify where the request actually came from. What's the risk, and how do you fix it?
IntermediateGitHub6 min