GitHub publishes exactly what the GH-200 tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.
Domain 1
Author and manage workflows
Triggers and events, workflow structure (jobs, steps, conditions, matrices, service containers, contexts and expressions, YAML anchors), and execution outputs: caching, artifacts, job summaries and badges. Official weight range 20–25%.
2 topics in this domain
- Workflow triggers, events, execution and outputs
- Design and implement workflow structure
Domain 2
Consume and troubleshoot workflows
Reading what a workflow did and why it failed: triggers, logs and run history, matrix expansions and reruns, artifacts via UI and API, and starter vs reusable workflows vs composite actions. Official weight range 15–20%.
2 topics in this domain
- Interpret workflow results, artifacts and logs
- Use and manage workflow templates
Domain 3
Author and maintain actions
JavaScript, Docker and composite actions: metadata and directory structure, workflow commands, troubleshooting, immutable actions and version pinning, and publishing to the Marketplace. Official weight range 15–20%.
2 topics in this domain
- Create, structure and troubleshoot custom actions
- Distribute and maintain actions
Domain 4
Manage GitHub Actions for the enterprise
Actions at organization and enterprise scale: governance policies and reusable components, GitHub-hosted and self-hosted runners and runner groups, networking, and secrets and variables at every scope. Official weight range 20–25%.
2 topics in this domain
- Govern actions, workflows, secrets and variables
- Manage runners at scale
Domain 5
Secure and optimize automation
Hardening and tuning automation: environment protections, script-injection defences, GITHUB_TOKEN permissions vs PATs, OIDC federation, SHA pinning, action allow lists, artifact attestations, and caching and retention for cost. Official weight range 10–15%.
1 topic in this domain
- Secure and optimize automation