GH-100 decision sheets

• When Actions secrets are available to a workflow run
• GitHub App vs OAuth app vs fine-grained vs classic personal access token
• Audit log retention and access: most events vs Git events
• Dependabot alerts vs security updates vs version updates vs malware alerts vs dependency review
• Enterprise Managed User account restrictions and membership sync
• EMU partner identity providers: Entra ID vs Okta vs PingFederate
• Enterprise Managed Users vs SAML SSO on personal accounts
• What happens when an enterprise enforces two-factor authentication
• Which users consume a paid GitHub Enterprise Cloud license
• Enterprise owner vs Billing manager vs Security manager vs Organization owner vs Member
• Branch protection and ruleset rules: which rule enforces what
• Self-hosted vs GitHub-hosted standard vs larger runners, and IP allow lists
• Secret scanning: what is free, what needs a Secret Protection licence