GitHub Actions Certification (GH-200): What Changed in the 2026 Skills Outline
Microsoft rewrote the skills outline for Exam GH-200: GitHub Actions. The official study guide now lists Skills measured as of January 2026, and its change log says the exam changed significantly: objectives were added, removed, moved and reworded. The old outline had four domains with fixed weights (workflow authoring alone was 40%). The new one has five domains with ranges, including a new Secure and optimize automation domain worth 10-15%. This guide compares both outlines from official sources and shows what to study now.
Read more
Old outline vs new outline
| Old domain (before January 2026) | Old weight | New domain (January 2026) | New weight |
|---|---|---|---|
| Author and maintain workflows | 40% | Author and manage workflows | 20-25% |
| Consume workflows | 20% | Consume and troubleshoot workflows | 15-20% |
| Author and maintain actions | 25% | Author and maintain actions | 15-20% |
| Manage GitHub Actions for the enterprise | 15% | Manage GitHub Actions for the enterprise | 20-25% |
| (not a separate domain) | – | Secure and optimize automation | 10-15% |
Old weights come from the Microsoft Learn GitHub Actions certification page as archived by the Wayback Machine on December 14, 2025. Old topics come from the study guide snapshot of January 2, 2026. The row pairing is ours, because Microsoft does not publish a mapping.
What is new in the objectives
The biggest shift is weight. Workflow authoring drops from 40% to 20-25%, while enterprise management grows to 20-25%. Security now has its own domain. It covers script injection, GITHUB_TOKEN lifecycle and granular permissions (the old guide only asked when to use the token), OIDC tokens for cloud federation, pinning third-party actions to full commit SHAs, action allow and deny lists, and artifact attestations for provenance.
Other objectives are new or much more detailed:
- Reusable workflows called with workflow_call, including inputs, secrets and outputs, plus how they differ from starter workflows and composite actions
- YAML anchors and aliases to reuse steps in one file
- Service containers with ports, health checks and options (basic service containers were already in the old guide)
- Matrix include/exclude, fail-fast and max-parallel, and job summaries with GITHUB_STEP_SUMMARY
- Immutable actions and retention policies via REST APIs
Some old items, such as using CodeQL as a workflow step, are no longer listed.
How to prepare
Study from the current GH-200 study guide, not an older four-domain cheat sheet. Build a small workflow that uses a reusable workflow, a matrix, a service container, OIDC login and SHA-pinned actions. That one project touches most new objectives. You need a score of 700 or higher to pass.
For timed practice, use our GitHub Actions (GH-200) practice exam. The $1 trial is deducted when you upgrade, and every plan has a 14-day money-back guarantee. For other GitHub exams, see our GH-500 July 2026 outline update and GH-300 August 2026 update.
Facts come from the Microsoft Learn GH-200 study guide (January 2026) and archived official pages. Always check Microsoft Learn before you book.
