Rules

• Do not use production secrets.
• Justify every answer with Git terminology.
• Separate working tree, index, commit graph, references and remotes.
• Name recovery steps when you mention risky operations.

Questions

Question 01: Signaturen

Describe a realistic Git scenario for Signaturen. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 02: Credentials

Describe a realistic Git scenario for Credentials. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 03: History Rewrite

Describe a realistic Git scenario for History Rewrite. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 04: Secret-Leaks

Describe a realistic Git scenario for Secret-Leaks. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 05: Supply Chain

Describe a realistic Git scenario for Supply Chain. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 06: Incident Response

Describe a realistic Git scenario for Incident Response. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 07: Signaturen

Describe a realistic Git scenario for Signaturen. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 08: Credentials

Describe a realistic Git scenario for Credentials. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 09: History Rewrite

Describe a realistic Git scenario for History Rewrite. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 10: Secret-Leaks

Describe a realistic Git scenario for Secret-Leaks. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 11: Supply Chain

Describe a realistic Git scenario for Supply Chain. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 12: Incident Response

Describe a realistic Git scenario for Incident Response. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 13: Signaturen

Describe a realistic Git scenario for Signaturen. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 14: Credentials

Describe a realistic Git scenario for Credentials. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 15: History Rewrite

Describe a realistic Git scenario for History Rewrite. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 16: Secret-Leaks

Describe a realistic Git scenario for Secret-Leaks. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 17: Supply Chain

Describe a realistic Git scenario for Supply Chain. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 18: Incident Response

Describe a realistic Git scenario for Incident Response. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 19: Signaturen

Describe a realistic Git scenario for Signaturen. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 20: Credentials

Describe a realistic Git scenario for Credentials. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 21: History Rewrite

Describe a realistic Git scenario for History Rewrite. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 22: Secret-Leaks

Describe a realistic Git scenario for Secret-Leaks. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 23: Supply Chain

Describe a realistic Git scenario for Supply Chain. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 24: Incident Response

Describe a realistic Git scenario for Incident Response. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 25: Signaturen

Describe a realistic Git scenario for Signaturen. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 26: Credentials

Describe a realistic Git scenario for Credentials. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 27: History Rewrite

Describe a realistic Git scenario for History Rewrite. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 28: Secret-Leaks

Describe a realistic Git scenario for Secret-Leaks. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 29: Supply Chain

Describe a realistic Git scenario for Supply Chain. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 30: Incident Response

Describe a realistic Git scenario for Incident Response. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 31: Signaturen

Describe a realistic Git scenario for Signaturen. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 32: Credentials

Describe a realistic Git scenario for Credentials. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 33: History Rewrite

Describe a realistic Git scenario for History Rewrite. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 34: Secret-Leaks

Describe a realistic Git scenario for Secret-Leaks. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 35: Supply Chain

Describe a realistic Git scenario for Supply Chain. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 36: Incident Response

Describe a realistic Git scenario for Incident Response. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 37: Signaturen

Describe a realistic Git scenario for Signaturen. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 38: Credentials

Describe a realistic Git scenario for Credentials. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 39: History Rewrite

Describe a realistic Git scenario for History Rewrite. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Question 40: Secret-Leaks

Describe a realistic Git scenario for Secret-Leaks. Which states are affected, which command proves state, what team or security risk appears and which recovery path is appropriate?

Practical Case Study

You inherit a repository with unclear history, multiple branches, missing tags and possible secrets in old commits. Build a review plan covering status, log, reflog, remotes, tags, credentials, hooks and team rules.

Review Checklist for Advanced Security Assessment

• 01. document context and desired state: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 02. explain index state: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 03. read the commit graph: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 04. assess diff and patch: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 05. check remote relationship: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 06. isolate conflict cause: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 07. use reflog as recovery path: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 08. name history rewrite risk: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 09. assess credential impact: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 10. describe signature or hook boundary: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 11. write down rollback or recovery path: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 12. state a team rule: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 13. document context and desired state: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 14. explain index state: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 15. read the commit graph: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 16. assess diff and patch: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 17. check remote relationship: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 18. isolate conflict cause: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 19. use reflog as recovery path: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 20. name history rewrite risk: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 21. assess credential impact: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 22. describe signature or hook boundary: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 23. write down rollback or recovery path: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 24. state a team rule: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 25. document context and desired state: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 26. explain index state: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 27. read the commit graph: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 28. assess diff and patch: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 29. check remote relationship: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 30. isolate conflict cause: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 31. use reflog as recovery path: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 32. name history rewrite risk: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 33. assess credential impact: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 34. describe signature or hook boundary: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 35. write down rollback or recovery path: record which Git reference, commit, index state or remote is affected and how you prove the state.
• 36. state a team rule: record which Git reference, commit, index state or remote is affected and how you prove the state.

Practice Appendix: Advanced Security Assessment

This appendix provides a backlog for longer trainings, reviews and repetition. Each task is small enough to reproduce in a local lab repository.

A001. Signaturen

• Task: document context and desired state and explicitly relate the observation to Signaturen.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A002. Credentials

• Task: explain index state and explicitly relate the observation to Credentials.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A003. History Rewrite

• Task: read the commit graph and explicitly relate the observation to History Rewrite.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A004. Secret-Leaks

• Task: assess diff and patch and explicitly relate the observation to Secret-Leaks.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A005. Supply Chain

• Task: check remote relationship and explicitly relate the observation to Supply Chain.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A006. Incident Response

• Task: isolate conflict cause and explicitly relate the observation to Incident Response.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A007. Repository

• Task: use reflog as recovery path and explicitly relate the observation to Repository.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A008. Working Tree

• Task: name history rewrite risk and explicitly relate the observation to Working Tree.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A009. Index

• Task: assess credential impact and explicitly relate the observation to Index.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A010. Commit

• Task: describe signature or hook boundary and explicitly relate the observation to Commit.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A011. HEAD

• Task: write down rollback or recovery path and explicitly relate the observation to HEAD.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A012. Branch

• Task: state a team rule and explicitly relate the observation to Branch.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A013. Tag

• Task: document context and desired state and explicitly relate the observation to Tag.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A014. Remote

• Task: explain index state and explicitly relate the observation to Remote.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A015. Refspec

• Task: read the commit graph and explicitly relate the observation to Refspec.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A016. Merge

• Task: assess diff and patch and explicitly relate the observation to Merge.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A017. Rebase

• Task: check remote relationship and explicitly relate the observation to Rebase.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A018. Reflog

• Task: isolate conflict cause and explicitly relate the observation to Reflog.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A019. Hook

• Task: use reflog as recovery path and explicitly relate the observation to Hook.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A020. Submodule

• Task: name history rewrite risk and explicitly relate the observation to Submodule.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A021. Credential Helper

• Task: assess credential impact and explicitly relate the observation to Credential Helper.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A022. Object Database

• Task: describe signature or hook boundary and explicitly relate the observation to Object Database.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A023. Signaturen

• Task: write down rollback or recovery path and explicitly relate the observation to Signaturen.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A024. Credentials

• Task: state a team rule and explicitly relate the observation to Credentials.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A025. History Rewrite

• Task: document context and desired state and explicitly relate the observation to History Rewrite.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A026. Secret-Leaks

• Task: explain index state and explicitly relate the observation to Secret-Leaks.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A027. Supply Chain

• Task: read the commit graph and explicitly relate the observation to Supply Chain.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A028. Incident Response

• Task: assess diff and patch and explicitly relate the observation to Incident Response.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A029. Repository

• Task: check remote relationship and explicitly relate the observation to Repository.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A030. Working Tree

• Task: isolate conflict cause and explicitly relate the observation to Working Tree.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A031. Index

• Task: use reflog as recovery path and explicitly relate the observation to Index.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A032. Commit

• Task: name history rewrite risk and explicitly relate the observation to Commit.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A033. HEAD

• Task: assess credential impact and explicitly relate the observation to HEAD.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A034. Branch

• Task: describe signature or hook boundary and explicitly relate the observation to Branch.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A035. Tag

• Task: write down rollback or recovery path and explicitly relate the observation to Tag.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A036. Remote

• Task: state a team rule and explicitly relate the observation to Remote.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A037. Refspec

• Task: document context and desired state and explicitly relate the observation to Refspec.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A038. Merge

• Task: explain index state and explicitly relate the observation to Merge.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A039. Rebase

• Task: read the commit graph and explicitly relate the observation to Rebase.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A040. Reflog

• Task: assess diff and patch and explicitly relate the observation to Reflog.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A041. Hook

• Task: check remote relationship and explicitly relate the observation to Hook.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A042. Submodule

• Task: isolate conflict cause and explicitly relate the observation to Submodule.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A043. Credential Helper

• Task: use reflog as recovery path and explicitly relate the observation to Credential Helper.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A044. Object Database

• Task: name history rewrite risk and explicitly relate the observation to Object Database.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A045. Signaturen

• Task: assess credential impact and explicitly relate the observation to Signaturen.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A046. Credentials

• Task: describe signature or hook boundary and explicitly relate the observation to Credentials.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A047. History Rewrite

• Task: write down rollback or recovery path and explicitly relate the observation to History Rewrite.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A048. Secret-Leaks

• Task: state a team rule and explicitly relate the observation to Secret-Leaks.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A049. Supply Chain

• Task: document context and desired state and explicitly relate the observation to Supply Chain.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A050. Incident Response

• Task: explain index state and explicitly relate the observation to Incident Response.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A051. Repository

• Task: read the commit graph and explicitly relate the observation to Repository.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A052. Working Tree

• Task: assess diff and patch and explicitly relate the observation to Working Tree.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A053. Index

• Task: check remote relationship and explicitly relate the observation to Index.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A054. Commit

• Task: isolate conflict cause and explicitly relate the observation to Commit.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A055. HEAD

• Task: use reflog as recovery path and explicitly relate the observation to HEAD.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A056. Branch

• Task: name history rewrite risk and explicitly relate the observation to Branch.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A057. Tag

• Task: assess credential impact and explicitly relate the observation to Tag.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A058. Remote

• Task: describe signature or hook boundary and explicitly relate the observation to Remote.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A059. Refspec

• Task: write down rollback or recovery path and explicitly relate the observation to Refspec.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A060. Merge

• Task: state a team rule and explicitly relate the observation to Merge.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A061. Rebase

• Task: document context and desired state and explicitly relate the observation to Rebase.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A062. Reflog

• Task: explain index state and explicitly relate the observation to Reflog.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A063. Hook

• Task: read the commit graph and explicitly relate the observation to Hook.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A064. Submodule

• Task: assess diff and patch and explicitly relate the observation to Submodule.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A065. Credential Helper

• Task: check remote relationship and explicitly relate the observation to Credential Helper.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A066. Object Database

• Task: isolate conflict cause and explicitly relate the observation to Object Database.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A067. Signaturen

• Task: use reflog as recovery path and explicitly relate the observation to Signaturen.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A068. Credentials

• Task: name history rewrite risk and explicitly relate the observation to Credentials.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A069. History Rewrite

• Task: assess credential impact and explicitly relate the observation to History Rewrite.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A070. Secret-Leaks

• Task: describe signature or hook boundary and explicitly relate the observation to Secret-Leaks.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A071. Supply Chain

• Task: write down rollback or recovery path and explicitly relate the observation to Supply Chain.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A072. Incident Response

• Task: state a team rule and explicitly relate the observation to Incident Response.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A073. Repository

• Task: document context and desired state and explicitly relate the observation to Repository.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A074. Working Tree

• Task: explain index state and explicitly relate the observation to Working Tree.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A075. Index

• Task: read the commit graph and explicitly relate the observation to Index.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A076. Commit

• Task: assess diff and patch and explicitly relate the observation to Commit.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A077. HEAD

• Task: check remote relationship and explicitly relate the observation to HEAD.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

A078. Branch

• Task: isolate conflict cause and explicitly relate the observation to Branch.
• Evidence: Write down at least one Git command, one expected result and one limit of that evidence.
• Team question: What coordination is required before this change lands in a shared branch?
• Security question: Which credentials, signatures, hooks or confidential files could be affected?
• Recovery: Explain whether reflog, restore, reset, revert, merge --abort, rebase --abort or a backup is the right path.

Official Sources and Scope

The material is aligned with public Git documentation. GitHub, GitLab, Forgejo and other hosting platforms are mentioned only where they explain common Git workflows; they are not the same thing as Git itself.

• Git Reference: https://git-scm.com/docs
• Git Manual: https://git-scm.com/docs/git
• Pro Git Book: https://git-scm.com/book/en/v2
• git-submodule: https://git-scm.com/docs/git-submodule
• gitcredentials: https://git-scm.com/docs/gitcredentials
• git-credential-store: https://git-scm.com/docs/git-credential-store
• GitHub Certifications: https://docs.github.com/en/get-started/showcase-your-expertise-with-github-certifications/about-github-certifications
• GitHub Foundations on Microsoft Learn: https://learn.microsoft.com/en-us/credentials/certifications/github-foundations/

Additional Review Drills

Use these drills when the primary task is complete and the learner needs another pass over operational reasoning. They are intentionally evidence-oriented and can be answered in a local lab repository.

Drill 01: working tree

• State which Git state or reference is affected by working tree.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 02: index

• State which Git state or reference is affected by index.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 03: commit graph

• State which Git state or reference is affected by commit graph.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 04: branch reference

• State which Git state or reference is affected by branch reference.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 05: remote-tracking branch

• State which Git state or reference is affected by remote-tracking branch.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 06: reflog

• State which Git state or reference is affected by reflog.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 07: credential helper

• State which Git state or reference is affected by credential helper.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 08: signature

• State which Git state or reference is affected by signature.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 09: hook

• State which Git state or reference is affected by hook.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 10: submodule

• State which Git state or reference is affected by submodule.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 11: tag

• State which Git state or reference is affected by tag.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 12: recovery

• State which Git state or reference is affected by recovery.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 13: working tree

• State which Git state or reference is affected by working tree.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 14: index

• State which Git state or reference is affected by index.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 15: commit graph

• State which Git state or reference is affected by commit graph.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.

Drill 16: branch reference

• State which Git state or reference is affected by branch reference.
• Name one command that produces evidence and one field or line in the output that matters.
• Explain what can be concluded from that evidence and what cannot be concluded from it.
• Describe the safest recovery path for a shared training repository.