> ## Documentation Index
> Fetch the complete documentation index at: https://notes.kodekloud.com/llms.txt
> Use this file to discover all available pages before exploring further.

# The Real World Problem

> Guidance for GitHub Enterprise administration to remediate ghost users, unmanaged tokens, runaway Actions costs, and leaked secrets, improving security, governance, and operational controls.

Let's make this problem concrete before we discuss solutions.

Picture a specific kind of enterprise—one you may have worked at or may be working at now. The company has 800 software engineers. Three years ago they adopted GitHub Enterprise Cloud because a number of developers requested it. Someone provisioned the enterprise account, created a few organizations, and handed the keys over to engineering teams.

There is no dedicated GitHub administrator and no governance policy. Instead there is a shared Slack channel called GitHub Help where questions sometimes get answered.

Now look at what is happening below the surface.

1. Ghost users and stale access

* Over the past 18 months, 47 people left the company. Thirty-one of them still have active organization memberships on GitHub.
* Six of those former employees still have repository admin access on production codebases.
* Three left behind personal access tokens (PATs) that never expired; two of those tokens are still used by CI pipelines that no one maintains.

2. Uncontrolled tokens and credentials

* A security audit found 340 active personal access tokens across the organizations.
* Eighty-nine of them have never been used. Twelve include the `repo` scope, granting full repository control.
* For 23 tokens, no one can identify the creator.

3. Runaway cost

* The engineering finance report shows GitHub Actions spending jumped to around $180,000 this quarter from roughly $65,000 last quarter.
* Nobody can immediately explain the increase.

![A slide titled "Runaway Cost" showing GitHub Actions spend rising from 65k last quarter (blue bar) to 180k this quarter (orange bar).](https://mintcdn.com/kodekloud-c4ac6d9a/s_90rjuRPpIstUzn/images/GitHub-Administration-Certification/Course-Introduction/The-Real-World-Problem/runaway-cost-github-actions-spend.jpg?fit=max\&auto=format\&n=s_90rjuRPpIstUzn\&q=85\&s=e838728c89301c8010aa6bea561e669c)

An investigation reveals one team began running full integration tests on macOS runners for every commit, including commits to personal feature branches. macOS runners typically carry a significant cost multiplier, and that single practice transformed a manageable bill into a budget crisis.

4. Secrets committed to repositories

* During a pre-acquisition review, the acquiring company's security team scanned the target's repositories and found 14 hardcoded credentials committed over the past two years: three AWS keys, one Stripe API key, and two internal database passwords.
* Two AWS keys were still valid. The discovery nearly derailed the deal.

These concrete examples point to a common root cause: gaps in administration, governance, and operational best practices create measurable risk across security, cost, and compliance.

Left unchecked, these issues lead to: unauthorized access, data leaks, expensive CI bills, failed audits, and increased M\&A risk. Effective GitHub Enterprise administration is the countermeasure.

Summary of problems and immediate impact

| Problem | Symptom discovered in the audit | Business impact |
| - | -: | - |
| Ghost users / stale access | 31 former employees still members; 6 with repo admin access | Unauthorized access to production code; compliance violations |
| Uncontrolled personal access tokens | 340 active PATs; 89 unused; 12 with `repo` scope | Elevated attack surface; unknown credentials in use |
| Runaway Actions spend | Cost jumped from $65k to $180k in a quarter | Unexpected budget overruns; poor CI governance |
| Hardcoded secrets | 14 secrets found; 2 AWS keys still valid | Data exfiltration; failed security reviews; M\&A issues |

What this lesson will cover: practical, scalable controls and processes for GitHub Enterprise administration — including identity lifecycle management, PAT governance, Actions cost controls, and secrets detection/remediation. Expect hands-on techniques and policy patterns you can adopt or adapt.

Every one of these problems has a solution, and implementing those solutions is the role of the GitHub Enterprise Administrator. In this lesson we will build toward the practical skills, processes, and controls needed to manage GitHub at scale and prevent the kinds of problems described above.

Links and references

* GitHub Actions overview: [https://docs.github.com/en/actions](https://docs.github.com/en/actions)
* Personal access tokens (GitHub Docs): [https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token)
* Best practices for secrets scanning and management: [https://docs.github.com/en/code-security/secret-scanning](https://docs.github.com/en/code-security/secret-scanning)

> **[Watch Video](https://learn.kodekloud.com/user/courses/github-administration-certification/module/6f6426ae-688c-4b0a-9df6-9d236b28f801/lesson/e48cc0e2-2605-4eb3-9012-264fdfe39dbf)**


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.