GH-200 practice questions 91–91

You are developing a GitHub Actions workflow that will build a .NET app. You need to provide the workflow with access to a sensitive enterprise license. The solution must ensure that the license is NOT exposed publicly or hardcoded. What should you do?

• AUse a GitHub-hosted Windows runner and expose the license via a public URL downloaded by the workflow at runtime.
• BEmbed the license into an encrypted ZIP file stored in a repository and decrypt the file at runtime by using a hardcoded passphrase.
• CUse GitHub Enterprise Managed User (OIDC) in a GitHub-hosted or self-hosted Windows runner to fetch the license from a third-party vault or secrets manager at runtime.
• DUse a GitHub-hosted Ubuntu runner and store the license in a Base64-encoded repository.