Modern delivery pipelines build and deploy software automatically, which makes them powerful and an attractive target. This DevSecOps training teaches engineering teams how to build security into CI/CD pipelines, infrastructure as code and the software supply chain without slowing delivery.
Who should attend
- DevOps, platform and site reliability engineers
- DevSecOps and application security engineers
- Cloud engineers working with infrastructure as code
- Engineering managers responsible for delivery pipelines
- Developers who write the code can start with our Secure Software Development Training
What you will learn
- DevSecOps principles and where security fits in the delivery pipeline
- Integrating SAST, DAST, SCA and secrets scanning into CI/CD, and using them as quality gates
- Handling findings: deduplication, prioritization and false positive management
- Securing pipelines: runners, credentials, permissions and pipeline configuration
- Infrastructure as code security: common misconfigurations in Terraform, CloudFormation, Kubernetes manifests and more
- Policy as code and automated guardrails
- Container image security
- Software supply chain security: dependencies, SBOM, signing and verification
- Secrets management
- Measuring security in the pipeline: metrics and SLAs
Hands-on labs
Participants work with a sample pipeline and infrastructure code, adding security checks and fixing issues.
What you receive
- Course materials and lab access
- Pipeline security checklists and reference configurations
- A certificate of attendance
Frequently asked questions
Build secure delivery pipelines
Contact us for dates, pricing and corporate options.
Need 24/7 Protection From Cyber Attacks?