CI/CD Pipeline Security: The Complete DevSecOps course 2024

Course Curriculum

Chapter 1: Introduction

Lecture 1: Unlocking DevSecOps: Begin Your Path to Secure Development

Lecture 2: Getting Started with DevSecOps: Navigating Labs and Building Essential Skills

Chapter 2: Introduction to Docker

Lecture 1: Introduction to Docker

Lecture 2: Introduction to Docker and Virtual Machines

Lecture 3: Setting Up Your Docker Environment – Windows Installation

Lecture 4: Setting Up Your Docker Environment – Ubuntu Installation

Lecture 5: Docker Terminology and Architecture

Lecture 6: Docker Basics

Lecture 7: Working with Docker Images

Lecture 8: Managing Containers

Lecture 9: Networking in Docker

Lecture 10: Persistent Storage and Volumes

Lecture 11: Introduction to Docker Compose and Services

Lecture 12: Introduction to Docker Compose – Practical Example

Lecture 13: Multi-container Applications Hands-On

Lecture 14: Scalability and Load Balancing Hands-On

Chapter 3: Introduction to Ansible

Lecture 1: Introduction to Ansible

Lecture 2: Getting Started with Ansible – Installation Guide on Ubuntu 22.04

Lecture 3: Ansible Essentials – Installing with Pip in a Virtual Environment

Lecture 4: Understanding Ansible- Architecture and Essentials

Lecture 5: Understanding Ansible – Inventory Basics

Lecture 6: Building Blocks of Ansible- Crafting Your First Inventory File

Lecture 7: Anatomy of Ansible- Unraveling Hosts and Groups

Lecture 8: Hands-On Ansible- Implementing Hosts and Groups in Practice

Lecture 9: YAML Essentials for Ansible Automation- A Beginner s Guide

Lecture 10: Playbook Structure

Lecture 11: Create your first ansible playbook

Lecture 12: YAML Essentials for Ansible Automation- Hands-on

Chapter 4: DevSecOps Fundamentals

Lecture 1: Introduction to DevSecOps

Lecture 2: The Shift-Left Approach

Lecture 3: DevSecOps in the SDLC

Lecture 4: Benefits of Integrating Security Early

Lecture 5: Key DevSecOps Principles

Chapter 5: Core DevSecOps Technologies

Lecture 1: The Fundamentals of Version Control Systems

Lecture 2: Set Up a Version Control Account – GitHub

Lecture 3: Install git on Windows and Ubuntu

Lecture 4: Configure git

Lecture 5: Practice Initial Commit – Modifications and Adding a New Commit

Lecture 6: Mastering git – presentation

Lecture 7: Branching Fundamentals

Lecture 8: Encountering and Resolving Conflicts

Lecture 9: Pull Requests and Reviews

Lecture 10: Protect Main Branch

Lecture 11: Change repo visibility

Lecture 12: CI/CD Foundation

Lecture 13: CI/CD Foundation: Hands-On

Lecture 14: Add Linting workflow to GitHub Actions

Lecture 15: Add Unit Testing Work Flow to GitHub Actions

Lecture 16: Building CI/CD Workflows for DevSecOps

Lecture 17: Secure Your Code: Integrating Snyk with GitHub Actions for Python Dependency

Lecture 18: Fortify Your Python Code Integrating Bandit for Enhanced Security

Lecture 19: Prevent Leaks Implementing Secret Detection with GitHub Actions

Lecture 20: CI/CD with Docker and GitHub Actions: Overview

Lecture 21: CI/CD with Docker and GitHub Actions: Hands-On

Chapter 6: DevSecOps Practices

Lecture 1: Threat Modeling Overview

Lecture 2: Introduction to STRIDE Threat Model

Lecture 3: Introduction to PASTS Model

Lecture 4: Introduction to DREAD Model

Lecture 5: Introduction to Attack Trees Model

Chapter 7: Secure Code

Lecture 1: Introduction to Secure Code

Lecture 2: Understanding and Preventing Injection Flaws

Lecture 3: Understanding and Preventing Injection Flaws

Lecture 4: Cross-Site Scripting Avoidance

Chapter 8: Infrastructure as Code and Its Security

Lecture 1: Introduction to Infrastructure as Code

Lecture 2: Introduction to Platform, Infrastructure, and Configuration Management

Lecture 3: Security in Infrastructure as Code

Lecture 4: Push and Pull-Based Configuration Management Systems

Lecture 5: Golden Image Creation with Packer and Ansible

Lecture 6: Lab 1: Building Secure Golden Images with Packer and Ansible

Lecture 7: Lab 2: Building Secure Golden Images with Packer and Ansible.mp4

Lecture 8: Lab 3: Building Secure Golden Images with GitHub Actions

Chapter 9: Compliance as Code

Lecture 1: Automating Compliance- Integrating Standards into DevOps Pipelines

Lecture 2: Secure Your Infrastructure- Writing InSpec Compliance Rules

Lecture 3: Integrating InSpec with Packer for Automated Testing