DevSecOps Basics: Your First Steps From DevOps to DevSecOps

Name: DevSecOps Basics: Your First Steps From DevOps to DevSecOps
Rating: 4.6 (30 reviews)

This comprehensive course shows you everything you need to understand to get started in DevSecOps

Highest Rated

Created byMo Khalil, CloudsArk Academy

Last updated 1/2025

English

What you'll learn

Integrate security into CI/CD pipelines using tools like Snyk and GitHub Actions
Develop and secure code by applying SAST and best secure coding practices
Conduct comprehensive threat modeling and implement key DevSecOps principles
Automate infrastructure and ensure compliance with Infrastructure as Code and InSpec

Course content

7 sections • 48 lectures • 4h 55m total length

Unlocking DevSecOps: Begin Your Path to Secure Development1:57
Begin your path to secure development by integrating security into the software life cycle with DevSecOps. Gain hands-on experience with Git, Ansible playbooks, threat modeling, secure coding, and compliance automation.
Getting Started with DevSecOps: Navigating Labs and Building Essential Skills1:24

Introduction to DevSecOps2:50
The Shift-Left Approach3:15
DevSecOps in the SDLC7:18
Explore how DevSecOps integrates security into every phase of the software development life cycle, from planning and threat modeling to secure coding, building, testing, deployment, and continuous monitoring.
Benefits of Integrating Security Early3:33
Integrate security from the start to reduce risks, improve product quality, and boost team agility through early intervention, secure coding, and DevSecOps practices.
Key DevSecOps Principles3:03

The Fundamentals of Version Control Systems4:38
Explore the fundamentals of version control systems, from central to distributed models, and learn how they support code integrity, collaboration, and security in DevSecOps.
Set Up a Version Control Account - GitHub3:11
Create a GitHub version control account, verify with a launch code, and configure features like collaborative coding, automation, CI, CD security, and project management.
Install git on Windows and Ubuntu4:32
Install git on Windows and Ubuntu, choosing a standalone installer or portable option for Windows and using apt or yum on Linux. Configure the editor, environment, and credentials for setup.
Configure git8:34
Practice Initial Commit - Modifications and Adding a New Commit7:27
Mastering git - presentation3:05
Mastering git covers distributed version control, commits and messages, staging area, pushing to remote like GitHub, branching with git flow, and resolving merge conflicts.
Branching Fundamentals7:24
Encountering and Resolving Conflicts8:15
Pull Requests and Reviews8:56
Protect Main Branch4:43
Change repo visibility2:01
CI/CD Foundation4:01
CI/CD Foundation: Hands-On9:37
Add Linting workflow to GitHub Actions13:39
Set up a GitHub Actions workflow to automatically lint Python code with Flake8 and run pytest unit tests on pull requests against the main branch.
Add Unit Testing Work Flow to GitHub Actions6:34
Building CI/CD Workflows for DevSecOps3:31
Integrate security across the development life cycle using CI/CD workflows that automate vulnerability detection, with SAST, SCA, DAST, and container scanning for secure delivery.
Secure Your Code: Integrating Snyk with GitHub Actions for Python Dependency14:33
Fortify Your Python Code Integrating Bandit for Enhanced Security11:48
Prevent Leaks Implementing Secret Detection with GitHub Actions5:14
CI/CD with Docker and GitHub Actions: Overview2:33
Learn to automate Docker CI/CD with GitHub Actions, building and pushing images to AWS ECR. Run linting and vulnerability scanning with Treev to ensure secure deployments.
CI/CD with Docker and GitHub Actions: Hands-On24:17

Threat Modeling Overview3:56
Introduction to STRIDE Threat Model5:56
Explore the stride threat model and its six categories—spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege—and how it integrates with DevSecOps to safeguard the CIA triad.
Introduction to PASTS Model5:52
Introduction to DREAD Model3:14
Introduction to Attack Trees Model3:51
Attack trees are a threat modeling tool that visually map attacker goals and root nodes to attack paths, techniques, and vulnerabilities for risk assessment and defense planning.

Introduction to Secure Code4:06
Understanding and Preventing Injection Flaws16:13
SQL injection vulnerabilities are demonstrated in a Node.js Express app using MySQL, showing how unsanitized input manipulates queries and how parameterized queries and static application security testing tools prevent it.
Understanding and Preventing Injection Flaws11:37
Cross-Site Scripting Avoidance5:54
Learn cross-site scripting (XSS) and its impact, including how attackers inject malicious scripts into trusted websites, and how to sanitize input to prevent reflective vulnerabilities.

Introduction to Infrastructure as Code4:07
Introduction to Platform, Infrastructure, and Configuration Management4:49
Security in Infrastructure as Code4:28
Push and Pull-Based Configuration Management Systems2:34
Golden Image Creation with Packer and Ansible3:18
Lab 1: Building Secure Golden Images with Packer and Ansible6:03
Lab 2: Building Secure Golden Images with Packer and Ansible.mp43:23
Lab 3: Building Secure Golden Images with GitHub Actions11:27

Automating Compliance- Integrating Standards into DevOps Pipelines3:28
Automate compliance as code within your devsecops pipeline by using Puppet configuration management and Inspec/OpenSCAP checks to enforce security policies, OpenSSH server presence, auditable configurations, and continuous validation.
Secure Your Infrastructure- Writing InSpec Compliance Rules6:13
Learn to write Inspec compliance rules to validate nginx and Python three installation, ensure nginx runs and is enabled, check file permissions, and enforce security policies for DevSecOps.
Integrating InSpec with Packer for Automated Testing3:29

Requirements

Eager to learn
No prior DevSecOps experience required

Description

Unlock the full potential of secure software development with our comprehensive course, DevSecOps Basics: Your First Steps From DevOps to DevSecOps. Designed for developers, IT professionals, and security enthusiasts, this course bridges the gap between DevOps and security, emphasizing the critical integration of DevSecOps practices into the software development lifecycle (SDLC).

Begin your journey with a solid foundation in DevSecOps fundamentals, exploring the shift-left approach and understanding the myriad benefits of embedding security early in the development process. Delve into key principles that underpin DevSecOps, ensuring you grasp the essential concepts that drive successful DevOps security initiatives.

Our course offers an in-depth exploration of core DevSecOps technologies, including comprehensive modules on version control systems with Git and GitHub. Gain hands-on experience with CI/CD pipelines, leveraging tools like Snyk for dependency scanning and SAST (Static Application Security Testing) to identify vulnerabilities in your code. Through practical demonstrations, you will learn to integrate Snyk with GitHub Actions, implement secure coding practices with Bandit, and prevent sensitive data leaks using secret detection techniques.

Enhance your security expertise with advanced DevSecOps practices such as threat modeling, secure code development, and infrastructure as code (IaC). Learn to create and manage secure golden images using tools like Packer and Ansible, and automate compliance with InSpec rules integrated into your DevOps pipelines. Our hands-on labs ensure you apply these concepts in real-world scenarios, solidifying your skills in DevSecOps and DevOps security.

By the end of this course, you will be equipped with the knowledge and practical skills to implement robust security measures seamlessly within your DevOps workflows. Whether you aim to enhance your current practices or embark on a new career in DevSecOps, this course provides the essential tools and insights to achieve your goals securely and efficiently.

Enroll in DevSecOps Essentials with Practical Demos today and take the first step towards mastering the integration of development, operations, and security for a safer, more resilient software delivery process.

Enroll Now !

Who this course is for:

For students, recent graduates, professionals, and those starting or changing careers in IT: This includes individuals or teams in technology and cybersecurity who have little to no work experience.
For anyone looking to begin a career in cybersecurity, application security, or development: This is especially useful for those interested in working with cloud technologies.
For professionals involved in creating, testing, or releasing applications to production: This applies whether you work on-premises, in a public cloud, or in a hybrid environment.

DevSecOps Basics: Your First Steps From DevOps to DevSecOps

What you'll learn

Explore related topics

Course content

Introduction2 lectures • 3min

DevSecOps Fundamentals5 lectures • 20min

Core DevSecOps Technologies21 lectures • 2hr 39min

DevSecOps Practices5 lectures • 23min

Secure Code4 lectures • 38min

Infrastructure as Code and Its Security8 lectures • 40min

Compliance as Code3 lectures • 13min

Requirements

Description

Who this course is for: