DevSecOps using GitHub Actions: Secure CICD with GitHub
What you'll learn
- Understand basics of DevSecOps and learn about various tools used in DevSecOps
- Learn basics of GitHub Actions and write yaml files in GitHub Actions
- Integrate security tools in GitHub Actions Pipeline and execute SAST/DAST/SCA scans
- Implement robustness in GitHub Actions
- End to End Case study on Java Project where we implement DevSecOps Pipeline with GitHub Actions
- Learn using a Git repository from Git bash
- Learn CI/CD pipeline creation
- Learn various tools used for DevSecOps
- Learn SonarCloud
- Learn Snyk
- Learn OWASP ZAP
- Learn Yaml
- Learn to create DevSecOps Engineer CV
- Learn to implement DevSecOps for NodeJS application
- Learn to implement DevSecOps for .Net application
Requirements
- No Programming knowledge required
- Anyone with Basic computer knowledge can take this course
Description
Course Updates:
v 11.0 - Dec 2024
Added Implement End to End DevSecOps pipeline for a Game using GitHub Actions & GitOps in Section 7
v 10.0 - May 2024
Added DevSecOps Handbook document in Section 8
v 9.0 - Jan 2024
Updated GitHub Repos for SAST scan with Java 17 and changed sonar.login to sonar.token
v 8.0 - April 2023
Updated course with Indonesian and Chinese Subtitles
v 7.0 - January 2023
Added C# Assignment for DevSecOps pipeline along with Solution using GitHub Actions and some common errors and their solutions
v 6.0 - October 2022
Updated course with French and German Subtitles
v 5.0 - July 2022
Updated course with NodeJS Case Study to implement an End to End DevSecOps Pipeline for a NodeJS Project using GitHub Actions in Section 5
v 4.0 - June 2022
Updated course with Notes on Populating Code Coverage on SonarCloud or SonarQube Dashboard in Section 3
Updated course with Notes on GIT Commands in Section 3
Updated course with newer videos to create account with SonarCloud and Snyk
Updated course videos content
v 3.0 - May 2022
Updated course with Report Walkthrough of SAST, SCA and DAST tools integrated in End to End DevSecOps Pipeline with GitHub Actions
v 2.0 - May 2022
Updated course with videos on End To End DevSecOps Pipeline with GitHub Actions
Added new questions to Quizzes
v 1.0 - April 2022
Updated course with newer videos on GitHub Actions Basics
Added Quizzes to the course
Who shall take this course?
This DevSecOps course is designed for Security Engineers, DevOps Engineers, SRE, QA Professionals and Freshers looking to find a job in the field of security. This is a focused DevSecOps course with a special focus on integrating SAST/DAST/SCA tools in Build pipeline.
Hands On Experience:
1) End to End Case study on Java Project where we implement DevSecOps Pipeline with GitHub Actions (Must Learn)
2) Learn and implement security in DevOps pipeline, get Hands On experience in using Security tools & technologies using GitHub Actions
This course is for:
Developers
DevOps
Security Engineers
Aspiring professional in the Security domain
Quality Assurance Engineers
InfoSec/AppSec Professional
DevSecOps being the hot skill, will help you to secure a high-salaried job and stay informed on the latest market trends.
Why purchase this course?
This is only practical hands-on course available on the internet till now.
DevSecOps enables rapid application development with agility, at the same time it secures your application with automated security checks integrated within the pipeline. It helps to increase productivity and security by integrating security stages in the pipeline.
Also, we have included practical examples to implement security in the DevOps pipeline through various tools.
By the end of the course, you will be able to successfully implement DevOps or DevSecOps pipeline and lead initiatives to create, build and maintain security pipelines in your project.
Things to consider before taking this course:
1) Create a GitHub account
Disclaimer: Indonesian, Chinese, French, German, Spanish and English subtitles are generate via Caption Generator tool so please ignore any grammar/interpretation mistakes
Who this course is for:
- Beginner security engineer
- Quality assurance engineers
- DevOps/DevSecOps Engineers
- Automation Engineers
Instructors
- 4.5 Instructor Rating
- 5,044 Reviews
- 40,911 Students
- 14 Courses
A Security Guru is a dedicated mentor and expert in the field of application security, DevSecOps, DevOps, and security architecture. With a passion for empowering students and professionals, A Security Guru provides comprehensive guidance, practical knowledge, and real-world insights to help them master the intricacies of secure coding, integration of security practices in development, and designing robust security frameworks. By combining deep technical expertise with accessible teaching, A Security Guru ensures that learners build the confidence and skills needed to excel in the ever-evolving landscape of cybersecurity and software development.
- 4.4 Instructor Rating
- 7,534 Reviews
- 50,738 Students
- 29 Courses
With over 20 years of experience in security, automation, development, Gen AI and teaching, I’ve mastered and earned numerous prestigious certifications across Microsoft, Google, and AWS cloud platforms. I’m passionate about both learning and teaching new technologies, always eager to explore the latest advancements. I take pride in guiding students and professionals, offering hands-on, interactive learning experiences that empower them to upskill effectively. Whether it’s diving deep into security concepts or navigating cloud infrastructure, I’m here to make complex topics approachable and engaging.