Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Subscribe
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
DevSecOps for Beginners: Tools & Automation
Rating: 3.1 out of 5(3 ratings)
112 students

DevSecOps for Beginners: Tools & Automation

Secure applications by integrating SAST, DAST, SCA, and secrets scanning into your CI/CD pipelines.
Created byRavi Teja K
Last updated 8/2025
English

What you'll learn

  • Set up a complete DevSecOps pipeline from scratch using Jenkins, integrating security tools like SAST, SCA, Container Scanning, DAST.
  • Scan real-world Java applications for vulnerabilities and insecure dependencies with open-source tools and interpret reports to identify and fix security issues
  • Automate security testing in CI/CD workflows by building and deploying secure-by-design apps with shift-left security practices and hands-on DevOps pipelines.
  • Gain practical experience securing modern applications using Docker, GitHub, and open-source tools without relying on enterprise licenses or cloud dependencies

Course content

8 sections • 15 lectures • 1h 53m total length

  • Introduction4:11

    In this lecture, you’ll learn what DevSecOps is, why it’s important, and how it integrates security into the development and operations process from the very beginning.

Requirements

  • Basic familiarity with Java programming and linux commands will be good but not required.

Description

In today’s fast-paced DevOps world, security cannot be an afterthought. This hands-on DevSecOps course is designed to teach you how to embed security into your CI/CD pipelines from Day 1.

You’ll learn how to build a complete DevSecOps pipeline using Jenkins, Docker, and GitHub, integrating powerful open-source automation tools such as:

  • SonarQube for Static Application Security Testing (SAST)

  • OWASP ZAP for Dynamic Application Security Testing (DAST)

  • OWASP Dependency-Check for Software Composition Analysis (SCA)

  • Trivy for container vulnerability scanning

This course is packed with real-world vulnerable Java applications, and we walk you step-by-step through scanning, reporting, interpreting results, and fixing vulnerabilities.

Whether you're a student, developer, DevOps engineer, or aspiring cybersecurity professional, this course gives you hands-on experience and practical skills in building secure pipelines without relying on expensive enterprise tools.

By the end of this course, you’ll understand how to shift security left, integrate security gates into CI/CD workflows, and automate security testing as part of the everyday development. No prior security experience is needed, just a passion for building secure, modern, production-ready applications that stand strong against real time threats.

Get ready to take your DevOps skills to the next level by mastering the security layer every team needs.

Who this course is for:

  • Anyone who wants to learn how to automate security in CI/CD pipelines using open-source tools.

Report abuse