Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

LinkedIn Learning

DevSecOps: Building a Secure Continuous Delivery Pipeline

via LinkedIn Learning

Write review

No Longer Offered

Overview

Build a Learning Habit
Download Class Central's free printable study calendar
Download for Free
Explore best practices and tools that can help you implement security across the entirety of the continuous integration and continuous delivery (CI/CD) pipeline.

Syllabus

Introduction
  • Securing your CI/CD pipeline
  • What you should know
1. The DevSecOps Toolchain
  • Traditional InfoSec is in crisis
  • Introducing DevSecOps
  • The continuous delivery pipeline
  • Goals for a DevSecOps toolchain approach
2. Development Tools
  • Secure development practices
  • Static code analysis
  • Tool: Keeping secrets with git-secrets
  • Tool: Rapid Risk Assessment
3. Inherit Tools
  • What's in your app?
  • OWASP Dependency Check in practice
  • JavaScript security with Retire.js: Installation
  • JavaScript security with Retire.js: Testing
  • Options for software composition analysis
4. Build Tools
  • Security testing in the build stage
  • AppSec scanning with DAST tools
  • Gauntlt in practice
5. Deploy Tools
  • Security in the deploy phase
  • Rundeck for deployments
  • Tricks for making compliance happy
6. Operation Tools
  • Keeping security in operate
  • Modern application security
  • Signal Sciences in practice
  • Cloud security monitoring
Conclusion
  • Next steps

Taught by

James Wickett

Reviews

4.6 rating at LinkedIn Learning based on 310 ratings

Start your review of DevSecOps: Building a Secure Continuous Delivery Pipeline

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.