DevConf Courses

Chains of Trust in Confidential Computing

Explore Confidential Computing technologies, chains of trust, and attestation techniques for protecting data in use across various scenarios, from VMs to clusters.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Incident Management for Small Service Teams

Explore incident management strategies for small service teams, focusing on detection, tracking, fixing, and prevention using Red Hat's CKI project as a case study.

• YouTube
• 37 minutes
• Self-Paced
• Free Video

FIDO2 Authentication for Centrally Managed Users

Explore FIDO2/WebAuthn authentication for centralized identity management in POSIX systems, enhancing security while maintaining strict access control for organizations.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Gaining Initial Access by Exploiting Leaked Credentials

Explore how attackers exploit leaked credentials to breach organizations and learn effective prevention strategies for safeguarding sensitive information.

• YouTube
• 33 minutes
• Self-Paced
• Free Video

Using Kuttl to Release Fast - Reducing Broken Builds

Discover how Kuttl streamlines local testing, reduces broken builds, and empowers developers to match test environments accurately, enhancing CI efficiency and team productivity.

• YouTube
• 26 minutes
• Self-Paced
• Free Video

Effective SAST: Secure Code Analysis in the CI/CD

Explore semgrep for static code analysis, learn to interpret results, create custom rules, and integrate into CI/CD pipelines to enhance application security and catch vulnerabilities early.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

The Internet is Broken: Breaking Down the Software Supply Chain

Explore modern software vulnerabilities, recent supply chain attacks, and actionable steps to build secure applications in an insecure internet environment.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

DevOps for Ansible Lightspeed - AI Model and Ansible

Explore the DevOps platform behind Ansible Lightspeed, an AI-powered service for generating Ansible content. Learn about automated pipelines, testing strategies, and tech stack decisions.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Software Bill of Materials (SBoM) for Dummies

Explore Software Bill of Materials (SBoM), its importance, and implementation in Fedora. Learn about US government mandates, hidden pitfalls, and the SPDX migration.

• YouTube
• 31 minutes
• Self-Paced
• Free Video

Security Compliance: A Global Perspective

Explore global security compliance frameworks and learn how Red Hat simplifies implementation of technical controls for government and organizational requirements.

• YouTube
• 36 minutes
• Self-Paced
• Free Video

Progressive Delivery with Argo Rollouts

Explore progressive delivery using Argo Rollouts, covering deployment strategies, OpenShift integration, and GitOps principles for modern software development.

• YouTube
• 35 minutes
• Self-Paced
• Free Video

Package Operator: Large-Scale Day-2 Operations

Explore automation and resiliency for managing services in customer-owned cloud environments using Package Operator, an open-source project for Kubernetes day-2 operations.

• YouTube
• 29 minutes
• Self-Paced
• Free Video

Confidential Computing: From Host to Workload

Explore confidential computing technologies, from machine setup to running secure containerized workloads, covering architectures, workload preparation, and security considerations.

• YouTube
• 41 minutes
• Self-Paced
• Free Video

Optimize Long Test Runtimes Using Open AIOps

Optimize CI/CD workflows with AI4CI: Predict test failure times, determine optimal stopping points, and efficiently manage development resources using open AIOps tools and ML models.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Bug Bounty Hunting - Ethical Hacking for Software Security

Explore legal hacking, vulnerability disclosure, and ethical security practices. Learn to write effective reports and analyze published exploits.

• YouTube
• 35 minutes
• Self-Paced
• Free Video