Autoplay
Autocomplete
Speed
Previous Lecture
Complete and Continue
DevSecOps Professional
Introduction to the course
Introduction to the course (8:12)
How to approach this course? (7:05)
DevSecOps Journey of Teachera - The Scenario (2:02)
How to use this course portal
Where's my course material ?
Frequently Asked Questions (FAQs)
Course Prerequisites
Schedule a Kickoff Meeting
Demo: A full enterprise-grade DevSecOps Pipeline (4:58)
References used throughout the course
Chapter 1: An Introduction to the Basics
Introduction to DevOps and DevSecOps (13:55)
QUIZ: Introduction to DevOps and DevSecOps
[DevSecOps-Labs] Login to the browser based lab
[DevSecOps-Labs] How to use browser based lab
Troubleshooting aka something is not working
Chapter 2: Introduction to the Tools of the trade
Introduction to tools of the trade (6:49)
QUIZ: Introduction to tools of the trade
Practicing Infrastructure as Code using Docker (10:03)
Learning Resources: Docker and its security
[DevSecOps-Lab] Basic and Advanced Linux commands
[DevSecOps-Lab] Learn Docker commands and concepts
Chapter 3: Secure SDLC and CI/CD pipeline
Secure SDLC and CI/CD Pipelines (18:31)
QUIZ: Secure SDLC and CI/CD Pipelines
[DevSecOps-labs] Learn CI/CD
Shared gitlab runners vs Dedicated gitlab runners?
Chapter 4: Software Component Analysis(SCA) in CI/CD pipeline
Software Component Analysis(SCA) in CI/CD Pipeline (15:31)
QUIZ: Software Component Analysis(SCA) in CI/CD Pipeline
How SCA tools work - Appendix
[DevSecOps-Labs] Please complete the labs and come back
Demo: Software Component Analysis Using Safety (2:50)
Demo: Software Component Analysis Using RetireJS (2:50)
Demo: How To Embed Safety Into CI/CD Pipeline (4:55)
Demo: How To Embed RetireJS Into CI/CD Pipeline (6:19)
Chapter 5: SAST (Static Analysis) in CI/CD pipeline
SAST (Static Analysis) in CI/CD Pipeline (11:31)
QUIZ: SAST (Static Analysis) in CI/CD Pipeline
[DevSecOps-Labs] Please complete the labs and come back
Demo: Secrets Scanning With TruffleHog (1:50)
Demo: How To Embed TruffleHog Into CI/CD Pipeline (7:29)
Demo: Static Analysis Using Bandit (2:10)
Demo: How To Embed Bandit Into CI/CD Pipeline (6:01)
Demo: False Positive Analysis (14:17)
Demo: Static Analysis Using Brakeman (4:24)
Chapter 6: DAST (Dynamic Analysis) in CI/CD pipeline
DAST (Dynamic Analysis) in CI/CD Pipeline (14:41)
QUIZ: DAST(Dynamic Analysis) in CI/CD Pipeline
Troubleshooting SSH Keys and Deployment issues
[DevSecOps-Labs] Please complete the labs and come back
[Optional] Buy extra lab time
Demo: Dynamic Analysis Using Nikto (3:34)
Demo: Dynamic Analysis Using SSLyze (3:36)
Demo: Dynamic Analysis Using NMAP (2:53)
Demo: Embed Nikto, SSLyze, Nmap Into CI/CD Pipeline (8:06)
Demo: Dynamic Analysis Using ZAP (6:30)
Demo: How To Embed Zed Attack Proxy Into CI/CD Pipeline (6:52)
Chapter 7: Infrastructure as Code and Its Security
Infrastructure as Code and Its Security (19:47)
QUIZ: Infrastructure as Code and Its Security
[DevSecOps-Labs] Please complete the exercises and come back
Demo: Hardening Using Ansible (13:57)
Demo: Ansible Adhoc Commands (9:32)
Demo: Harden Machines In CI/CD Pipelines (18:14)
Chapter 8: Compliance as code
Compliance as Code (11:15)
QUIZ: Compliance as Code
[DevSecOps-Labs] Please complete the labs and come back
Demo: Compliance As Code Using Inspec (15:51)
Demo: How To Create Custom Inspec Profile (19:54)
Chapter 9: Vulnerability Management with custom tools
Vulnerability management with Custom Tools (9:01)
[DevSecOps-Labs] Please complete the labs and come back
Demo: Vulnerability Management With Defect Dojo (10:07)
Demo: Automated Results Upload In CI/CD Pipeline (14:22)
Practical DevSecOps Exam/Certification Process
Exam and Certification process
Exercise: Schedule the Exam
Certificate of Completion
Extra Mile Exercises and Tasks
False Positive Analysis
[OPTIONAL] Optional Course Check-in
Compliance as Code
Lecture content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock