Autoplay
Autocomplete
Previous Lecture
Complete and Continue
DevSecOps Professional
Introduction to the course
Introduction to the course (8:12)
How to approach this course? (7:05)
DevSecOps Journey of Teachera - The Scenario (2:02)
How to use this course portal
Where's my course material ?
Frequently Asked Questions (FAQs)
Course Prerequisites
Activity: Tell Us About Your Learning Objectives
Demo: A full enterprise-grade DevSecOps Pipeline (4:58)
References used throughout the course
Chapter 1: An Introduction to the Basics
Introduction to DevOps and DevSecOps (13:55)
QUIZ: Introduction to DevOps and DevSecOps
[DevSecOps-Labs] Login to the browser based lab
[DevSecOps-Labs] How to use browser based lab
Troubleshooting aka something is not working
How to get help from the staff in Slack
Chapter 2: Introduction to the Tools of the trade
Introduction to tools of the trade (6:49)
QUIZ: Introduction to tools of the trade
Practicing Infrastructure as Code using Docker (10:03)
Learning Resources: Docker and its security
[DevSecOps-Lab] Basic and Advanced Linux commands
[DevSecOps-Lab] Learn Docker commands and concepts
Chapter 3: Secure SDLC and CI/CD pipeline
Secure SDLC and CI/CD Pipelines (18:31)
QUIZ: Secure SDLC and CI/CD Pipelines
[DevSecOps-labs] Learn CI/CD
Shared gitlab runners vs Dedicated gitlab runners?
Chapter 4: Software Component Analysis(SCA) in CI/CD pipeline
Software Component Analysis(SCA) in CI/CD Pipeline (15:31)
QUIZ: Software Component Analysis(SCA) in CI/CD Pipeline
How SCA tools work - Appendix
[DevSecOps-Labs] Please complete the labs and come back
Demo: Software Component Analysis Using Safety (2:50)
Demo: Software Component Analysis Using RetireJS (2:50)
Demo: How To Embed Safety Into CI/CD Pipeline (4:55)
Demo: How To Embed RetireJS Into CI/CD Pipeline (6:19)
Chapter 5: SAST (Static Analysis) in CI/CD pipeline
SAST (Static Analysis) in CI/CD Pipeline (11:31)
QUIZ: SAST (Static Analysis) in CI/CD Pipeline
[DevSecOps-Labs] Please complete the labs and come back
Demo: Secrets Scanning With TruffleHog (1:50)
Demo: How To Embed TruffleHog Into CI/CD Pipeline (7:29)
Demo: Static Analysis Using Bandit (2:10)
Demo: How To Embed Bandit Into CI/CD Pipeline (6:01)
Demo: False Positive Analysis (14:17)
Demo: Static Analysis Using Brakeman (4:24)
Chapter 6: DAST (Dynamic Analysis) in CI/CD pipeline
DAST (Dynamic Analysis) in CI/CD Pipeline (14:41)
QUIZ: DAST(Dynamic Analysis) in CI/CD Pipeline
Troubleshooting SSH Keys and Deployment issues
[DevSecOps-Labs] Please complete the labs and come back
Mid Course Check-in
[Optional] Buy extra lab time
Demo: Dynamic Analysis Using Nikto (3:34)
Demo: Dynamic Analysis Using SSLyze (3:36)
Demo: Dynamic Analysis Using NMAP (2:53)
Demo: Embed Nikto, SSLyze, Nmap Into CI/CD Pipeline (8:06)
Demo: Dynamic Analysis Using ZAP (6:30)
Demo: How To Embed Zed Attack Proxy Into CI/CD Pipeline (6:52)
Chapter 7: Infrastructure as Code and Its Security
Infrastructure as Code and Its Security (19:47)
QUIZ: Infrastructure as Code and Its Security
[DevSecOps-Labs] Please complete the exercises and come back
Demo: Hardening Using Ansible (13:57)
Demo: Ansible Adhoc Commands (9:32)
Demo: Harden Machines In CI/CD Pipelines (18:14)
Chapter 8: Compliance as code
Compliance as Code (11:15)
QUIZ: Compliance as Code
[DevSecOps-Labs] Please complete the labs and come back
Demo: Compliance As Code Using Inspec (15:51)
Demo: How To Create Custom Inspec Profile (19:54)
Chapter 9: Vulnerability Management with custom tools
Vulnerability management with Custom Tools (9:01)
[DevSecOps-Labs] Please complete the labs and come back
Demo: Vulnerability Management With Defect Dojo (10:07)
Demo: Automated Results Upload In CI/CD Pipeline (14:22)
Practical DevSecOps Exam/Certification Process
Exam and Certification process
Exercise: Schedule the Exam
Reschedule the Exam
Extra Mile Exercises and Tasks
False Positive Analysis
Certificate of Completion
Compliance as Code
Lecture content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock