Skip to content
NerdLevelTech
Intermediate

DevSecOps Fundamentals: Security-Integrated CI/CD Pipelines

Master security-first DevOps practices. Learn SAST, DAST, SCA, container security, secrets management, and compliance automation with hands-on tools like Snyk, Trivy, Vault, and GitHub Advanced Security.

79 min24 lessons6 modulesDevOps

What you'll learn

  • Integrate SAST tools like Snyk into CI/CD pipelines
  • Implement DAST scanning for web applications
  • Perform SCA to identify vulnerable dependencies
  • Secure container images with Trivy vulnerability scanning
  • Manage secrets safely using HashiCorp Vault

Course Content

  1. DevSecOps Foundations

    4 lessons · 12 min
    • What is DevSecOps? Security as CultureNo signup3 min
    • Locked until you enrollShift-Left Security: The DevSecOps Philosophy3 min
    • Locked until you enrollDevSecOps vs DevOps vs SecOps3 min
    • Locked until you enrollThe DevSecOps Pipeline Architecture3 min
    • Quiz: Module 1: DevSecOps Foundations

  2. Static Application Security Testing (SAST)

    4 lessons · 12 min
    • Locked until you enrollUnderstanding SAST: Code-Level Security3 min
    • Locked until you enrollSAST Tools: Semgrep, CodeQL, SonarQube3 min
    • Locked until you enrollIntegrating SAST in GitHub Actions3 min
    • Locked until you enrollSAST Best Practices & False Positive Management3 min
    • Quiz: Module 2: Static Application Security Testing (SAST)

  3. Dependency & Container Security

    4 lessons · 12 min
    • Locked until you enrollSoftware Composition Analysis (SCA)3 min
    • Locked until you enrollSnyk: Dependency Scanning in CI/CD3 min
    • Locked until you enrollContainer Security with Trivy3 min
    • Locked until you enrollBase Image Hardening & Distroless Containers3 min
    • Quiz: Module 3: Dependency & Container Security

  4. Dynamic Testing & Runtime Security

    4 lessons · 12 min
    • Locked until you enrollUnderstanding DAST: Runtime Security Testing3 min
    • Locked until you enrollOWASP ZAP Automation in Pipelines3 min
    • Locked until you enrollAPI Security Testing with Nuclei3 min
    • Locked until you enrollRuntime Application Self-Protection (RASP)3 min
    • Quiz: Module 4: Dynamic Testing & Runtime Security

  5. Secrets Management & Infrastructure Security

    4 lessons · 15 min
    • Locked until you enrollSecrets in CI/CD: Risks and Anti-Patterns3 min
    • Locked until you enrollHashiCorp Vault: Dynamic Secrets Management4 min
    • Locked until you enrollGitHub Secrets & OIDC Authentication4 min
    • Locked until you enrollInfrastructure as Code Security (Checkov, tfsec)4 min
    • Quiz: Module 5: Secrets Management & Infrastructure Security

  6. Compliance, Governance & DevSecOps Maturity

    4 lessons · 16 min
    • Locked until you enrollPolicy as Code with OPA & Rego4 min
    • Locked until you enrollCompliance Automation (SOC2, HIPAA, PCI-DSS)4 min
    • Locked until you enrollSecurity Dashboards & Vulnerability Management4 min
    • Locked until you enrollDevSecOps Maturity Model & Security Culture4 min
    • Quiz: Module 6: Compliance, Governance & DevSecOps Maturity