On this repo you can find all resources used during the course.
Navigate to https://tasb.github.io/secure-devops-training/ to have access to a HTML version of these instructions.
The slides used during the sessions are available on the slides folder.
- Introduction to Secure DevOps
- Continuous Integration
- Continuous Delivery
- Infrastructure as Code
- Container Security
- Lab 01 - Enable GitHooks with Talisman
- Lab 02 - Enable Secret Scanning
- Lab 03 - Enable SCA
- Lab 04 - Enable SAST
- Lab 05 - SCA and SAST on pipeline
- Lab 06 - Secure your Infrastructure as Code
- Lab 07 - Secure your Containers
- Lab 08 - Run DAST on your application
For any feedback open up an issue describing what you have found and I'll return to you!