Introduction & Course Agenda

What is DevSecOps

Basic Security Terms - If new to security field

Tools used for DevSecOps Implementation in the market - Detailed discussion

DevSecOps in GitLab

Create GitLab Free Tier Account

Import Vulnerable source code repo in GitLab from GitHub account

Write a simple .gitlab-ci.yml file and print text using GitLab shared runner

Create master branch and make it default for the source code repo in GitLab

What is SonarCloud and its benefits

Create an account with SonarCloud before implementing SAST in DevSecOps Pipeline

Hands-On Create Quality Gates in DevSecOps pipeline using SonarCloud - Part 1

Hands-On Integrate SonarCloud within GitLab DevSecOps pipeline

Hands-On Populate Unit Test Code Coverage on SonarCloud Dashboard for DevSecOps

Hands-On Create Quality Gates in DevSecOps pipeline using SonarCloud - Part 2

What is Snyk and its benefits

Create an account with Snyk before implementing SCA in DevSecOps Pipeline

Hands-On Integrate Snyk within GitLab DevSecOps Pipeline to perform SCA

What is OWASP ZAP and its benefits

Hands-On Integrate OWASP ZAP within GitLab DevSecOps Pipeline to perform DAST

Case Study Understanding Project Requirements before workflow implementation

Hands On Execute End to End GitLab DevSecOps Pipeline and review logs

Hands On Write code changes to integrate SAST, SCA & DAST in DevSecOps Pipeline

Hands On Create a JIRA account with Atlassian with custom JIRA site

Hands On Report SCA security issues in JIRA identified by Snyk

Hands On Report SAST security issues in JIRA identified by SonarCloud

Hands On Report DAST security issues in JIRA identified by OWASP ZAP

Hands On Integrate JIRA with SonarCloud to create tickets with one-click

What are SAST and DAST Analyzer from GitLab and Why shall we use it in pipeline

Hands On Understand Code to integrate SAST and DAST Analyzers by GitLab

Hands On SAST and DAST Analyzers provided by GitLab - Code Execution

Optional Security As a Career