DevSecOps Tutorial for Beginners | CI Pipeline with GitHub Actions and Docker Scout
Source: YouTube · TechWorld with Nana · published Dec 7, 2023 · 1:20:00
This crash course teaches DevSecOps fundamentals through practical demonstrations, showing how to integrate security into the development lifecycle 0:00.
Key Takeaways:
• DevSecOps integrates security into DevOps through automation and shifting security "left" in the pipeline 8:03
• SAST scans code for vulnerabilities like SQL injection and hardcoded secrets 10:08
• SCA checks third-party dependencies for known vulnerabilities 12:36
• The course demonstrates GitHub Actions and tools like Bandit for Python SAST scanning 25:00
• Configure scanning tools to focus on high-severity issues to reduce noise 33:03
The course provides both theoretical understanding and hands-on experience with DevSecOps tools 19:12.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Welcome to this
DevSecOps Crash course. After an extremely successful
launch of our complete DevSecOps bootcamp, which so many of you
were interested in and so many companies
are already using to upskill their engineers. After seeing this immense
interest in this topic, I wanted to create a DevSecOps
crash course for those who want to get an idea of what that is, to get a basic understanding
of DevSecOps concepts, DevSecOps tools, and get their very first hands
on experience with actual practical implementation
of DevSecOps. So in this crash course, we're going to go through
the fundamentals of what DevSecOps is, as well as see some hands
on examples with a demo project. So you get an understanding
of it. And then if it spikes
your interest, you can decide if you want
to actually enroll an…