Securing Your DevOps Pipelines
Keep adding new skills with 10,000+ programs for $239 (usually $399). Save now.
Ask Coursera
Recommended experience
Recommended experience
What you'll learn
Build a DevSecOps pipeline in CircleCI with several industry standard tools
Deploy a TypeScript full-stack app and see how DevSecOps reports security risks
Learn how to get your organization onboard with a security and DevOps mindset
Perform simple automated security audits to further check for vulnerabilities
Skills you'll gain
Tools you'll learn
Details to know
See how employees at top companies are mastering in-demand skills
There is 1 module in this course
Security is the top concern of businesses today. This course shows developers how to mitigate security risks by implementing DevSecOps best practices. Every organization with a DevOps framework should be looking to shift toward a DevSecOps mindset, bringing individuals of all abilities and across all technology disciplines to a higher level of proficiency in security. From testing for potential security exploits to building business-driven security services, a DevSecOps framework that uses DevSecOps tools ensures security is built into applications rather than being bolted on haphazardly afterwards.
In this course, Milecia McGregor covers how DevSecOps improves upon regular DevOps pipelines. She covers the tools and methodologies you can use to bring DevSecOps to your organization. By the end of the course, you will know how to build a DevSecOps pipeline and how to integrate different tools to handle the OWASP Top Ten, as well as compliance checks to stay up to date with regulations like HIPAA, PCI, and GDPR.
This module introduces DevOps and its evolution into DevSecOps, emphasizing the importance of integrating security into development pipelines. Learners explore key security risks, the OWASP Top 10, and how DevSecOps mitigates vulnerabilities. The course covers essential security testing types and tools, guides students through building a secure pipeline with CircleCI, and concludes with advanced security practices like penetration testing and compliance audits. By the end, participants gain practical skills to implement and secure DevOps pipelines, preparing them to enhance application security in real-world environments.
What's included
33 videos6 assignments
33 videos•Total 243 minutes
- Introduction•2 minutes
- Learning objectives•1 minute
- Understand where DevOps came from•6 minutes
- Learn how DevOps works•10 minutes
- DevOps versus Waterfall•11 minutes
- Learning objectives•1 minute
- Show where security comes in•6 minutes
- Learn how issues get to production•6 minutes
- Learn the OWASP 10 top security risks•12 minutes
- Understand how attackers gain unauthorized access to apps•5 minutes
- Learn the basics of DevSecOps•5 minutes
- Use DevSecOps to mitigate risks•6 minutes
- Learning objectives•1 minute
- Learn about SAST•9 minutes
- Use SAST tools•12 minutes
- Learn about DAST•11 minutes
- Use DAST tools•12 minutes
- Learn about IAST•10 minutes
- Use IAST tools•12 minutes
- Learn about OAST•11 minutes
- Use OAST tools•13 minutes
- Learning objectives•1 minute
- Set up the project•4 minutes
- Set up CircleCI•4 minutes
- Write the CircleCI config•10 minutes
- Break down the pipeline steps•10 minutes
- Add security to each step•12 minutes
- Learning objectives•1 minute
- Learn how pen-testing works•6 minutes
- Use Kali Linux tools•11 minutes
- Use bug bounties•5 minutes
- Perform compliance audits•15 minutes
- Securing Your DevOps Pipelines: Summary•2 minutes
6 assignments•Total 180 minutes
- Background on DevOps Quiz•30 minutes
- Security in DevOps or DevSecOps Quiz•30 minutes
- DevSecOps Tools Quiz•30 minutes
- Setting up a DevSecOps Pipeline Quiz•30 minutes
- Final Security Checks Quiz•30 minutes
- End of Course Assessment•30 minutes
Explore more from Security
- Status: Preview
Course
- Status: Free TrialM
Macquarie University
Course
- Status: PreviewB
Board Infinity
Course
- Status: PreviewJ
Johns Hopkins University
Course
Why people choose Coursera for their career
Frequently asked questions
Yes, you can preview the first video and view the syllabus before you enroll. You must purchase the course to access content not included in the preview.
If you decide to enroll in the course before the session start date, you will have access to all of the lecture videos and readings for the course. You’ll be able to submit assignments once the session starts.
Once you enroll and your session begins, you will have access to all videos and other resources, including reading items and the course discussion forum. You’ll be able to view and submit practice assessments, and complete required graded assignments to earn a grade and a Course Certificate.
More questions
Financial aid available,