This GitLab CI/CD DevSecOps course focuses on building secure and automated CI/CD pipelines using modern DevSecOps practices. It is designed to help developers and DevOps engineers integrate security directly into their software delivery workflows.
You will start by learning how to integrate SonarCloud and SonarQube into GitLab CI pipelines for code quality analysis and static code scanning. This helps detect bugs and vulnerabilities early in the development process.
The course also covers setting up self-hosted GitLab Runners on AWS, allowing you to run pipelines on your own infrastructure for better control and scalability.
You will learn how to manage GitLab CI/CD variables securely, including best practices for handling sensitive data in pipelines. The course also introduces DevOps roadmap concepts to help you understand the career path in DevOps engineering.
A major focus of this course is security scanning in CI/CD pipelines. You will learn how to implement SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), and container image scanning to secure applications before deployment.
In addition, the course covers Infrastructure as Code (IaC) security scanning using Checkov, helping you detect misconfigurations in Terraform and cloud infrastructure.
Finally, you will learn how to create reusable GitLab templates and optimize YAML pipelines for better structure and maintainability.
By the end of this course, you will be able to build secure, scalable, and production-ready DevSecOps pipelines using GitLab CI/CD.
