本课程教你用GitHub Actions构建安全CI/CD流水线，集成Snyk、SonarCloud与OWASP ZAP实现SCA、SAST、DAST扫描，并通过Java、Node.js等多语言案例掌握安全左移能力。
原始标题：DevSecOps using GitHub Actions: Secure CICD with GitHub
本课程是一门聚焦于 GitHub Actions 的 DevSecOps 核心实战指南，旨在教你如何在 CI/CD 流水线中无缝集成 SCA（依赖分析工具 Snyk）、SAST（静态代码审计 SonarCloud）与 DAST（动态应用测试 OWASP ZAP） 三大核心安全扫描阶段 [3]。课程通过对 Java、Node.js、.NET 以及 GitOps 游戏项目 等多语言端到端案例的深度剖析 ，不仅涵盖了编写健壮的 YAML 自动化脚本、Git Bash 基础，更紧跟技术前沿（如最新的 Java 17、ZAP 0.15v 版本演进及 sonar.token 认证安全升级），最终帮助学员掌握将安全防护全面左移的工程能力，并指导其打造符合企业需求的 DevSecOps 专家简历。
Last updated 8/2026
MP4 | Video: h264, 1920×1080 | Audio: AAC, 44.1 KHz
Language: English | Size: 2.39 GB | Duration: 4h 45m
Build Secure DevOps Pipelines with GitHub Actions and integrate SAST, DAST, SCA security tools in the Pipeline
What you’ll learn
Understand basics of DevSecOps and learn about various tools used in DevSecOps
Learn basics of GitHub Actions and write yaml files in GitHub Actions
Integrate security tools in GitHub Actions Pipeline and execute SAST/DAST/SCA scans
Implement robustness in GitHub Actions
End to End Case study on Java Project where we implement DevSecOps Pipeline with GitHub Actions
Learn using a Git repository from Git bash
Learn CI/CD pipeline creation
Learn various tools used for DevSecOps
Learn SonarCloud
Learn Snyk
Learn OWASP ZAP
Learn Yaml
Learn to create DevSecOps Engineer CV
Learn to implement DevSecOps for NodeJS application
Learn to implement DevSecOps for .Net application
Requirements
No Programming knowledge required
Anyone with Basic computer knowledge can take this course
Description
Course Updates:v 12.0 – August 2026Fixed the SonarCloud plugin issues in the Github reposAdded screenshots to fix the issue related to ZAP scan issues creation in the github repoIncreased the ZAP baseline scan version to 0.15v 11.0 – Dec 2025Added Implement End to End DevSecOps pipeline for a Game using GitHub Actions & GitOps in Section 7v 10.0 – May 2024Added DevSecOps Handbook document in Section 8v 9.0 – Jan 2024Updated GitHub Repos for SAST scan with Java 17 and changed sonar.login to sonar.tokenv 8.0 – April 2023Updated course with Indonesian and Chinese Subtitlesv 7.0 – January 2023Added C# Assignment for DevSecOps pipeline along with Solution using GitHub Actions and some common errors and their solutionsv 6.0 – October 2022Updated course with French and German Subtitlesv 5.0 – July 2022Updated course with NodeJS Case Study to implement an End to End DevSecOps Pipeline for a NodeJS Project using GitHub Actions in Section 5v 4.0 – June 2022Updated course with Notes on Populating Code Coverage on SonarCloud or SonarQube Dashboard in Section 3Updated course with Notes on GIT Commands in Section 3Updated course with newer videos to create account with SonarCloud and SnykUpdated course videos contentv 3.0 – May 2022Updated course with Report Walkthrough of SAST, SCA and DAST tools integrated in End to End DevSecOps Pipeline with GitHub Actionsv 2.0 – May 2022Updated course with videos on End To End DevSecOps Pipeline with GitHub ActionsAdded new questions to Quizzesv 1.0 – April 2022Updated course with newer videos on GitHub Actions BasicsAdded Quizzes to the courseWho shall take this course?This DevSecOps course is designed for Security Engineers, DevOps Engineers, SRE, QA Professionals and Freshers looking to find a job in the field of security. This is a focused DevSecOps course with a special focus on integrating SAST/DAST/SCA tools in Build pipeline. Hands On Experience:1) End to End Case study on Java Project where we implement DevSecOps Pipeline with GitHub Actions (Must Learn)2) Learn and implement security in DevOps pipeline, get Hands On experience in using Security tools & technologies using GitHub Actions This course is for:DevelopersDevOpsSecurity EngineersAspiring professional in the Security domainQuality Assurance EngineersInfoSec/AppSec Professional DevSecOps being the hot skill, will help you to secure a high-salaried job and stay informed on the latest market trends. Why purchase this course?This is only practical hands-on course available on the internet till now.DevSecOps enables rapid application development with agility, at the same time it secures your application with automated security checks integrated within the pipeline. It helps to increase productivity and security by integrating security stages in the pipeline.Also, we have included practical examples to implement security in the DevOps pipeline through various tools.By the end of the course, you will be able to successfully implement DevOps or DevSecOps pipeline and lead initiatives to create, build and maintain security pipelines in your project.Things to consider before taking this course:1) Create a GitHub accountDisclaimer: Indonesian, Chinese, French, German, Spanish and English subtitles are generate via Caption Generator tool so please ignore any grammar/interpretation mistakes
Beginner security engineer,Quality assurance engineers,DevOps/DevSecOps Engineers,Automation Engineers
此处内容需要权限查看
会员免费查看
