DevSecOps

What you'll be able to do

• Add scanning to a pipeline without making it unusably slow
• Manage secrets so none of them live in a repository
• Harden a Kubernetes cluster against realistic attack paths
• Produce the evidence an auditor or enterprise customer asks for

Modules

1. 01
   Threat modelling and the secure SDLCAttack surface, trust boundaries, STRIDE, deciding what is worth defending
2. 02
   Secrets managementVault, external-secrets, sealed secrets, rotation, why .env files keep leaking
3. 03
   Scanning in the pipelineSAST, DAST, SCA, dependency and licence policy, tuning out the false-positive noise
4. 04
   Container and supply chain securityTrivy, image signing, SBOMs, provenance, admission control, base image hygiene
5. 05
   Kubernetes securityRBAC, Pod Security Admission, network policy, service account tokens, audit logging
6. 06
   Cloud security postureIAM least privilege, public exposure, encryption at rest and in transit, misconfiguration detection
7. 07
   Compliance and evidenceMapping controls to pipeline stages, audit trails, access reviews, incident documentation