|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/devsecops-crash-course-integrate-security-in-pipelines-2022/
课程评论：没有评论
**课程名称：** 使用 GitHub Actions 实现 DevSecOps： 安全的 CI/CD 与 GitHub **课程概述：** 本课程专注于使用 GitHub Actions 构建安全的 CI/CD (持续集成/持续部署) 管道，将安全融入 DevOps 流程，即 DevSecOps。课程内容经过多次更新，以适应最新的技术和实践。 **主要内容包括：** * **DevSecOps 管道实践：** 通过端到端的案例研究，演示如何为 Java、Node.js 和游戏项目构建完整的 DevSecOps 管道。 * **安全工具集成：** 学习如何将静态应用安全测试 (SAST)、软件组成分析 (SCA) 和动态应用安全测试 (DAST) 等安全工具集成到 CI/CD 管道中。 * **GitOps：** 探索 GitOps 的概念及其在 DevSecOps 中的应用。 * **安全工具介绍与使用：** 学习 Git 基础命令，以及如何创建 SonarCloud 和 Snyk 账户，并了解这些工具的工作原理和在管道中的集成。 * **代码覆盖率：** 学习如何在 SonarCloud 或 SonarQube 仪表板上显示代码覆盖率。 * **多语言支持：** 提供英语、印尼语、中文、法语、德语和西班牙语字幕。 **目标受众：** 本课程适合所有希望学习和实践 DevSecOps 的专业人士，包括： * 安全工程师 * DevOps 工程师 * SRE (站点可靠性工程师) * QA (质量保证) 专业人员 * 希望进入安全领域的初学者 * 开发人员 * 信息安全/应用安全专业人员 **课程价值：** * **实践性强：** 提供真实世界的案例研究，让学员获得宝贵的实践经验。 * **提升技能：** 掌握 DevSecOps 的核心技能，增强在安全领域的竞争力。 * **提高效率与安全性：** 帮助组织实现敏捷开发的同时，通过自动化安全检查来提升应用安全性。 * **就业前景：** DevSecOps 是当前热门的技术趋势，掌握该技能有助于获得高薪工作。 **学习前提：** * 需要拥有一个 GitHub 账户。 **认证语言：** 课程提供多语言字幕，包括中文。 **请注意：** 部分字幕由虚拟机生成，可能存在语法或翻译错误。
Course Updates:v 11.0 - Dec 2024Added Implement End to End DevSecOps pipeline for a Game using GitHub Actions & GitOps in Section 7v 10.0 - May 2024Added DevSecOps Handbook document in Section 8v 9.0 - Jan 2024Updated GitHub Repos for SAST scan with Java 17 and changed sonar.login to sonar.tokenv 8.0 - April 2023Updated course with Indonesian and Chinese Subtitlesv 7.0 - January 2023Added C# Assignment for DevSecOps pipeline along with Solution using GitHub Actions and some common errors and their solutionsv 6.0 - October 2022Updated course with French and German Subtitlesv 5.0 - July 2022Updated course with NodeJS Case Study to implement an End to End DevSecOps Pipeline for a NodeJS Project using GitHub Actions in Section 5v 4.0 - June 2022Updated course with Notes on Populating Code Coverage on SonarCloud or SonarQube Dashboard in Section 3Updated course with Notes on GIT Commands in Section 3Updated course with newer videos to create account with SonarCloud and SnykUpdated course videos contentv 3.0 - May 2022Updated course with Report Walkthrough of SAST, SCA and DAST tools integrated in End to End DevSecOps Pipeline with GitHub Actionsv 2.0 - May 2022Updated course with videos on End To End DevSecOps Pipeline with GitHub ActionsAdded new questions to Quizzesv 1.0 - April 2022Updated course with newer videos on GitHub Actions BasicsAdded Quizzes to the courseWho shall take this course?This DevSecOps course is designed for Security Engineers, DevOps Engineers, SRE, QA Professionals and Freshers looking to find a job in the field of security. This is a focused DevSecOps course with a special focus on integrating SAST/DAST/SCA tools in Build pipeline. Hands On Experience:1) End to End Case study on Java Project where we implement DevSecOps Pipeline with GitHub Actions (Must Learn)2) Learn and implement security in DevOps pipeline, get Hands On experience in using Security tools & technologies using GitHub Actions This course is for:DevelopersDevOpsSecurity EngineersAspiring professional in the Security domainQuality Assurance EngineersInfoSec/AppSec Professional DevSecOps being the hot skill, will help you to secure a high-salaried job and stay informed on the latest market trends. Why purchase this course?This is only practical hands-on course available on the internet till now.DevSecOps enables rapid application development with agility, at the same time it secures your application with automated security checks integrated within the pipeline. It helps to increase productivity and security by integrating security stages in the pipeline.Also, we have included practical examples to implement security in the DevOps pipeline through various tools.By the end of the course, you will be able to successfully implement DevOps or DevSecOps pipeline and lead initiatives to create, build and maintain security pipelines in your project.Things to consider before taking this course:1) Create a GitHub accountDisclaimer: Indonesian, Chinese, French, German, Spanish and English subtitles are generate via Caption Generator tool so please ignore any grammar/interpretation mistakes
