What will we learn?

After knowing what devsecops is and how it differs from devops, what will we learn next? In this course (DevSecOps I & DevSecOps II) we will focus on how we implement DevSecOps to create a Secure CI/CD pipeline.

Here is the diagram of the DevSecOps pipeline that we will create:

Kembali

DevSecOps I

Modul 1

DevSecOps Foreword Introduction

Introduction to DevSecOps
DevSecOps Lifecycle Tools
DevSecOps with Gitlab
What will we learn?

Modul 2

Unit Testing & Code Coverage

Introuduction to Unit Test
Introduction to Code Coverage
Unit Testing and Code Coverage in CI/CD
Unit Testing & Code Coverage with Jest
Orientation To The Lab Environtment
Lab 2.1: Preparing Environment
Lab 2.2: Create Simple Unit Testing with Jest
Lab 2.3: Integrate Jest with Gitlab CI and Generate JUnit Output
Quiz 1: Integrate Unit Test to Gitlab CI

Modul 3

Software Composition Analysis

Introduction SCA
OWASP Introduction
OWASP Dependency Check vs OWASP Depedency Track
Lab 3.1: SCA with OWASP Depedency Check

Modul 4

Static Application Security Testing

Introduction SAST
Dive into SAST with GitLab
OpenSource Static Analyzer
Lab 4.1: Use gitlab sast template
Lab 4.2: Overiding GItlab SAST Configuration
Lab 4.3 : Use gitlab analyzer image manually
Lab 4.4: Scan Pre-Compiled app
Lab 4.5 : Using Other SAST Tools
Quiz 2: Create SAST Job

Modul 5

Dynamic Application Security Testing

Introduction DAST
SAST vs DAST
Introduction OWASP Zap
ZAP on CI/CD
Open Source DAST Tools
Lab 5.1 : Run DAST Job OWASP ZAP in Gitlab CI
Quiz 3 : Create DAST Job

Modul 6