欧美色欧美亚洲另类七区,惠美惠精品网,五月婷婷一区,国产亚洲午夜

         DevSecOps培訓

Day One:

Introduction

DevSecOps at a Glance

CI (Continuous Integration) and CD (Continuous Delivery)
Shifting security to the left, the DevOps way
DevSecOps Method Theories

Security for DevOps technologies
When and how security interacts with the application and the development lifecycle
Shared ownership of security responsibilities and activities
Day Two:

DevSecOps with Jenkins

Creating an agent
Creating a pipeline job
Using SYNK and SonarQube for SAST security scanning
Using Arachini and OWASP-ZAP for DAST security scanning
Using Anchore and Aqua MicroScanner for image security scanning
Developing a DevSecOps pipeline
Enabling CI and CD
Security Automation

Automating security testing with Gaunit
Running an automated attack
Application Security Automation

Automating and refactoring XSS attack
Automating SQLi attack
Automating a fuzzer
Testing security in software delivery pipelines
Summary and Conclusion