Skip to content

Secure CI/CD with GitLab

Intermediate5 sections · 17 lessons · ~7h total · 50-question self-test

01

GitLab CI fundamentals

3 lessonsTest yourself

01The .gitlab-ci.yml modelStages, jobs, and scripts.14 min 02Runners & executorsWhat actually runs your jobs.12 min 03Artifacts, cache & rulesPass files, speed builds, run jobs conditionally.14 min

02

Securing the pipeline itself

4 lessonsTest yourself

01Threat-model your pipelinePoisoned deps, leaked runners, tampered artifacts.12 min 02Protected branches, tags & environmentsWho can change and deploy what.12 min 03Runner isolation & protected runnersKeep feature branches off production runners.14 min 04CI/CD variables, masking & secret managersSecrets that do not leak into logs or forks.14 min

03

Security scanning stages

5 lessonsTest yourself

01SAST & code scanningFind bugs in your own source.12 min 02Secret detectionCatch the committed key before main.10 min 03Dependency scanning (SCA)The CVEs you inherited from your libraries.12 min 04Container image scanningTrivy: report all, fail on critical.12 min 05DAST & the scan pipelineTest the running app; wire it all together.12 min

04

Trust the artifacts

2 lessonsTest yourself

01Signing artifacts in CICosign keyless from the pipeline.12 min 02SBOM & provenance attestationsProve what shipped and how it was built.12 min

05

GitOps & safe delivery

3 lessonsTest yourself

01GitOps with Argo CD / FluxGit as the source of truth for deploys.14 min 02Deploy gates & approvalsChange control without a ticket queue.10 min 03Canary, blue/green & rollbackShip safely, revert instantly.12 min

Final exam

Test yourself on everything

50 questions drawn from all 5 sections — every answer explained as you pick.

Start final exam