Did you know that over 80% of modern software comprises third-party components, and most
breaches exploit known vulnerabilities in these outside dependencies? In today’s fast-paced DevOps world, securing your CI/CD pipeline is not optional but essential. This course covers a comprehensive understanding of DevOps security, focusing on the integration of JFrog tools within CI/CD pipelines. Learners will explore key concepts such as artefact management, vulnerability scanning, and secure deployment strategies. Through practical examples and hands-on projects, you will gain insights into best practices for securing your software delivery pipelines. This course is designed for professionals involved in the software delivery lifecycle, including DevOps engineers, software engineers, solutions architects, and software developers. It is also well-suited for aspiring DevOps practitioners who want to deepen their understanding of secure DevOps practices. Whether you're building CI/CD pipelines or looking to enhance the security of your software delivery workflows, this course offers practical, tool-focused insights tailored to your role. To get the most out of this course, learners should have a basic understanding of software development principles and DevOps concepts. Prior experience with version control systems—specifically Git—and familiarity with GitHub will be essential, as the course includes hands-on integration with GitHub Actions. These foundational skills ensure learners can effectively apply the tools and techniques covered in securing and automating CI/CD pipelines. By the end of this course, learners will be able to clearly explain the roles of JFrog Artifactory and JFrog Xray in securing and automating CI/CD workflows. They will gain practical experience integrating these tools with GitHub Actions to manage and secure build artifacts and learn to use Artifactory for efficient artifact lifecycle management. Additionally, learners will be equipped to analyze scan results from JFrog Xray to identify software vulnerabilities and ensure license compliance, strengthening the overall integrity of their software supply chain.
