From e5158ed234f6a1ef6f94e32a2e0685793db5c6b5 Mon Sep 17 00:00:00 2001 From: MorVered7 Date: Mon, 17 Feb 2025 11:15:03 -0800 Subject: [PATCH 1/3] added lessons --- .../topic-1-git/chapter-5-advanced-git-techniques/index.md | 0 .../topic-3-devsecops/chapter-3-security-frameworks/index.md | 0 docs/course/topic-3-devsecops/chapter-4-cloud-security/index.md | 0 .../chapter-5-threat-modeling-and-risk-assessment/index.md | 0 .../chapter-6-secure-code-and-hardening/index.md | 0 .../labs/sql-injection-lab.md | 0 .../topic-3-devsecops/chapter-7-supply-chain-security/index.md | 0 .../labs/detecting-vulnerabilities-lab.md | 1 + 8 files changed, 1 insertion(+) create mode 100644 docs/course/topic-1-git/chapter-5-advanced-git-techniques/index.md create mode 100644 docs/course/topic-3-devsecops/chapter-3-security-frameworks/index.md create mode 100644 docs/course/topic-3-devsecops/chapter-4-cloud-security/index.md create mode 100644 docs/course/topic-3-devsecops/chapter-5-threat-modeling-and-risk-assessment/index.md create mode 100644 docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/index.md create mode 100644 docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/sql-injection-lab.md create mode 100644 docs/course/topic-3-devsecops/chapter-7-supply-chain-security/index.md create mode 100644 docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md diff --git a/docs/course/topic-1-git/chapter-5-advanced-git-techniques/index.md b/docs/course/topic-1-git/chapter-5-advanced-git-techniques/index.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/course/topic-3-devsecops/chapter-3-security-frameworks/index.md b/docs/course/topic-3-devsecops/chapter-3-security-frameworks/index.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/course/topic-3-devsecops/chapter-4-cloud-security/index.md b/docs/course/topic-3-devsecops/chapter-4-cloud-security/index.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/course/topic-3-devsecops/chapter-5-threat-modeling-and-risk-assessment/index.md b/docs/course/topic-3-devsecops/chapter-5-threat-modeling-and-risk-assessment/index.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/index.md b/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/index.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/sql-injection-lab.md b/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/sql-injection-lab.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/index.md b/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/index.md new file mode 100644 index 0000000..e69de29 diff --git a/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md b/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md new file mode 100644 index 0000000..66aef38 --- /dev/null +++ b/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md @@ -0,0 +1 @@ +detecting vulnerabilities in open source dependencies \ No newline at end of file From 1ec789c25248a1f46feee7e8a2eb9d780c0e788a Mon Sep 17 00:00:00 2001 From: MorVered7 Date: Mon, 17 Feb 2025 11:17:56 -0800 Subject: [PATCH 2/3] added some labs --- .../labs/securing-a-vulnerable-web-app.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/securing-a-vulnerable-web-app.md diff --git a/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/securing-a-vulnerable-web-app.md b/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/securing-a-vulnerable-web-app.md new file mode 100644 index 0000000..e69de29 From 62d1914125dc88abea4e3f4d53cb60d783613cfe Mon Sep 17 00:00:00 2001 From: jsmargarones Date: Fri, 18 Apr 2025 15:26:47 -0700 Subject: [PATCH 3/3] Changes to structure of topics and chapters --- .../chapter-1-SDLC/index.md | 11 ++ .../chapter-2-version-control/index.md | 38 ++++++ .../chapter-3-intro-to-devOps}/index.md | 6 +- .../chapter-4-intro-to-cicd/index.md | 124 ++++++++++++++++++ .../chapter-5-intro-to-devsecops/index.md | 104 +++++++++++++++ .../index.md | 18 +++ .../review-and-knowledge-check/index.md | 9 ++ .../chapter-1-version-control/index.md | 4 +- .../chapter-2-understanding-git/Git.jpg | Bin .../chapter-2-understanding-git/index.md | 2 +- .../lab/csd-lab-1.md | 0 .../chapter-3-Intermediate-Concepts/index.md | 2 +- .../lab/git-lab-1.md | 2 +- .../chapter-4-git-best-practices/index.md | 2 +- .../index.md | 9 ++ .../{topic-1-git => Topic-2-Git}/index.md | 6 +- .../review-and-knowledge-check/index.md | 9 ++ .../chapter-1-cicd-core-concepts}/index.md | 6 +- .../chapter-2-webhooks}/index.md | 6 +- .../chapter-3-automated-testing}/index.md | 6 +- .../chapter-4-deployment}/index.md | 6 +- .../lab/deployment-lab-1.md | 4 +- .../lab/imgs/jenkins-login.png | Bin .../lab/imgs/wireguard.png | Bin .../chapter-4-deployment}/lab/overview.md | 4 +- .../chapter-5-containerization}/index.md | 6 +- .../lab/containerization-lab-1.md | 4 +- .../lab/containerization-lab-2.md | 4 +- .../lab/imgs/clone.png | Bin .../lab/imgs/dashboard.png | Bin .../lab/imgs/fork.png | Bin .../lab/imgs/wireguard.png | Bin .../lab/overview.md | 4 +- docs/course/Topic-3-CICD-Concepts/index.md | 13 ++ .../review-and-knowledge-check/index.md | 9 ++ .../chapter-1-devsecops/index.md | 2 +- .../labs/devsecops-lab-1.md | 0 .../index.md | 2 +- .../lab/devsecops-lab-1.md | 0 .../lab/overview.md | 0 .../index.md | 4 +- docs/course/Topic-5-Cloud/index.md | 15 +++ .../index.md | 0 docs/course/topic-2-DevOps/index.md | 19 --- .../chapter-3-security-frameworks/index.md | 0 .../chapter-4-cloud-security/index.md | 0 .../index.md | 0 .../index.md | 0 .../labs/securing-a-vulnerable-web-app.md | 0 .../labs/sql-injection-lab.md | 0 .../chapter-7-supply-chain-security/index.md | 0 .../labs/detecting-vulnerabilities-lab.md | 1 - docs/other/index.md | 2 +- index.md | 10 -- 54 files changed, 401 insertions(+), 72 deletions(-) create mode 100644 docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-1-SDLC/index.md create mode 100644 docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-2-version-control/index.md rename docs/course/{topic-2-DevOps/chapter-1-intro-to-devops => Topic-1-Software-Dev-and-DevSecOps/chapter-3-intro-to-devOps}/index.md (99%) create mode 100644 docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-4-intro-to-cicd/index.md create mode 100644 docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-5-intro-to-devsecops/index.md create mode 100644 docs/course/Topic-1-Software-Dev-and-DevSecOps/index.md create mode 100644 docs/course/Topic-1-Software-Dev-and-DevSecOps/review-and-knowledge-check/index.md rename docs/course/{topic-1-git => Topic-2-Git}/chapter-1-version-control/index.md (97%) rename docs/course/{topic-1-git => Topic-2-Git}/chapter-2-understanding-git/Git.jpg (100%) rename docs/course/{topic-1-git => Topic-2-Git}/chapter-2-understanding-git/index.md (99%) rename docs/course/{topic-1-git => Topic-2-Git}/chapter-2-understanding-git/lab/csd-lab-1.md (100%) rename docs/course/{topic-1-git => Topic-2-Git}/chapter-3-Intermediate-Concepts/index.md (99%) rename docs/course/{topic-1-git => Topic-2-Git}/chapter-3-Intermediate-Concepts/lab/git-lab-1.md (98%) rename docs/course/{topic-1-git => Topic-2-Git}/chapter-4-git-best-practices/index.md (99%) create mode 100644 docs/course/Topic-2-Git/chapter-5-advanced-git-techniques/index.md rename docs/course/{topic-1-git => Topic-2-Git}/index.md (95%) create mode 100644 docs/course/Topic-2-Git/review-and-knowledge-check/index.md rename docs/course/{topic-2-DevOps/chapter-2-intro-to-ci-cd => Topic-3-CICD-Concepts/chapter-1-cicd-core-concepts}/index.md (98%) rename docs/course/{topic-2-DevOps/chapter-4-webhooks => Topic-3-CICD-Concepts/chapter-2-webhooks}/index.md (97%) rename docs/course/{topic-2-DevOps/chapter-5-automation => Topic-3-CICD-Concepts/chapter-3-automated-testing}/index.md (98%) rename docs/course/{topic-2-DevOps/chapter-6-deployment => Topic-3-CICD-Concepts/chapter-4-deployment}/index.md (99%) rename docs/course/{topic-2-DevOps/chapter-6-deployment => Topic-3-CICD-Concepts/chapter-4-deployment}/lab/deployment-lab-1.md (99%) rename docs/course/{topic-2-DevOps/chapter-6-deployment => Topic-3-CICD-Concepts/chapter-4-deployment}/lab/imgs/jenkins-login.png (100%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-4-deployment}/lab/imgs/wireguard.png (100%) rename docs/course/{topic-2-DevOps/chapter-6-deployment => Topic-3-CICD-Concepts/chapter-4-deployment}/lab/overview.md (96%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-5-containerization}/index.md (99%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-5-containerization}/lab/containerization-lab-1.md (99%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-5-containerization}/lab/containerization-lab-2.md (98%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-5-containerization}/lab/imgs/clone.png (100%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-5-containerization}/lab/imgs/dashboard.png (100%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-5-containerization}/lab/imgs/fork.png (100%) rename docs/course/{topic-2-DevOps/chapter-6-deployment => Topic-3-CICD-Concepts/chapter-5-containerization}/lab/imgs/wireguard.png (100%) rename docs/course/{topic-2-DevOps/chapter-3-containerization => Topic-3-CICD-Concepts/chapter-5-containerization}/lab/overview.md (96%) create mode 100644 docs/course/Topic-3-CICD-Concepts/index.md create mode 100644 docs/course/Topic-3-CICD-Concepts/review-and-knowledge-check/index.md rename docs/course/{topic-3-devsecops => Topic-4-Devsecops-Fundmentals}/chapter-1-devsecops/index.md (99%) rename docs/course/{topic-3-devsecops => Topic-4-Devsecops-Fundmentals}/chapter-1-devsecops/labs/devsecops-lab-1.md (100%) rename docs/course/{topic-3-devsecops => Topic-4-Devsecops-Fundmentals}/chapter-2-security-checks-in-CICD/index.md (99%) rename docs/course/{topic-3-devsecops => Topic-4-Devsecops-Fundmentals}/chapter-2-security-checks-in-CICD/lab/devsecops-lab-1.md (100%) rename docs/course/{topic-3-devsecops => Topic-4-Devsecops-Fundmentals}/chapter-2-security-checks-in-CICD/lab/overview.md (100%) rename docs/course/{topic-3-devsecops => Topic-4-Devsecops-Fundmentals}/index.md (90%) create mode 100644 docs/course/Topic-5-Cloud/index.md delete mode 100644 docs/course/topic-1-git/chapter-5-advanced-git-techniques/index.md delete mode 100644 docs/course/topic-2-DevOps/index.md delete mode 100644 docs/course/topic-3-devsecops/chapter-3-security-frameworks/index.md delete mode 100644 docs/course/topic-3-devsecops/chapter-4-cloud-security/index.md delete mode 100644 docs/course/topic-3-devsecops/chapter-5-threat-modeling-and-risk-assessment/index.md delete mode 100644 docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/index.md delete mode 100644 docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/securing-a-vulnerable-web-app.md delete mode 100644 docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/sql-injection-lab.md delete mode 100644 docs/course/topic-3-devsecops/chapter-7-supply-chain-security/index.md delete mode 100644 docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md diff --git a/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-1-SDLC/index.md b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-1-SDLC/index.md new file mode 100644 index 0000000..0676e56 --- /dev/null +++ b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-1-SDLC/index.md @@ -0,0 +1,11 @@ +--- +title: Chapter 1 - Introduction to SDLC +layout: custom +parent: Topic 1 - Introduction to SDLC and DevSecOps +has_children: false +has_toc: false +nav_order: 1 +--- + +# Chapter 1 - Introduction to SDLC +## What is the Software Development Lifecycle (SDLC)? diff --git a/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-2-version-control/index.md b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-2-version-control/index.md new file mode 100644 index 0000000..0f72ec8 --- /dev/null +++ b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-2-version-control/index.md @@ -0,0 +1,38 @@ +--- +title: Chapter 2 - Version Control +layout: custom +parent: Topic 1 - Introduction to SDLC and DevSecOps +has_children: false +has_toc: false +nav_order: 2 +--- + +# Chapter 1 - Introduction to Version Control +## What is version control? +Version control is **a system that records changes to a file or set of files over time** so that you can recall specific versions later. It's a critical tool in modern software development, allowing developers to work collaboratively, track every modification, and revert to previous states if necessary. + +> **Example Scenario** +> +> Armine and Tigran are part of a software development team tasked with creating a new mobile application. Armine is tasked with refining the user authentication system, while Tigran is implementing an innovative feature that allows users to share media within the app. +> +> **Without Version Control**: If Armine and Tigran are editing the same file, Tigran's latest upload could accidentally overwrite the changes Armine made, resulting in a loss of progress and potential conflicts in the code. +> +> **With Version Control**: Armine and Tigran can work on their updates concurrently without the risk of interfering with each other's contributions. Here's how it unfolds: +> +> - Independently, they make their changes and commit their updates to the version control system, each creating a new version in the repository. +> +> - The version control system alerts them to the presence of new, separate updates, signaling that a merge of changes is necessary. +> +> - Together, they examine the differences, carefully integrate their respective code changes, and commit the unified version to the repository. +> +> - Should an issue arise with the authentication update, Armine can revert her portion of the code to a previous state without disrupting Tigran's feature, thanks to the version history maintained by the system. + +A common tool for version control is GitHub. GitHub allows you acts as a central hub for all of the different versions of your code, kind of how in google docs you can see the history of your changes. Though there are many different systems for version control, we will be learning using GitHubs features. The syntax and user interface of different products are different, but the core elements are the same. + +### References +
+ Expand + 1. Atlassian. “What Is Version Control: Atlassian Git Tutorial.” Atlassian, www.atlassian.com/git/tutorials/what-is-version-control. Accessed 15 Apr. 2024.
+ 2. “1.1 Getting Started - about Version Control.” Git, git-scm.com/book/en/v2/Getting-Started-About-Version-Control. Accessed 15 Apr. 2024.
+ 3. “What Is Version Control?” GitLab, GitLab, 4 Apr. 2023, about.gitlab.com/topics/version-control/.
+
\ No newline at end of file diff --git a/docs/course/topic-2-DevOps/chapter-1-intro-to-devops/index.md b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-3-intro-to-devOps/index.md similarity index 99% rename from docs/course/topic-2-DevOps/chapter-1-intro-to-devops/index.md rename to docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-3-intro-to-devOps/index.md index 2632916..32c0965 100644 --- a/docs/course/topic-2-DevOps/chapter-1-intro-to-devops/index.md +++ b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-3-intro-to-devOps/index.md @@ -1,10 +1,10 @@ --- -title: Chapter 1 - Intro to DevOps +title: Chapter 3 - Intro to DevOps layout: custom -parent: Topic 2 - DevOps +parent: Topic 1 - Introduction to SDLC and DevSecOps has_children: false has_toc: false -nav_order: 1 +nav_order: 3 --- # Introduction to DevOps ## Problem Space diff --git a/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-4-intro-to-cicd/index.md b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-4-intro-to-cicd/index.md new file mode 100644 index 0000000..8dd0a2d --- /dev/null +++ b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-4-intro-to-cicd/index.md @@ -0,0 +1,124 @@ +--- +title: Chapter 4 - Intro to CI/CD +layout: custom +parent: Topic 1 - Introduction to SDLC and DevSecOps +has_children: false +has_toc: false +nav_order: 4 +--- + +# Introduction to CI/CD +

CI/CD, short for Continuous Integration and Continuous Delivery, is a part of the DevOps process. “It is a collection of principles and practices designed to help development teams ensure the reliable delivery of frequent code changes.”

+ +
+ CI/CD Lifecycle +

Source: Mind The Product

+ +
+ +## DevOps vs. CI/CD + + + + + + + + + + + + + + + + + + + + + + + + + + +
CategoryDevOpsCICD
PurposeFacilitate collaboration and efficiency across the development lifecycle.Automate testing to ensure code compatibility.Automate deployment for seamless software releases.
Methods +
    +
  • Implement automation to streamline collaboration between development and operations teams.
    • +
  • Use infrastructure as code (IaC) to provision and manage infrastructure.
    • +
  • Integrate continuous feedback loops to gather insights from stakeholders and improve processes iteratively.
    • +
+ 		+
    +
  • Automate the build and testing process for every code change.
    • +
  • Identify integration issues early in the development lifecycle.
    • +
  • Support the principle of "fail fast" by providing rapid feedback to developers.
    • +
+ 		+
    +
  • Encompass both Continuous Integration and Continuous Deployment.
    • +
  • Automate the deployment process to production environments.
    • +
  • Enable organizations to release software updates quickly and reliably while minimizing risks.
    • +
+
Key Benefits +
    +
  • Promotes a culture of shared responsibility and accountability.
    • +
  • Emphasizes the importance of automating repetitive tasks to reduce manual errors and increase efficiency.
    • +
  • Focuses on delivering value to customers through rapid and iterative development cycles.
    • +
+ 		+
    +
  • Increases code quality by identifying issues early in the development process.
    • +
  • Speeds up the development cycle by automating build and testing processes.
    • +
  • Enables rapid feedback to developers for quick iterations.
    • +
+ 		+
    +
  • Accelerates time to market by automating deployment processes.
    • +
  • Minimizes risks associated with manual deployments.
    • +
  • Enhances overall software reliability and stability.
    • +
+
+ +### References +
+ Expand + 1. Ashtari, Hossein et al. “Key Differences between CI/CD and DevOps.” Spiceworks, www.spiceworks.com/tech/devops/articles/cicd-vs-devops/. Accessed 20 Feb. 2024.
+ 2. Ferringer, Megan. “Here’s the Difference between CI/CD and Devops-and How They Work Together to Drive Innovation.” Navisite, 2 Mar. 2023, www.navisite.com/blog/insights/ci-cd-vs-devops/.
+ 3. “What the Hell Are CI/CD and DevOps? A Cheatsheet for the Rest of Us.” Mind the Product, www.mindtheproduct.com/what-the-hell-are-ci-cd-and-devops-a-cheatsheet-for-the-rest-of-us/. Accessed 20 Feb. 2024.
+ 4. “The IDEAL & Practical CI / CD Pipeline - Concepts Overview.” YouTube, 17 Feb. 2022, www.youtube.com/watch?v=OPwU3UWCxhw.
+ 5. Morg, Brad. “How to Design a Modern CI/CD Pipeline.” YouTube, 17 Oct. 2023, www.youtube.com/watch?v=KnSBNd3b0qI.
+ 6. Morg, Brad. “How to Design a Deployment Pipeline (GitOps).” YouTube, 30 Oct. 2023, www.youtube.com/watch?v=pJ9f7w4AxtU.
+
diff --git a/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-5-intro-to-devsecops/index.md b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-5-intro-to-devsecops/index.md new file mode 100644 index 0000000..7d641f7 --- /dev/null +++ b/docs/course/Topic-1-Software-Dev-and-DevSecOps/chapter-5-intro-to-devsecops/index.md @@ -0,0 +1,104 @@ +--- +title: Chapter 5 - Introduction to DevSecOps +layout: custom +parent: Topic 1 - Introduction to SDLC and DevSecOps +has_children: false +has_toc: false +nav_order: 5 +--- + + +# Chapter 5 - Introduction to DevSecOps + +## Defining DevSecOps +- Dev = Development +- Sec = Security +- Ops = Operations + +**DevSecOps is a methodology that integrates security practices within the DevOps process.** The main goal of DevSecOps is to embed security in every part of the development lifecycle, from initial design through integration, testing, deployment, and software delivery. + +Ok, now what? You just have to start integrating this into your coding practices? Actually yes, the whole reason this curriculum is applicable for every person working in IT is because it is best development practice to have a secure lifecycle throughout all of the processes IT goes through when developing a project. + +
+ DevSecOps +

Source: Red Hat

+
+ + + + +## Why Implement DevSecOps: + +**The Importance of Security in SDLC:** + +The software development lifecycle (SDLC) is a framework used to develop, deploy, and maintain software. A common problem in software development is that security related activities are deferred until the testing phase, which is late in the SDLC after most of the critical design and implementation has been completed. Missing a security related risk could be costly, set back progress, and go unnoticed causing room for further severe impact. + +**What is "Shift" Testing:** + +"Shift left" and "shift right" are terms that emphasize implementing security practices throughout the SDLC. By adopting shift left and shift right principles, teams are able to fix security flaws early on. They are meant to evaluate and ensure quality of the project by focusing on continuous testing methods. + +To **shift left** is to incorporate security testing as soon as possible to find vulnerabilities and fix defects as early as possible in development. + +To **shift right** is to monitor user behavior, usage, performance, and security metrics in the production stage to verify software operability. + +

Source: Red Hat

+ + + + +## Tools and technologies: + +
Infrastructure as code scanning +

+ +

  • DevSecOps teams use open source tools like Terraform to manage and provision infrastructure like networks, virtual machines, and load balancers through code rather than doing it manually
    • + +
  • Terraform helps ensure that infrastructure is set up and updated consistently across hundreds or thousands of servers
    • + +
  • Infrastructure as a code scanning tools automatically check the infrastructure at the code level for noncompliance with security policies and standards
    • +

    Source: Microsoft

    +

    +
    + + + +
    Dynamic and Static Application Security Testing +

    + +

  • Dynamic application security testing: This process of testing tests the methods a bad actor might use to attack an application. This testing occurs while the application is running and is based on predefined use cases.
    • + +
  • Static application security testing: Before their code compiles, DevSecOps developers begin testing their custom code for security vulnerabilities. Static application security testing tools make this process easier with automatic checks and real-time feedback, often specifying exactly where an vulnerability is
    • + +
    • +

    Source: Microsoft

    +

    +
    + + +
    Container Scanning +

    + +

  • Container: A container is a standard unit of software that packages up code and all its dependencies so the application runs quickly and reliably from one computing environment to another
    • + +
  • Containers are widely used in DevSecOps because they help developers easily deploy self-contained units of code
    • + +
  • Container Image: Within a container is a container image, which is a executable software bundle that runs processes for the container. These images are often built using existing images or pulled from public repositories.
    • + +

    Source 1: Docker

    +

    Source 2: Microsoft

    +

    +
    + + + + +### References + +**1.** “What is DevSecOps?” *Red Hat*, [https://www.redhat.com/en/topics/devops/what-is-devsecops](https://www.redhat.com/en/topics/devops/what-is-devsecops). Accessed 8 Apr. 2024. + +**2.** “What is DevSecOps?” *Microsoft*, [https://www.microsoft.com/en-us/security/business/security-101/what-is-devsecops](https://www.microsoft.com/en-us/security/business/security-101/what-is-devsecops). Accessed 8 Apr. 2024. + +**3.** “Use containers to Build, Share and Run your applications” *Docker*, [https://www.docker.com/resources/what-container/](https://www.docker.com/resources/what-container/). Accessed 8 Apr. 2024. + +**4.** “Shift left vs. shift right” *Red Hat*, [https://www.redhat.com/en/topics/devops/shift-left-vs-shift-right](https://www.redhat.com/en/topics/devops/shift-left-vs-shift-right). Accessed 8 Apr. 2024. + diff --git a/docs/course/Topic-1-Software-Dev-and-DevSecOps/index.md b/docs/course/Topic-1-Software-Dev-and-DevSecOps/index.md new file mode 100644 index 0000000..2bbd54b --- /dev/null +++ b/docs/course/Topic-1-Software-Dev-and-DevSecOps/index.md @@ -0,0 +1,18 @@ +--- +title: Topic 1 - Introduction to SDLC and DevSecOps +layout: custom +parent: +has_children: true +has_toc: false +nav_order: 3 +--- + +# Topic 1 - Introduction to the SDLC and DevSecOps + +| Chapter | Learning Objectives | Lab Description | +|---------|---------------------|-----------------| +| Chapter 1: Introduction to SDLC | - Define Software Development Lifecycle
    - Understand the basics of SDLC methodologies
    - Explore the benefits of using different methodologies
    | | +| Chapter 2: Intro to Version Control | - Define version control
    - Understand the basics of version control systems
    - Explore the benefits of using version control
    - Introduction to common version control tools| | +| Chapter 3: Introduction to DevOps | - Define DevOps
    | +| Chapter 4: Introduction to CI/CD | - Establish effective documentation habits
    - Discuss the importance of READMEs and wikis
    - Explore best practices for inline code commenting | +| Chapter 4: Securing SDLC with DevSecOps | - Define DevSecOps
    | | \ No newline at end of file diff --git a/docs/course/Topic-1-Software-Dev-and-DevSecOps/review-and-knowledge-check/index.md b/docs/course/Topic-1-Software-Dev-and-DevSecOps/review-and-knowledge-check/index.md new file mode 100644 index 0000000..7ba6a92 --- /dev/null +++ b/docs/course/Topic-1-Software-Dev-and-DevSecOps/review-and-knowledge-check/index.md @@ -0,0 +1,9 @@ +--- +title: Topic Review and Knowledge Check +layout: custom +parent: Topic 1 - Introduction to SDLC and DevSecOps +has_toc: false +nav_order: 6 +--- + +# Topic Review and Knowledge Check \ No newline at end of file diff --git a/docs/course/topic-1-git/chapter-1-version-control/index.md b/docs/course/Topic-2-Git/chapter-1-version-control/index.md similarity index 97% rename from docs/course/topic-1-git/chapter-1-version-control/index.md rename to docs/course/Topic-2-Git/chapter-1-version-control/index.md index 97e85f6..2d5aa6e 100644 --- a/docs/course/topic-1-git/chapter-1-version-control/index.md +++ b/docs/course/Topic-2-Git/chapter-1-version-control/index.md @@ -1,7 +1,7 @@ --- -title: Chapter 1 - Introduction to Version Control +title: Chapter 1 - Version Control layout: custom -parent: Topic 1 - Git +parent: Topic 2 - Git has_children: false has_toc: false nav_order: 1 diff --git a/docs/course/topic-1-git/chapter-2-understanding-git/Git.jpg b/docs/course/Topic-2-Git/chapter-2-understanding-git/Git.jpg similarity index 100% rename from docs/course/topic-1-git/chapter-2-understanding-git/Git.jpg rename to docs/course/Topic-2-Git/chapter-2-understanding-git/Git.jpg diff --git a/docs/course/topic-1-git/chapter-2-understanding-git/index.md b/docs/course/Topic-2-Git/chapter-2-understanding-git/index.md similarity index 99% rename from docs/course/topic-1-git/chapter-2-understanding-git/index.md rename to docs/course/Topic-2-Git/chapter-2-understanding-git/index.md index bac5343..2410bc7 100644 --- a/docs/course/topic-1-git/chapter-2-understanding-git/index.md +++ b/docs/course/Topic-2-Git/chapter-2-understanding-git/index.md @@ -1,7 +1,7 @@ --- title: Chapter 2 - Git Fundamentals layout: custom -parent: Topic 1 - Git +parent: Topic 2 - Git has_toc: false has_children: false nav_order: 2 diff --git a/docs/course/topic-1-git/chapter-2-understanding-git/lab/csd-lab-1.md b/docs/course/Topic-2-Git/chapter-2-understanding-git/lab/csd-lab-1.md similarity index 100% rename from docs/course/topic-1-git/chapter-2-understanding-git/lab/csd-lab-1.md rename to docs/course/Topic-2-Git/chapter-2-understanding-git/lab/csd-lab-1.md diff --git a/docs/course/topic-1-git/chapter-3-Intermediate-Concepts/index.md b/docs/course/Topic-2-Git/chapter-3-Intermediate-Concepts/index.md similarity index 99% rename from docs/course/topic-1-git/chapter-3-Intermediate-Concepts/index.md rename to docs/course/Topic-2-Git/chapter-3-Intermediate-Concepts/index.md index 1929e27..dccd1bd 100644 --- a/docs/course/topic-1-git/chapter-3-Intermediate-Concepts/index.md +++ b/docs/course/Topic-2-Git/chapter-3-Intermediate-Concepts/index.md @@ -1,7 +1,7 @@ --- title: Chapter 3 - Git Intermediate Concepts layout: custom -parent: Topic 1 - Git +parent: Topic 2 - Git has_children: true has_toc: false nav_order: 3 diff --git a/docs/course/topic-1-git/chapter-3-Intermediate-Concepts/lab/git-lab-1.md b/docs/course/Topic-2-Git/chapter-3-Intermediate-Concepts/lab/git-lab-1.md similarity index 98% rename from docs/course/topic-1-git/chapter-3-Intermediate-Concepts/lab/git-lab-1.md rename to docs/course/Topic-2-Git/chapter-3-Intermediate-Concepts/lab/git-lab-1.md index b30f237..b20615c 100644 --- a/docs/course/topic-1-git/chapter-3-Intermediate-Concepts/lab/git-lab-1.md +++ b/docs/course/Topic-2-Git/chapter-3-Intermediate-Concepts/lab/git-lab-1.md @@ -1,7 +1,7 @@ --- layout: custom title: Lab 1. Version Control and Branching -grand_parent: Topic 1 - Git +grand_parent: Topic 2 - Git parent: Chapter 3 - Git Intermediate Concepts nav_order: 1 --- diff --git a/docs/course/topic-1-git/chapter-4-git-best-practices/index.md b/docs/course/Topic-2-Git/chapter-4-git-best-practices/index.md similarity index 99% rename from docs/course/topic-1-git/chapter-4-git-best-practices/index.md rename to docs/course/Topic-2-Git/chapter-4-git-best-practices/index.md index a505e2e..2001747 100644 --- a/docs/course/topic-1-git/chapter-4-git-best-practices/index.md +++ b/docs/course/Topic-2-Git/chapter-4-git-best-practices/index.md @@ -1,7 +1,7 @@ --- title: Chapter 4 - Git Best Practices layout: custom -parent: Topic 1 - Git +parent: Topic 2 - Git has_toc: false nav_order: 4 --- diff --git a/docs/course/Topic-2-Git/chapter-5-advanced-git-techniques/index.md b/docs/course/Topic-2-Git/chapter-5-advanced-git-techniques/index.md new file mode 100644 index 0000000..123b55f --- /dev/null +++ b/docs/course/Topic-2-Git/chapter-5-advanced-git-techniques/index.md @@ -0,0 +1,9 @@ +--- +title: Chapter 6 - Advanced Git Techniques +layout: custom +parent: Topic 2 - Git +has_toc: false +nav_order: 5 +--- + +# Chapter 6 - Advanced Git Techniques \ No newline at end of file diff --git a/docs/course/topic-1-git/index.md b/docs/course/Topic-2-Git/index.md similarity index 95% rename from docs/course/topic-1-git/index.md rename to docs/course/Topic-2-Git/index.md index f0867a1..51ac42e 100644 --- a/docs/course/topic-1-git/index.md +++ b/docs/course/Topic-2-Git/index.md @@ -1,12 +1,12 @@ --- -title: Topic 1 - Git +title: Topic 2 - Git layout: custom has_children: true has_toc: false -nav_order: 3 +nav_order: 4 --- -# Topic 1 - Git +# Topic 2 - Git | Chapter | Learning Objectives | Lab Description | |---------|---------------------|-----------------| diff --git a/docs/course/Topic-2-Git/review-and-knowledge-check/index.md b/docs/course/Topic-2-Git/review-and-knowledge-check/index.md new file mode 100644 index 0000000..69dd512 --- /dev/null +++ b/docs/course/Topic-2-Git/review-and-knowledge-check/index.md @@ -0,0 +1,9 @@ +--- +title: Topic Review and Knowledge Check +layout: custom +parent: Topic 2 - Git +has_toc: false +nav_order: 6 +--- + +# Topic Review and Knowledge Check \ No newline at end of file diff --git a/docs/course/topic-2-DevOps/chapter-2-intro-to-ci-cd/index.md b/docs/course/Topic-3-CICD-Concepts/chapter-1-cicd-core-concepts/index.md similarity index 98% rename from docs/course/topic-2-DevOps/chapter-2-intro-to-ci-cd/index.md rename to docs/course/Topic-3-CICD-Concepts/chapter-1-cicd-core-concepts/index.md index dd063e7..3dc7f71 100644 --- a/docs/course/topic-2-DevOps/chapter-2-intro-to-ci-cd/index.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-1-cicd-core-concepts/index.md @@ -1,13 +1,13 @@ --- -title: Chapter 2 - Intro to CI/CD +title: Chapter 1 - CI/CD Fundamentals layout: custom -parent: Topic 2 - DevOps +parent: Topic 3 - CI/CD Fundamentals has_children: false has_toc: false nav_order: 2 --- -# Introduction to CI/CD +# CI/CD Fundamentals

    CI/CD, short for Continuous Integration and Continuous Delivery, is a part of the DevOps process. “It is a collection of principles and practices designed to help development teams ensure the reliable delivery of frequent code changes.”

    diff --git a/docs/course/topic-2-DevOps/chapter-4-webhooks/index.md b/docs/course/Topic-3-CICD-Concepts/chapter-2-webhooks/index.md similarity index 97% rename from docs/course/topic-2-DevOps/chapter-4-webhooks/index.md rename to docs/course/Topic-3-CICD-Concepts/chapter-2-webhooks/index.md index 877ec53..32c0b09 100644 --- a/docs/course/topic-2-DevOps/chapter-4-webhooks/index.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-2-webhooks/index.md @@ -1,9 +1,9 @@ --- -title: Chapter 4 - Webhooks +title: Chapter 2 - Webhooks layout: custom -parent: Topic 2 - DevOps +parent: Topic 3 - CI/CD Fundamentals has_toc: false -nav_order: 4 +nav_order: 2 --- ## Utilizing Web Hooks for Continuous Integration diff --git a/docs/course/topic-2-DevOps/chapter-5-automation/index.md b/docs/course/Topic-3-CICD-Concepts/chapter-3-automated-testing/index.md similarity index 98% rename from docs/course/topic-2-DevOps/chapter-5-automation/index.md rename to docs/course/Topic-3-CICD-Concepts/chapter-3-automated-testing/index.md index 0979ccd..e22dc38 100644 --- a/docs/course/topic-2-DevOps/chapter-5-automation/index.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-3-automated-testing/index.md @@ -1,10 +1,10 @@ --- -title: Chapter 5 - Automated Tests +title: Chapter 2 - Automated Tests layout: custom -parent: Topic 2 - DevOps +parent: Topic 3 - CI/CD Fundamentals has_children: false has_toc: false -nav_order: 5 +nav_order: 3 --- # Automated Testing in CI/CD diff --git a/docs/course/topic-2-DevOps/chapter-6-deployment/index.md b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/index.md similarity index 99% rename from docs/course/topic-2-DevOps/chapter-6-deployment/index.md rename to docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/index.md index ce4878a..f0bb9f9 100644 --- a/docs/course/topic-2-DevOps/chapter-6-deployment/index.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/index.md @@ -1,10 +1,10 @@ --- -title: Chapter 6 - Deployment +title: Chapter 4 - Deployment layout: custom -parent: Topic 2 - DevOps +parent: Topic 3 - CI/CD Fundamentals has_toc: false has_children: true -nav_order: 6 +nav_order: 4 --- # Introduction to Deployment diff --git a/docs/course/topic-2-DevOps/chapter-6-deployment/lab/deployment-lab-1.md b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/deployment-lab-1.md similarity index 99% rename from docs/course/topic-2-DevOps/chapter-6-deployment/lab/deployment-lab-1.md rename to docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/deployment-lab-1.md index 5eda465..bacea92 100644 --- a/docs/course/topic-2-DevOps/chapter-6-deployment/lab/deployment-lab-1.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/deployment-lab-1.md @@ -1,8 +1,8 @@ --- title: Lab 1. Configuring a Simple CI/CD Pipeline layout: custom -grand_parent: Topic 2 - DevOps -parent: Chapter 6 - Deployment +grand_parent: Topic 3 - CI/CD Fundamentals +parent: Chapter 4 - Deployment nav_order: 2 --- **Estimated Time to Complete:** 60 minutes diff --git a/docs/course/topic-2-DevOps/chapter-6-deployment/lab/imgs/jenkins-login.png b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/imgs/jenkins-login.png similarity index 100% rename from docs/course/topic-2-DevOps/chapter-6-deployment/lab/imgs/jenkins-login.png rename to docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/imgs/jenkins-login.png diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/wireguard.png b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/imgs/wireguard.png similarity index 100% rename from docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/wireguard.png rename to docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/imgs/wireguard.png diff --git a/docs/course/topic-2-DevOps/chapter-6-deployment/lab/overview.md b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/overview.md similarity index 96% rename from docs/course/topic-2-DevOps/chapter-6-deployment/lab/overview.md rename to docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/overview.md index d2fb8e6..65f011e 100644 --- a/docs/course/topic-2-DevOps/chapter-6-deployment/lab/overview.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-4-deployment/lab/overview.md @@ -1,8 +1,8 @@ --- title: Labs Overview layout: custom -grand_parent: Topic 2 - DevOps -parent: Chapter 6 - Deployment +grand_parent: Topic 3 - CI/CD Fundamentals +parent: Chapter 4 - Deployment nav_order: 1 --- diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/index.md b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/index.md similarity index 99% rename from docs/course/topic-2-DevOps/chapter-3-containerization/index.md rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/index.md index ffcd8ee..7b56cf1 100644 --- a/docs/course/topic-2-DevOps/chapter-3-containerization/index.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/index.md @@ -1,10 +1,10 @@ --- -title: Chapter 3 - Containerization +title: Chapter 5 - Containerization layout: custom -parent: Topic 2 - DevOps +parent: Topic 3 - CI/CD Fundamentals has_children: true has_toc: false -nav_order: 3 +nav_order: 5 --- ## Definition of Containerization diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/containerization-lab-1.md b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/containerization-lab-1.md similarity index 99% rename from docs/course/topic-2-DevOps/chapter-3-containerization/lab/containerization-lab-1.md rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/containerization-lab-1.md index 1662012..d84c734 100644 --- a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/containerization-lab-1.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/containerization-lab-1.md @@ -1,8 +1,8 @@ --- layout: custom title: Lab 1. Containerizing a React Application -grand_parent: Topic 2 - DevOps -parent: Chapter 3 - Containerization +grand_parent: Topic 3 - CI/CD Fundamentals +parent: Chapter 5 - Containerization nav_order: 2 --- # Lab 1 - Containerizing a React Application diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/containerization-lab-2.md b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/containerization-lab-2.md similarity index 98% rename from docs/course/topic-2-DevOps/chapter-3-containerization/lab/containerization-lab-2.md rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/containerization-lab-2.md index cf059df..7771157 100644 --- a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/containerization-lab-2.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/containerization-lab-2.md @@ -1,8 +1,8 @@ --- layout: custom title: Lab 2. Accessing Corporate Network and AWS ECR -grand_parent: Topic 2 - DevOps -parent: Chapter 3 - Containerization +grand_parent: Topic 3 - CI/CD Fundamentals +parent: Chapter 5 - Containerization nav_order: 3 --- # Lab 2 - Accessing Corporate Network and AWS ECR diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/clone.png b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/clone.png similarity index 100% rename from docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/clone.png rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/clone.png diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/dashboard.png b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/dashboard.png similarity index 100% rename from docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/dashboard.png rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/dashboard.png diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/fork.png b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/fork.png similarity index 100% rename from docs/course/topic-2-DevOps/chapter-3-containerization/lab/imgs/fork.png rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/fork.png diff --git a/docs/course/topic-2-DevOps/chapter-6-deployment/lab/imgs/wireguard.png b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/wireguard.png similarity index 100% rename from docs/course/topic-2-DevOps/chapter-6-deployment/lab/imgs/wireguard.png rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/imgs/wireguard.png diff --git a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/overview.md b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/overview.md similarity index 96% rename from docs/course/topic-2-DevOps/chapter-3-containerization/lab/overview.md rename to docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/overview.md index 8598680..f0cb904 100644 --- a/docs/course/topic-2-DevOps/chapter-3-containerization/lab/overview.md +++ b/docs/course/Topic-3-CICD-Concepts/chapter-5-containerization/lab/overview.md @@ -1,8 +1,8 @@ --- title: Labs Overview layout: custom -grand_parent: Topic 2 - DevOps -parent: Chapter 3 - Containerization +grand_parent: Topic 3 - CI/CD Fundamentals +parent: Chapter 5 - Containerization nav_order: 1 --- diff --git a/docs/course/Topic-3-CICD-Concepts/index.md b/docs/course/Topic-3-CICD-Concepts/index.md new file mode 100644 index 0000000..07ffe84 --- /dev/null +++ b/docs/course/Topic-3-CICD-Concepts/index.md @@ -0,0 +1,13 @@ +--- +title: Topic 3 - CI/CD Fundamentals +layout: custom +has_children: true +has_toc: false +nav_order: 5 +--- + +# Topic 3 - CI/CD Fundamentals + +| Chapter | Learning Objectives | Lab Description | +|---------|---------------------|-----------------| + diff --git a/docs/course/Topic-3-CICD-Concepts/review-and-knowledge-check/index.md b/docs/course/Topic-3-CICD-Concepts/review-and-knowledge-check/index.md new file mode 100644 index 0000000..6801c83 --- /dev/null +++ b/docs/course/Topic-3-CICD-Concepts/review-and-knowledge-check/index.md @@ -0,0 +1,9 @@ +--- +title: Topic Review and Knowledge Check +layout: custom +parent: Topic 3 - CI/CD Fundamentals +has_toc: false +nav_order: 5 +--- + +# Topic Review and Knowledge Check \ No newline at end of file diff --git a/docs/course/topic-3-devsecops/chapter-1-devsecops/index.md b/docs/course/Topic-4-Devsecops-Fundmentals/chapter-1-devsecops/index.md similarity index 99% rename from docs/course/topic-3-devsecops/chapter-1-devsecops/index.md rename to docs/course/Topic-4-Devsecops-Fundmentals/chapter-1-devsecops/index.md index ccea82b..1499ad3 100644 --- a/docs/course/topic-3-devsecops/chapter-1-devsecops/index.md +++ b/docs/course/Topic-4-Devsecops-Fundmentals/chapter-1-devsecops/index.md @@ -1,7 +1,7 @@ --- title: Chapter 1 - DevSecOps layout: custom -parent: Topic 3 - DevSecOps +parent: Topic 4 - DevSecOps Fundamentals has_toc: false nav_order: 1 --- diff --git a/docs/course/topic-3-devsecops/chapter-1-devsecops/labs/devsecops-lab-1.md b/docs/course/Topic-4-Devsecops-Fundmentals/chapter-1-devsecops/labs/devsecops-lab-1.md similarity index 100% rename from docs/course/topic-3-devsecops/chapter-1-devsecops/labs/devsecops-lab-1.md rename to docs/course/Topic-4-Devsecops-Fundmentals/chapter-1-devsecops/labs/devsecops-lab-1.md diff --git a/docs/course/topic-3-devsecops/chapter-2-security-checks-in-CICD/index.md b/docs/course/Topic-4-Devsecops-Fundmentals/chapter-2-security-checks-in-CICD/index.md similarity index 99% rename from docs/course/topic-3-devsecops/chapter-2-security-checks-in-CICD/index.md rename to docs/course/Topic-4-Devsecops-Fundmentals/chapter-2-security-checks-in-CICD/index.md index cf2ce22..318e6ff 100644 --- a/docs/course/topic-3-devsecops/chapter-2-security-checks-in-CICD/index.md +++ b/docs/course/Topic-4-Devsecops-Fundmentals/chapter-2-security-checks-in-CICD/index.md @@ -1,7 +1,7 @@ --- title: Chapter 2 - Security Checks in CI/CD layout: custom -parent: Topic 3 - DevSecOps +parent: Topic 4 - DevSecOps Fundamentals has_children: true has_toc: false nav_order: 2 diff --git a/docs/course/topic-3-devsecops/chapter-2-security-checks-in-CICD/lab/devsecops-lab-1.md b/docs/course/Topic-4-Devsecops-Fundmentals/chapter-2-security-checks-in-CICD/lab/devsecops-lab-1.md similarity index 100% rename from docs/course/topic-3-devsecops/chapter-2-security-checks-in-CICD/lab/devsecops-lab-1.md rename to docs/course/Topic-4-Devsecops-Fundmentals/chapter-2-security-checks-in-CICD/lab/devsecops-lab-1.md diff --git a/docs/course/topic-3-devsecops/chapter-2-security-checks-in-CICD/lab/overview.md b/docs/course/Topic-4-Devsecops-Fundmentals/chapter-2-security-checks-in-CICD/lab/overview.md similarity index 100% rename from docs/course/topic-3-devsecops/chapter-2-security-checks-in-CICD/lab/overview.md rename to docs/course/Topic-4-Devsecops-Fundmentals/chapter-2-security-checks-in-CICD/lab/overview.md diff --git a/docs/course/topic-3-devsecops/index.md b/docs/course/Topic-4-Devsecops-Fundmentals/index.md similarity index 90% rename from docs/course/topic-3-devsecops/index.md rename to docs/course/Topic-4-Devsecops-Fundmentals/index.md index 91dad1d..db60ffc 100644 --- a/docs/course/topic-3-devsecops/index.md +++ b/docs/course/Topic-4-Devsecops-Fundmentals/index.md @@ -1,12 +1,12 @@ --- -title: Topic 3 - DevSecOps +title: Topic 4 - DevSecOps Fundamentals layout: custom has_children: true has_toc: false nav_order: 5 --- -# Topic 3 - DevSecOps +# Topic 4 - DevSecOps Fundamentals | Chapter | Learning Objectives | Lab Description | |---------|---------------------|-----------------| diff --git a/docs/course/Topic-5-Cloud/index.md b/docs/course/Topic-5-Cloud/index.md new file mode 100644 index 0000000..3e922b2 --- /dev/null +++ b/docs/course/Topic-5-Cloud/index.md @@ -0,0 +1,15 @@ +--- +title: Topic 5 - Cloud +layout: custom +has_children: true +has_toc: false +nav_order: 6 +--- + +# Topic 5 - Cloud + +| Chapter | Learning Objectives | Lab Description | +|---------|---------------------|-----------------| +| Chapter 1: Intro to Cloud | + + diff --git a/docs/course/topic-1-git/chapter-5-advanced-git-techniques/index.md b/docs/course/topic-1-git/chapter-5-advanced-git-techniques/index.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-2-DevOps/index.md b/docs/course/topic-2-DevOps/index.md deleted file mode 100644 index f740141..0000000 --- a/docs/course/topic-2-DevOps/index.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: Topic 2 - DevOps -layout: custom -has_children: true -has_toc: false -nav_order: 4 ---- - -# Topic 2 - Development & Operations (DevOps) - -| Chapter | Learning Objectives | Lab Description | -|---------|---------------------|-----------------| -| Chapter 1: Intro to DevOps | - Define DevOps and explore its challenges and benefits
    - Discuss roles in Development and Operations and the DevOps lifecycle | | -| Chapter 2: Intro to CI/CD | - Explain CI/CD within the DevOps framework
    - Discuss CI/CD lifecycle, benefits, and methods | | -| Chapter 3: Containerization | - Define containerization and its advantages in cloud computing
    - Explore Kubernetes and microservices architectures
    - Learn about container application consistency | **Lab 1: Containerizing a React Application**
    - Create and run a Docker image of a React application
    - Interact with a running Docker container
    **Lab 2: Accessing Corporate Network and AWS ECR**
    - Establish a VPN and use AWS IAM credentials to authenticate and push Docker images to AWS ECR | -| Chapter 4: Webhooks | - Discuss the role and setup of webhooks in CI/CD automation
    - Explore webhook triggers and their applications | | -| Chapter 5: Automated Tests | - Outline the role of automated testing in CI/CD
    - Discuss strategies and integration into the pipeline | | -| Chapter 6: Deployment | - Define deployment environments and strategies
    - Explore deployment challenges in large-scale environments | **Lab: Configuring a Simple Jenkins Pipeline**
    - Automate a Dockerized application deployment using Jenkins
    - Create and configure a Jenkins pipeline with webhooks | - diff --git a/docs/course/topic-3-devsecops/chapter-3-security-frameworks/index.md b/docs/course/topic-3-devsecops/chapter-3-security-frameworks/index.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-3-devsecops/chapter-4-cloud-security/index.md b/docs/course/topic-3-devsecops/chapter-4-cloud-security/index.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-3-devsecops/chapter-5-threat-modeling-and-risk-assessment/index.md b/docs/course/topic-3-devsecops/chapter-5-threat-modeling-and-risk-assessment/index.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/index.md b/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/index.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/securing-a-vulnerable-web-app.md b/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/securing-a-vulnerable-web-app.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/sql-injection-lab.md b/docs/course/topic-3-devsecops/chapter-6-secure-code-and-hardening/labs/sql-injection-lab.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/index.md b/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/index.md deleted file mode 100644 index e69de29..0000000 diff --git a/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md b/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md deleted file mode 100644 index 66aef38..0000000 --- a/docs/course/topic-3-devsecops/chapter-7-supply-chain-security/labs/detecting-vulnerabilities-lab.md +++ /dev/null @@ -1 +0,0 @@ -detecting vulnerabilities in open source dependencies \ No newline at end of file diff --git a/docs/other/index.md b/docs/other/index.md index a4d252b..8f76555 100644 --- a/docs/other/index.md +++ b/docs/other/index.md @@ -3,5 +3,5 @@ title: Other Documents layout: custom has_children: true has_toc: false -nav_order: 6 +nav_order: 7 --- \ No newline at end of file diff --git a/index.md b/index.md index bbd553d..b42a6aa 100644 --- a/index.md +++ b/index.md @@ -4,9 +4,6 @@ layout: custom nav_order: 0 --- # DevSecOps Curriculum 💻 ->> Made by 2024 University of Washington Informatics Capstone Team Info Innovators - ->> Sponsored by Boeing Welcome to our open-source DevSecOps curriculum! @@ -37,10 +34,3 @@ To understand the skills gap that new graduates face, refer to our [User Researc ## Contributing to the Curriculum 🤝 Contributions are welcome! Help us keep the curriculum relevant and effective by updating content, adding new exercises, or providing feedback. - -### Connect with the Creators 🔗 -- [Sirena Akopyan](https://www.linkedin.com/in/sirena-akopyan/) -- [Bhavya Garlapati](https://www.linkedin.com/in/bhavya-garlapati-95ab46225/) -- [Eric Kim](https://www.linkedin.com/in/taehyunnkim/) -- [Mari Woodworth](https://www.linkedin.com/in/marikowoodworth/) -- [Brandon Mendoza](https://www.linkedin.com/in/bwmendo/)