Cybersecurity EngineerIntermediate6 modules~3.0 hours hands-on3 learning modes
Software Supply Chain & DevSecOps Security
Build a fail-closed CI policy with dependency review, secret and code scanning, SBOMs, provenance, signatures, and least-privilege automation.
// What you'll be able to do- Review changes, lock resolution, and keep credentials out
- Untrusted pull requests never inherit privileged workflow context
- Composition, build history, and identity answer different questions
- Fail closed, expire exceptions, and retain evidence
6 modules, built to run
Every module ships runnable code. Expand any one to see what's inside.
00IntroductionA release is source plus every system that transformed it30 min
Objective — A release is source plus every system that transformed it
Start moduleFree preview
01Dependencies & SecretsReview changes, lock resolution, and keep credentials out30 min
Objective — Review changes, lock resolution, and keep credentials out
02Static Analysis & CI TrustUntrusted pull requests never inherit privileged workflow context30 min
Objective — Untrusted pull requests never inherit privileged workflow context
03SBOMs, Provenance & SignaturesComposition, build history, and identity answer different questions30 min
Objective — Composition, build history, and identity answer different questions
04Policy Gates & ExceptionsFail closed, expire exceptions, and retain evidence30 min
Objective — Fail closed, expire exceptions, and retain evidence
05Pattern SynthesisBuild and verify a local pipeline policy30 min
Objective — Build and verify a local pipeline policy
Ready to start Software Supply Chain & DevSecOps Security?
Start with the free Module 0, then unlock the full course on a Pro plan.