Theory · DevOps security

16 min · Module 11 · Theory

How to study this topic

Read the theory below (concepts, bullets, and shell/YAML examples).
Try the Exam pool and Book quizzes in this module.
After each quiz, use Show answer on every question to review.

DevOps security (DevSecOps)

Integrate security in CI: SAST, dependency scanning, container image scans, secrets detection. RBAC and least privilege apply to cloud IAM and Kubernetes.

Secrets: HashiCorp Vault, AWS Secrets Manager — rotate regularly.
Supply chain: pin dependencies, verify image signatures (cosign).
Network: security groups, network policies, mTLS in mesh.

Shell, YAML & config examples

# Example: scan image in CI
# trivy image myregistry/app:${{ github.sha }}
# fail build on CRITICAL CVEs

Hands-on practice: /lab/