DevOps with GitHub and Azure: Implementing Software Supply Chain Security with GitHub from Pluralsight

Implementing Software Supply Chain Security can be challenging. In this course, you will learn how to improve code security with GitHub.

One of the most important aspects of software delivery is security. In the era of open-source projects, it is challenging and not easy to control every vulnerability and make sure that our solution does not use the package with serious vulnerabilities. The threat today to supply chain security is unpatched software.

In this course, DevOps with GitHub and Azure: Implementing software supply chain security with GitHub, you will learn about tools for software supply chain security available on GitHub.

First, you will understand what software supply chain security is and why it is important to not leave security as the last step of software delivery. Then, you will explore the configuration of Dependabot to automate keeping updated dependencies used in the project and how to add security static code analysis to an Actions workflow.

Finally, you will explore how to add License scanning to an Actions workflow to protect against specific license types in used OSS packages.

By the end of this course, you will have a clear overview of how to implement software supply chain security with GitHub, and how to maintain a secure repository by using GitHub best practices.

What's inside

Syllabus

Course Overview

Software Supply Chain Security

Enhanced Security with GitHub Actions

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Suits learners interested in implementing software supply chain security

Builds foundation for learners with no prior experience with software supply chain security

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in DevOps with GitHub and Azure: Implementing Software Supply Chain Security with GitHub with these activities:

Review Basic Security Principles and Concepts

Show steps

Refresh your understanding of fundamental security principles, such as confidentiality, integrity, and availability, to enhance your ability to apply them in the context of software security.

Browse courses on Security Principles

Show steps

Review articles and tutorials on security principles
Take practice quizzes or complete exercises

Read 'Secure Coding in Python' by Peter Yaworski

Show steps

Gain a deeper understanding of secure coding principles and best practices in Python, enhancing your ability to develop secure and robust software applications.

View Real-World Bug Hunting: A Field Guide to Web... on Amazon

Show steps

Purchase and read the book
Take notes and highlight key concepts
Apply the principles to personal coding projects

Attend a GitHub Community Event Focused on Security

Show steps

Participate in a local GitHub community event centered around software security, connecting with other developers and learning about best practices from experts.

Browse courses on Software Security

Show steps

Identify local GitHub community events
Attend the event and participate in discussions
Network with other developers and security professionals

Six other activities

Expand to see all activities and additional details

Show all nine activities

Complete GitHub Actions Security Tutorials

Show steps

Complete a series of interactive tutorials on GitHub Actions to enhance your understanding of security features and their implementation.

Browse courses on Github Actions

Show steps

Set up a GitHub Actions workflow for a personal project
Implement security checks using GitHub Actions
Monitor and troubleshoot GitHub Actions workflows

Follow OWASP Top 10 Security Vulnerabilities in GitHub Actions

Show steps

Follow a guided tutorial on addressing the OWASP Top 10 security vulnerabilities in GitHub Actions, improving your understanding of common security risks.

Browse courses on OWASP Top 10

Show steps

Review the OWASP Top 10 security vulnerabilities
Identify and mitigate vulnerabilities in GitHub Actions workflows

Configure Dependabot for Automatic Vulnerability Updates

Show steps

Configure Dependabot to automate the process of keeping your project's dependencies up-to-date, reducing the risk of vulnerabilities in your code.

Show steps

Create a GitHub repository for a personal project
Set up automatic dependency updates using Dependabot
Monitor and review Dependabot alerts and updates

Document Git Security Best Practices

Show steps

Create a reference document that summarizes current best practices for maintaining secure Git repositories.

Browse courses on Software Security

Show steps

Research best practices for Git security
Review existing Git repositories for security vulnerabilities
Write a comprehensive document outlining best practices

Design a Security Policy for a GitHub Repository

Show steps

Draft a security policy for a GitHub repository, defining guidelines, responsibilities, and procedures for maintaining a secure codebase and development process.

Browse courses on Security Policy

Show steps

Identify security risks and threats for the GitHub repository
Review existing security policies and best practices
Develop a comprehensive security policy document
Communicate and implement the security policy within the team

Develop a Cheat Sheet on GitHub Security Best Practices

Show steps

Create a concise and accessible cheat sheet summarizing key GitHub security best practices for quick reference and easy implementation.

Browse courses on Software Security

Show steps

Gather information on GitHub security best practices
Organize and distill the information into a cheat sheet format
Share the cheat sheet with colleagues and the community

Career center

Learners who complete DevOps with GitHub and Azure: Implementing Software Supply Chain Security with GitHub will develop knowledge and skills that may be useful to these careers:

DevOps Engineer

DevOps Engineers are responsible for the planning, design, and implementation of software delivery pipelines. They work to ensure that software is delivered quickly and securely. This course provides a foundation in software supply chain security, which is a critical aspect of DevOps. By understanding the tools and techniques for software supply chain security, DevOps Engineers can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for DevOps Engineer

Software Engineer

Software Engineers design, develop, and maintain software applications. They work to ensure that software is secure, reliable, and efficient. This course provides a foundation in software supply chain security, which is a critical aspect of software development. By understanding the tools and techniques for software supply chain security, Software Engineers can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Software Engineer

Security Engineer

Security Engineers are responsible for the security of an organization's IT infrastructure. They work to identify and mitigate security risks. This course provides a foundation in software supply chain security, which is a critical aspect of IT security. By understanding the tools and techniques for software supply chain security, Security Engineers can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Security Engineer

Cloud Engineer

Cloud Engineers design, build, and maintain cloud computing infrastructure. They work to ensure that cloud applications are secure, reliable, and scalable. This course provides a foundation in software supply chain security, which is a critical aspect of cloud computing. By understanding the tools and techniques for software supply chain security, Cloud Engineers can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Cloud Engineer

IT Manager

IT Managers are responsible for the planning, implementation, and management of an organization's IT infrastructure. They work to ensure that IT systems are secure, reliable, and efficient. This course provides a foundation in software supply chain security, which is a critical aspect of IT management. By understanding the tools and techniques for software supply chain security, IT Managers can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for IT Manager

Information Security Analyst

Information Security Analysts are responsible for identifying and mitigating security risks to an organization's information systems. They work to protect against unauthorized access, data breaches, and other security threats. This course provides a foundation in software supply chain security, which is a critical aspect of information security. By understanding the tools and techniques for software supply chain security, Information Security Analysts can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Information Security Analyst

Cybersecurity Analyst

Cybersecurity Analysts are responsible for protecting an organization's computer systems and networks from cyber threats. They work to identify and mitigate vulnerabilities, and to respond to security incidents. This course provides a foundation in software supply chain security, which is a critical aspect of cybersecurity. By understanding the tools and techniques for software supply chain security, Cybersecurity Analysts can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Cybersecurity Analyst

Risk Analyst

Risk Analysts are responsible for identifying and assessing risks to an organization. They work to develop strategies to mitigate these risks and to protect the organization from financial losses, reputational damage, and other negative consequences. This course provides a foundation in software supply chain security, which is a critical aspect of risk management. By understanding the tools and techniques for software supply chain security, Risk Analysts can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Risk Analyst

Compliance Manager

Compliance Managers are responsible for ensuring that an organization complies with all applicable laws and regulations. They work to identify and mitigate compliance risks, and to develop and implement compliance programs. This course provides a foundation in software supply chain security, which is a critical aspect of compliance. By understanding the tools and techniques for software supply chain security, Compliance Managers can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Compliance Manager

Auditor

Auditors are responsible for examining an organization's financial records and operations to ensure that they are accurate and compliant with all applicable laws and regulations. This course provides a foundation in software supply chain security, which is a critical aspect of auditing. By understanding the tools and techniques for software supply chain security, Auditors can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Auditor

Systems Analyst

Systems Analysts are responsible for analyzing and designing computer systems. They work to ensure that these systems are efficient, reliable, and secure. This course provides a foundation in software supply chain security, which is a critical aspect of systems analysis. By understanding the tools and techniques for software supply chain security, Systems Analysts can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Systems Analyst

Database Administrator

Database Administrators are responsible for managing and maintaining an organization's databases. They work to ensure that these databases are secure, reliable, and efficient. This course provides a foundation in software supply chain security, which is a critical aspect of database administration. By understanding the tools and techniques for software supply chain security, Database Administrators can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Database Administrator

Network Administrator

Network Administrators are responsible for managing and maintaining an organization's computer networks. They work to ensure that these networks are secure, reliable, and efficient. This course provides a foundation in software supply chain security, which is a critical aspect of network administration. By understanding the tools and techniques for software supply chain security, Network Administrators can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Network Administrator

Security Consultant

Security Consultants are responsible for providing security advice to organizations. They work to help organizations identify and mitigate security risks. This course provides a foundation in software supply chain security, which is a critical aspect of security consulting. By understanding the tools and techniques for software supply chain security, Security Consultants can help their clients to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Security Consultant

Information Security Manager

Information Security Managers are responsible for developing and implementing an organization's information security program. They work to ensure that the organization's information is protected from unauthorized access, data breaches, and other security threats. This course provides a foundation in software supply chain security, which is a critical aspect of information security management. By understanding the tools and techniques for software supply chain security, Information Security Managers can help to protect their organizations from vulnerabilities and attacks.

See salaries and explore the career path for Information Security Manager