Learn DevSecOps

This is LabEx’s experimental DevSecOps Skill Tree for learners who already have Linux, DevOps, and cybersecurity foundations. Learn how to bake security into delivery workflows through hands-on labs and realistic scenarios—host and service exposure, hardening, least privilege, secrets hygiene, and safe privileged automation—with outcomes you can verify on real system state.

166 Skills|6 Courses

DevSecOps for Beginners

DevSecOpsCybersecurity

Practice service, code, dependency, container, and delivery security through 14 Guided Labs and 14 matching Challenges.

Completed 0 of 28 Labs

Understand Application Boundaries

Your First DevSecOps Lab

Remove Debug Information from a Service

Understand and Reduce Service Exposure

Keep an Admin Service Local

Protect Service Files with Least Privilege

Protect a Service Configuration File

Protect Code, Credentials, and Dependencies

Keep Secrets Out of Git

Prepare a Secret-Free Commit

Handle Application Secrets Safely

Replace an Exposed Application Token

Find and Fix a Vulnerable Dependency

Update a Vulnerable Application Dependency

Find and Fix Unsafe Database Queries

Fix an Unsafe Lookup Query

Turn Security Requirements into Tests

Add a Regression Test for a Protected Endpoint

Build and Run Containers Safely

Run a Container with Less Privilege

Run a Report Worker as a Non-Root User

Keep Secrets Out of Container Images

Build an Image Without Private Files

Check and Deliver Changes Continuously

Build Your First Security Gate

Stop a Release When Security Checks Fail

Protect a Delivery Workflow

Reduce Risk in a Build Workflow

Investigate and Prevent a Security Regression

Remove a Debug Logging Regression

Verify and Deliver a Secure Release

Deliver a Secure DeskLite Release

Linux Security for DevSecOps

LinuxDevSecOpsCybersecurity

A hands-on Linux security course for DevSecOps learners focused on service exposure, web hardening, file permissions, sudo, secrets, root-run automation, service identity, runtime configuration, logs, scripts, and access policy cleanup. You will investigate real host state, apply targeted fixes, and verify that systems stay usable after hardening.

Completed 0 of 20 Labs

Docker Security for DevSecOps

DockerDevSecOpsCybersecurity

A hands-on Docker security course for DevSecOps learners focused on container runtime audits, port exposure, debug bindings, Docker socket access, bind mounts, non-root users, privileged mode, runtime secrets, build-time token leaks, and image hygiene. You will investigate real container state, apply targeted fixes, and verify that applications keep working after hardening.

Completed 0 of 20 Labs

Keeping a Look-Alike Package Out of a Build

ProjectDevSecOpsPythonCybersecurity

Build a working ticket tool from approved Python dependencies and reject look-alike wheel replacements.

Completed 0 of 3 Labs

Accepting a Release Only from Its Trusted Publisher

ProjectDevSecOpsCybersecurity

Build a reusable receiver that accepts the requested publisher-signed guide, rejects unapproved deliveries, and preserves the running site and downloads.

Completed 0 of 3 Labs

Giving a Report Job Temporary Database Access

ProjectDevSecOpsPostgreSQLCybersecurity

Give a real report a limited dynamic PostgreSQL login through OpenBao, then prove exact revocation, natural expiry and recovery while preserving independent business access.

Completed 0 of 3 Labs