Recommended Path 01
DevSecOps Pipeline
Security gates developers can live with: secrets, SAST and image scanning in GitLab CI and Jenkins.
Learning
Learning paths
Structured, hands-on learning paths to build practical skills in DevOps, DevSecOps, Kubernetes and infrastructure security. Each path is an ordered sequence: start at part one, and every part states what it assumes from the one before.
- 35 published parts
- 9 learning paths
- total reading time
- ~6.8 hours
- 2 levels
- Beginner → Intermediate
- commands run, versions stated
- 35 of 35 parts reviewed
Learn by doing. Real commands, real environments, no theory without practice.
Recommended start
DevSecOps Pipeline
A merge-request pipeline that blocks leaked secrets, vulnerable dependencies and unverified artifacts, with exactly one way to reach production.
I want to…
Pick the outcome; the path is the ordered way to it. Each one says what it builds on and where to go next.
- Secure my CI/CD pipeline DevSecOps Pipeline · 3 parts · Beginner → Intermediate
- Secure container images Container Security · 2 parts · Beginner
- Secure a Kubernetes cluster Secure Kubernetes · 3 parts · Intermediate
- Design a reliable delivery pipeline CI/CD Engineering · 4 parts · Beginner → Intermediate
- Secure Terraform and infrastructure code Infrastructure as Code Security · 3 parts · Intermediate
- Secure the software supply chain Software Supply Chain Security · 5 parts · Intermediate
- Run workloads on Kubernetes Kubernetes Operations · 5 parts · Intermediate
- Expose a cloud workload safely Cloud Security Foundations · 5 parts · Beginner → Intermediate
- Build an internal platform Platform Engineering · 5 parts · Intermediate
DevSecOps & Security
Security controls that run inside the delivery pipeline.
-
- Path 02
Container Security
Scan images, produce SBOMs and ship less, from Dockerfile to registry.
- Path 06
Software Supply Chain Security
Inventory, scan, sign and verify one real image, from dependencies to the digest a cluster may run.
Kubernetes & Platform
Build, secure and operate Kubernetes in production.
- Path 07
Kubernetes Operations
Run workloads on a real cluster: controllers, probes and limits, real failures, Services and DNS, scaling.
- Path 03
Secure Kubernetes
RBAC, Pod Security, network policy, Kyverno admission and GitOps, layer by layer.
- Path 09
Platform Engineering
One contract, four components: environments from Git, a golden CI path, guardrails through GitOps, visibility.
CI/CD & Delivery
Reliable delivery systems from commit to rollback.
- Path 04
CI/CD Engineering
How a delivery pipeline really runs: build, test, artifact, deployment and rollback.
-
How it connects
- Where it leads
- DevSecOps Pipeline · Security gates developers can live with: secrets, SAST and image scanning in GitLab CI and Jenkins.
- Platform Engineering · One contract, four components: environments from Git, a golden CI path, guardrails through GitOps, visibility.
Cloud & Infrastructure
Infrastructure as code and cloud security boundaries.
- Path 05
Infrastructure as Code Security
Catch insecure Terraform before it is applied: foundations, Checkov scanning and a merge-request gate.
- Path 08
Cloud Security Foundations
Identity, network exposure, secrets, audit logs and hardening for a cloud-hosted production workload.
Articles outside a path stand on their own; find them under all articles or by tag . Labs that practise a path are listed on its page.