DevSecOps with Azure DevOps

Azure DevOps is a suite of services offered by Microsoft that accelerate the process of software development by implementing agile tools, CI/CD workflows, testing tools, Git repos and more.

‍

In this course, we’ll leverage the power of Azure DevOps to build security automation pipelines that allow you to automate static, dynamic, and source composition analysis. Each of these lessons will be taught hands-on, where you get to build DevSecOps pipelines yourself.

‍

We start by building a SAST and SCA pipeline in NodeJS, making use of Azure DevOps to perform these scans in CI/CD. Next, we’ll build similar SAST and SCA pipelines in Python. To conclude the course, we’ll learn how to automate a DAST automation pipeline using OWASP ZAP.