Mar 1
Loading video player...
In this video, we are going to build an end-to-end DevSecOps project from scratch. We’ll take a simple Python finance application and wrap it in a security-first pipeline using industry-standard open-source tools. 💡 What you’ll learn after watching this video: 🔹How to design an end-to-end DevSecOps pipeline for a simple Python app. 🔹How to structure two GitHub repos: one for application code and one for ops/GitOps. 🔹How to run Gitleaks in CI to prevent committing secrets. 🔹How to integrate SonarQube into Jenkins for SAST and quality gates. 🔹How to use Docker locally and Kaniko in CI to build and push images to Docker Hub. 🔹How to scan container images with Trivy and fail the pipeline on high-risk vulnerabilities. 🔹How to configure Argo CD to automatically deploy from an ops repo using GitOps. 🔹How to run OWASP ZAP as part of your pipeline for DAST against a staging environment. 🔹How to use Falco for runtime security monitoring in your Kubernetes cluster. 🔹How to connect all these tools into a Jenkins Groovy pipeline that automates CI/CD with security at every stage. 🔔 Don’t forget to like, subscribe, and share if you found it helpful! #devsecops #devops #devopsprojects #pythonapi #jenkins #github #kubernetes #security #sonarqube #argocd 🙏🏻 Thanks for watching!