Secure your gitlab ci/cd implementations against threats.
10 lessons
1 h
advanced
What you'll learn
Identify the core components of a GitLab CI/CD pipeline and their associated risks
Explain how compromise of runner registration tokens, job tokens, or executor isolation can lead to repository access, credential theft, or host takeover
Recognize the importance of controlling access to the .gitlab-ci.yml file to prevent malicious pipeline modifications
Summarize the key NSA/CISA recommendations for securing CI/CD environments
Apply NSA/CISA guidance to GitLab-specific settings such as scanning early in the pipeline and using trusted sources
Implement temporary resource cleanup policies for pipeline-created infrastructure
Finishing the course
40 knowledge-check questions along the way, so you know the ideas stuck before you move on.
Watching is free and needs no account. Sign in to save your progress. Pass each lesson's quiz (60%+) to earn the certificate. Each certificate has its own public verification link to share, marked quiz-verified.
Part of the DevOps Tooling learning path. Enrol in the path and finish its required courses to earn one certificate for all of them.