Loading content
This course includes: 12 lessons · 3 supporting documents
Pre-course assessment
Check your starting knowledge before learning
Continuous Security in an Azure DevOps Pipeline
Lesson video
Treat the pipeline as a privileged system
Identify the code, triggers, agents, and resources a pipeline can reach.
Limit pipeline and service-connection permissions
Apply least privilege and specify which pipelines can access each resource.
Store and use secrets carefully
Prevent secret values from appearing in logs, limit their scope, and plan rotation.
Control agents and dependencies
Isolate execution environments, inspect dependencies, and limit the impact of untrusted work.
Add checks and test releases
Require checks, approvals, and build evidence before production deployment.
Applied case study and evidence review
Separate pull-request checks from deployment authority
Course study guide
A practical guide to the course lessons, with Thai and English editions.
Practical workbook
Course-based exercises for review and planning a small real-world trial.
Quick reference
A concise reference to course topics and review points for use while working.
Post-course assessment
Review key ideas and apply them to realistic situations.
Loading comments…
