VSLive Secure and Compliant Cloud Delivery Embracing DevOps

In this Hands-on Lab we will teach you how to use all the great features GitHub has to offer. We will start with an overview how to come from Idea to Code by using GitHub Discussions, Issues, Pages and Wiki. Next we will move the idea's to code and start using the Git features. From here we dive in to the use of Branch Protection Rules, Code Owners, Actions for CI, CD and Deployments to the Azure Cloud. We will also have a look at how GitHub can help you in your Secure Development Lifecycle with Credential scanning, Package Vulnerability Scanning and Code Scanning to expose programming mistakes that might lead to vulnerabilities in the future. After this Hands-on workshop, you know what GitHub has to offer to you and your organization to implement Secure and Compliant DevOps with ease.

Prerequisites:

You must provide your own laptop computer (Windows or Mac) for this hands-on lab.

Hands-On Labs

You can find the details for each of the hands-on labs in the sequence of the bootcamp below. Use the links to navigate to the respective labs.

Hands-on Labs

Module 1 : Setting up your repository

• Hands-on lab 1.1: Import an existing repository to GitHub
• Hands-on lab 1.2: Setting up Codespaces to develop a web-app

Module 2: Basic Developer Workflow

• Hands-on lab 2.1: Collaboration using Issues, Discussions, and Pages
• Hands-on lab 2.2: GitHub Projects
• Hands-on lab 2.3: Collaborate on code
• Hands-on lab 2.4: Review code
• Hands-on lab 2.5: My first workflow
• Hands-on lab 2.6: Building and deploying a .NET web application

Module 3: Adding Compliancy

• Hands-on lab 3.1: Adding automated build and 4 eyes principle to your repository
• Hands-on lab 3.2: Adding traceability with release notes
• Hands-on lab 3.3: Staged deployments

Module 4: Adding Security

• Hands-on lab 4.1: Making your Deployment Workflows more secure
• Hands-on lab 4.2: Setting up Code Scanning and Secret Scanning for your repository
• Hands-on lab 4.3: Enabling and using Dependabot on your repository

Relevant links

• Download Git client
• Visualizing Git
• Semantic Versioning
• GitHub Flow guide
• GitHub documentation
• Mastering GitHub markdown language
• GitHub Marketplace: Actions

Contribute back!

When you find errors or inconsistencies in the lab descriptions, or there are additions you want to contribute, then please make the change and create a pull request so we can adopt this in our next workshop.

Enjoy and learn

All content is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.