GitLab Security Essentials

Introducing the Secure Stage

• Features available in the Secure Stage
• How Security Scanning Works with GitLab Flow
• Types of Security Scans Available
• Types of Security Reports Available

SAST, Secret Detection, & DAST

• What is Static Application Security Testing (SAST)?
• Steps for Using SAST
• Enabling & Configuring SAST
• Reviewing SAST Reports
• Taking Action on SAST Findings
• What is Secret Detection?
• Steps for Using Secret Detection
• Enabling & Configuring Secret Detection
• What is Dynamic Application Security Testing (DAST)?
• Steps for Using DAST
• Enabling & Configuring DAST
• Lab: Using SAST, Secret Detection, & DAST

Dependency Scanning

• What is Dependency Scanning?
• Steps for Using Dependency Scanning
• Enable & Configure Dependency Scanning
• Lab: Using Dependency Scanning

Container Scanning

• What is Container Scanning?
• Steps for Using Container Scanning
• Enable & Configure Container Scanning
• Lab: Using Container Scanning

License Compliance

• What is License Compliance?
• Steps for Using License Compliance
• Enable & Configure License Compliance
• Review Scanning Output & Reports
• Lab: Enable, Configure, & Run License Compliance

Fuzz Testing

• What is Fuzz Testing?
• Steps for Using Fuzz Testing
• Fuzz Testing workflow
• Using a Fuzz Testing Corpus
• Lab: Enable, Configure, & Run Fuzz Testing

GitLab is an open-source code repository & collaborative software development platform for large DevOps & DevSecOps projects. GitLab is free for individuals. GitLab offers a location for online code storage & capabilities for issue tracking & CI/CD.

The significant difference between GitHub & GitLab is the platform each philosophy presents. GitHub has higher availability & is more focused on infrastructure performance, while GitLab is more focused on offering a features-based system with a centralized, integrated platform for web developers.

For self-hosted private repositories, GitLab is the better choice. Professionals can get started without having to pay any monthly subscription fee. Both options are great for open-source projects, with GitLab offering premium features for free & GitHub offering access to a larger pool of active open-source developers.

GitLab is a single application with all the functionality of a DevSecOps Platform, allowing organizations to deliver software faster while strengthening security & compliance, thereby maximizing the return on software development.

GitLab's open core is published under an MIT open-source license. The rest is source-available. Everyone can contribute to making GitLab better.

GitLab is designed for cloud-native applications with tight Kubernetes integration. Many businesses are shifting from traditional deployment models to cloud-native applications to gain speed, reliability, & scale. Learn more about how GitLab can power your cloud-native development.

More about GitLab itself, & other similar services, you can read in our article: Top Git hosting services for 2022. Another handy thing is the GitLab API. It is a tool that allows you to automate your work. Many of the basic daily operations we perform can be automated.

GitLab.com is powered by an extensive PostgreSQL database ("the database" in this doc) which is often used as a point of reference in terms of scale - after all, this is the largest installation of GitLab we have access to.

We're the company behind GitLab, the most comprehensive DevSecOps platform. What started in 2011 as an open-source project to help one team of programmers collaborate is now the platform millions of people use to deliver software faster & more efficiently while strengthening security & compliance.

A: To attend the training session, professionals should have operational Desktops or Laptops with the required specifications and a good internet connection to access the labs. 

A: We recommend you attend the live session to practice & clarify the doubts instantly & get more value from your investment. However, if you have to skip the class due to some contingency, Radiant Tech Learning will help you with the recorded session of that particular day. However, those recorded sessions are not meant only for personal consumption & NOT for distribution or commercial use.

A: Radiant Tech Learning has a data centre containing a Virtual Training environment for participant hand-on-practice. Participants can easily access these labs over Cloud with the help of a remote desktop connection. Radiant virtual labs allow you to learn from anywhere in the world & in any time zone. 

A: The professionals will be enthralled as we engage them the real-world & Oriented industry projects during the training program. These projects will improve your skills & knowledge, & you will gain a better experience. These real-time projects will help you a lot in your future tasks & assignments.

A: If you decide against signing up for the course, you can request a refund.

A: Yes, you can.

A: We adhere to the highest Internet security standards. Any data that is kept is not disclosed to outside parties.

A: It is recommended but optional. Being acquainted with the primary course material will enable students & the trainer to move at the desired pace during classes. You can access courseware for most vendors.

A: You can buy online from the page by clicking "Buy Now". You can view alternate payment methods on the payment options page.

A: Yes, students can pay from the course page.

A: All professionals who have finished the training programme and the project assignment assigned by your instructor will receive a course completion certificate. You can get your dream job by using the certification in subsequent job interviews.

Ans- Radiant believes in a practical & creative approach to training & development, distinguishing it from other activity & developmental platforms. Moreover, training courses are undertaken by experts with a range of experience in their domain.

Ans- Radiant team of experts will be available at e-mail support@radianttechlearning.com to answer your technical queries after the training program.

 Ans- Yes, Radiant will provide you most updated high, value-relevant real-time projects & case studies in each course program.

 Ans- Technical issues are unpredictable & might occur with us as well. Participants must ensure access to the required configuration with good internet speed.

Ans- Radiant Techlearning offers training programs on weekdays, weekends & combination of weekdays & weekends. We provide you with complete liberty to choose the schedule that suits your need.

A: Radiant has highly intensive selection criteria for Technology Trainers & Consultants who deliver training programs. Our trainers & consultants undergo rigorous technical & behavioural interviews & assessment processes before they are on-boarded in the company.

Our Technology experts/trainers & consultants carry deep-dive knowledge in the technical subject & are certified by the OEM.

Our training programs are practically oriented with 70% – 80% hands-on training technology tools. Our course program focuses on one-on-one interaction with each participant, the latest content in the curriculum, real-time projects & case studies during the training program.

Our specialists will quickly introduce you to each course's essential concepts, and you are free to ask your specific faculty any questions you may have at any time.

Our trainers have the patience & ability to explain complex concepts in a simplistic way with depth & width of knowledge.

We provide a support session to ensure quality learning after the training program.