From scanning infrastructure as code (IaC) for security misconfigurations to implementing automated DevSecOps workflows, this two-hour workshop will provide hands-on experience to automate your cloud security.

The workshop will cover:

Part I - Hands-on: Code scanning with Checkov

• Overview of DevSecOps and Terraform infrastructure as code
• Getting started with Checkov to detect Terraform misconfigurations
• Setting up a secure CI/CD pipeline with GitHub and HCP Terraform

Part II - Demo: Application security with Cortex Cloud

• Automated code fixes in IDE and VCS
• Configuring HCP Terraform run task integration with Cortex Cloud

Details

• It will be helpful to have a basic understanding of Git, GCP core concepts (IAM, regions, UI, CLI, APIs), and CI/CD principles
• The workshop will use Qwiklabs on GCP