From scanning infrastructure as code (IaC) for security misconfigurations to implementing automated DevSecOps workflows, this two-hour workshop will provide hands-on experience to automate your cloud security.

The workshop will cover:

Part I - Hands-on: Code scanning with Checkov

• Overview of DevSecOps and Terraform infrastructure as code
• Getting started with Checkov to detect Terraform misconfigurations
• Setting up a secure CI/CD pipeline with GitHub and HCP Terraform

Part II - Demo: Application security with Cortex Cloud

• Automated code fixes in IDE and VCS
• Configuring HCP Terraform run task integration with Cortex Cloud