From scanning infrastructure as code (IaC) for security misconfigurations to implementing automated DevSecOps workflows, this 2-hour workshop will provide hands-on experience to automate your cloud security.

The workshop will cover: Part I - Hands-on: Code scanning with checkov

• Overview of DevSecOps and Terraform infrastructure as code (IaC)
• Getting started with checkov to detect Terraform misconfigurations
• Setting up a secure CI/CD pipeline with GitHub and HCP

Terraform Part II - Demo: Application Security with Cortex Cloud

• Automated code fixes in IDE and VCS
• Configuring HCP Terraform Run Task integration with Cortex Cloud