Build Your First DevSecOps Pipeline on AWS | Hands-on Workshop

About this event

Your CI/CD pipeline is working. But is it secure? You've learned how to build applications, deploy them to the cloud, and automate deployments. But what happens when your code contains vulnerabilities, your dependencies have security issues, or your Docker image exposes critical security risks? That's where DevSecOps comes in. Join us for a hands-on workshop where we'll go beyond traditional CI/CD and build a complete DevSecOps pipeline using AWS and industry-standard open-source tools. Instead of just learning concepts, you'll get to build a pipeline that integrates security into every stage of the software delivery lifecycle. 🔥 What You'll Build By the end of this workshop, you'll have hands-on experience building a pipeline that: • Automatically triggers when code is pushed to GitHub. • Performs source code security analysis using SonarQube. • Detects exposed credentials using Gitleaks. • Identifies vulnerable dependencies. • Builds and containerizes applications using Docker. • Scans container images for vulnerabilities using Trivy. • Pushes verified container images to AWS Elastic Container Registry (ECR). • Deploys applications to Kubernetes using Minikube. • Automates deployments using Argo CD and GitOps. ☁️ Technology Stack • Cloud: AWS EC2 • Version Control: Git & GitHub • CI/CD: GitHub Actions • Code Analysis: SonarQube • Secret Scanning: Gitleaks • Containerization: Docker • Vulnerability Scanning: Trivy • Container Registry: AWS ECR • Orchestration: Kubernetes (Minikube) • GitOps: Argo CD 🎯 What You'll Learn • Understand the DevSecOps lifecycle. • Integrate security into CI/CD pipelines. • Identify and prevent security vulnerabilities before deployment. • Understand container security and image scanning. • Work with Kubernetes and GitOps. • Understand how AWS services integrate with modern DevSecOps workflows. • Explore how real-world engineering teams build secure software delivery pipelines. 👨‍💻 Who Should Attend? • Students interested in DevOps and Cloud Computing. • Beginners exploring Cybersecurity and DevSecOps. • Developers interested in automating secure deployments. • Anyone familiar with basic Git, GitHub, and application development. Prerequisites: Basic knowledge of Git, GitHub, and programming concepts is recommended. Prior AWS or Kubernetes experience is not mandatory. 🔥 The Takeaway Don't just build a pipeline that deploys code. Build one that knows when NOT to deploy. Come prepared to build, break, scan, secure, and deploy! Organized by AWS Student Builder Group – Osmania University.