How to: Bonus: Learn DevSecOps Fundamentals
Security must be integrated throughout the DevOps lifecycle rather than added as an afterthought.

Here you will need to learn how to integrate security into the DevOps pipeline, and how to automate security testing (SAST and DAST).

Also, you need to know how to manage secrets and credentials, and how to set up security policies.

**Resources:**

- [OWASP DevSecOps Guideline](https://owasp.org/www-project-devsecops-guideline/)
FREE
- [Supply Chain Levels for Software Artifacts (SLSA)](https://slsa.dev/)
FREE
- [HashiCorp Vault Documentation](https://developer.hashicorp.com/vault/docs)
FREE
- [Trivy Documentation](https://trivy.dev/latest/)
FREE
- [Falco Runtime Security](https://falco.org/docs/)
FREE
- [DevSecOps: A leader's guide](https://www.devsecops.org/)
FREE
- [Container Security](https://www.oreilly.com/library/view/container-security/9781492056690/) book