blog | Gataya Med

Lesson 1

CI/CD

August 10, 2026 Gataya Med 14 min read

CI/CD: Software Supply Chain Security with Sigstore, In-Toto, and SLSA Level 3

Secure your software supply chain with Sigstore and cosign: sign container images keylessly, attach in-toto provenance attestations, and build a GitHub Actions pipeline that meets SLSA Level 3 requirements.

Lesson 2

CI/CD

July 27, 2026 Gataya Med 16 min read

CI/CD Security: Integrating SAST, DAST, and Dependency Scanning into Pipelines

Integrate security scanning into your CI/CD pipelines. Learn SAST, DAST, dependency scanning, secret detection, and SBOM generation with GitHub Actions.

Lesson 3

CI/CD

February 17, 2025 Gataya Med 15 min read

Advanced CI/CD Patterns: Matrix Builds, Caching, and Self-Hosted Runners

Master advanced CI/CD patterns: matrix builds for testing multiple versions, dependency caching, self-hosted runners, and workflow optimization.

Lesson 4

CI/CD

February 16, 2025 Gataya Med 16 min read

CI/CD for Infrastructure as Code: Terraform in Pipelines

Master Infrastructure as Code CI/CD: automate Terraform plan and apply, manage state, security scanning, and policy enforcement in pipelines.

Lesson 5

CI/CD

February 15, 2025 Gataya Med 18 min read

CI/CD Deployment Strategies: Zero-Downtime Deployments

Master deployment strategies: rolling updates, blue-green deployments, canary releases, and feature flags for zero-downtime production changes.

Lesson 6

CI/CD

February 14, 2025 Gataya Med 16 min read

CI/CD: Building and Pushing Docker Images Automatically

Master building and pushing Docker images in CI/CD pipelines: optimize builds, cache layers, scan for vulnerabilities, and push to registries.

💡 Learning Tip

Start with Lesson 1 and work your way down. Each lesson builds on previous knowledge. Take your time and practice each concept!

Latest News

📚 CI/CD Curriculum

CI/CD: Software Supply Chain Security with Sigstore, In-Toto, and SLSA Level 3

CI/CD Security: Integrating SAST, DAST, and Dependency Scanning into Pipelines

Advanced CI/CD Patterns: Matrix Builds, Caching, and Self-Hosted Runners

CI/CD for Infrastructure as Code: Terraform in Pipelines

CI/CD Deployment Strategies: Zero-Downtime Deployments

CI/CD: Building and Pushing Docker Images Automatically

About the Author

Gataya Med

Categories

About This Course

Recent Posts