DevSecOps · hands-on lab
DevSecOps Lab 01: Secret Scanning with gitleaks
Find hard-coded secrets in a codebase with gitleaks, then remove them so the scan comes back clean — the first gate of any pipeline.
- 30 minutesTime in the lab
- beginnerLevel
- 3 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Scenario. A developer pushed credentials into the repo. Before anything ships, your pipeline must catch secrets. You scan with gitleaks, then fix the code so the gate passes.
What you will do
- Scan for secrets and save the report
- Remove the secrets and prove the scan is clean
- Why fail the build on a secret?question
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.