Lab — Fundamentals

Pack DevSecOps pillars, shift-left, and pipeline stages cards — fundamentals file from $DEVSEC_LAB only.

Lab — Fundamentals• Audio Walkthrough

00:00/02:53

Visual · t36_fundamentals_lab

Lab: DevSecOps fundamentals pack. $DEVSEC_LAB only. Original Cyberlium.

Fundamentals pack merges pillars to shift-left to stages — paperwork before pipeline security module.

Lessons 2-1–2-3 named DevSecOps pillars, shift left, and pipeline stages. This lab merges three cards into one $DEVSEC_LAB fundamentals artifact with M1 ethics cross-reference. No stranger-org scans or third-party URL work — DevSecOps fundamentals paperwork only. Next: Quiz — DevSecOps Fundamentals.

1. Lab contract: DevSecOps fundamentals pack

Create $HOME/cyberlium-lab/t36-m02-l04-fundamentals-lab.txt merging pillars, shift-left, and pipeline stages sections with $DEVSEC_LAB fictional workflow and M1 ethics cross-reference.

Optional: one-line note which fictional lab app URL you used — lab labels only.

Command guide

Try these commands — Lab contract: DevSecOps fundamentals pack

═══ DOCKER & CONTAINER AUDIT ═══

Check container running state and port bindings

Command — copy this

docker ps --format "table {{.ID}}	{{.Image}}	{{.Status}}	{{.Ports}}" 2>/dev/null || echo "docker ps"

Inspect container for elevated capabilities and root user

Command — copy this

docker inspect --format '{{json .HostConfig.Privileged}}' <container_id> 2>/dev/null || true

Run security vulnerability scan on container image using Trivy

Command — copy this

trivy image --severity HIGH,CRITICAL alpine:3.19 2>/dev/null || echo "trivy image alpine:3.19"

═══ KUBERNETES RBAC AUDIT ═══ Check current permissions in namespace

Command — copy this

kubectl auth can-i --list 2>/dev/null || echo "kubectl auth can-i"

Primary tools to practice this lesson: grep, python3. Reference sites: NIST SSDF (https://csrc.nist.gov/Projects/ssdf); CISA Secure by Design (https://www.cisa.gov/securebydesign); GitHub Actions security (https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Cross-check refusal boundaries

Grep pack for stranger-org scan refs, third-party URL DAST, live credential dumps — redact or delete. Pack stays documentary literacy.

Update pack if you rename lab repos — note new fictional labels.

3. Lock the proof

chmod 600 on the pack. Quiz next — then GitHub Actions Hygiene.

DevSecOps fundamentals literacy feeds pipeline security lessons in M3.

4. What you ship: DevSecOps fundamentals pack for $DEVSEC_LAB

Merged pillars, shift-left, stages sections. $DEVSEC_LAB named. NO stranger pipelines. chmod 600.

5. What you record before the next lesson

Date. Fundamentals pack path. $DEVSEC_LAB named. File t36-m02-l04-fundamentals-lab.txt chmod 600.

6. Wrong vs right: stranger orgs vs YOUR repos

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong: Include stranger-org scan steps in pack. Skip shift-left section.
Right: Write YOUR DevSecOps fundamentals pack for $DEVSEC_LAB. chmod 600. Next: Quiz — DevSecOps Fundamentals.

Hands-on Exercise