Is the training Qualiopi certified?

Yes, Learni is a Qualiopi-certified training organization. This certification guarantees the quality of our courses and enables funding through OPCO and other mechanisms.

How can I fund my training?

Our courses are eligible for OPCO funding. Learni supports you through the funding process. A personalized quote is available upon request.

What are the prerequisites for this training?

The prerequisites for the Formation SLSA Framework - Sécuriser pipelines CI/CD pros training are: Maîtrise CI/CD (GitHub Actions, Jenkins), Docker, bases sécurité supply chain. A preliminary interview validates your eligibility.

Is the training available in person?

Yes, the Formation SLSA Framework - Sécuriser pipelines CI/CD pros training is available in distanciel. The format can be adapted to your needs (inter, intra, custom).

Formation SLSA Framework - Sécuriser pipelines C... | Learni

The story of Learni

Founded by passionate advocates of learning and innovation, Learni set out to make professional training accessible to everyone, everywhere in the world. Our team works in the largest cities such as Paris, Lyon, Marseille, and internationally, to support talents and organizations in their skills development.

Configure your training

Response within 24hNo commitment100% free

8 spots remaining for the next session

FormatParticipantsDateDetails

Which format do you prefer?

Methods, approaches, and teaching resources

The Formation SLSA Framework - Sécuriser pipelines CI/CD pros training is delivered in-person or remotely (blended-learning, e-learning, virtual classroom, remote in-person). At Learni, a Qualiopi-certified training organization, each program is designed to maximize skills acquisition, regardless of the training mode chosen.

The trainer alternates between demonstrative, interrogative, and active methods (through practical exercises and/or real-world scenarios). This pedagogical approach ensures concrete and directly applicable learning in the workplace.

Teaching resources provided

To ensure the quality of the Formation SLSA Framework - Sécuriser pipelines CI/CD pros training, Learni provides the following teaching resources:

Mac or PC computers, high-speed fiber internet, whiteboard or flipchart, video projector or interactive touchscreen (for remote sessions)
Training environments installed on workstations or accessible online
Course materials, practical exercises, and supplementary resources
Post-training access to materials and teaching resources

For in-house training at a location external to Learni, the client ensures and commits to having all necessary teaching materials (IT equipment, internet connection...) for the proper conduct of the training action in accordance with the prerequisites indicated in the communicated training program.

* contact us for remote feasibility** ratio varies depending on the training followed

Assessment methods

The assessment of skills acquired during the Formation SLSA Framework - Sécuriser pipelines CI/CD pros training is carried out through:

During training: case studies, practical exercises, and professional scenarios
At the end of training: self-assessment questionnaire and skills evaluation by the trainer
After training: training completion certificate detailing acquired skills

Training accessibility

Learni is committed to the accessibility of its professional training programs. All our training programs are accessible to people with disabilities. Our teams are available to adapt teaching methods to your specific needs. Do not hesitate to contact us for any accommodation request.

Training objectives

Maîtriser les niveaux SLSA pour pipelines CI/CD professionnels sécurisés

Implémenter contrôles SLSA dans environnements d'entreprise certifiants

Développer compétences audit SLSA sur artefacts logiciels réels

Concevoir workflows SLSA conformes avec outils open-source

Optimiser chaînes approvisionnement contre attaques supply chain

Déployer vérifications SLSA automatisées en production

Intégrer SLSA framework dans stratégies sécurité d'entreprise

Training program

Module 1Fondamentaux SLSA : principes et niveaux de maturité (SLSA 1-4, outils vérification)

Plongez dans les bases du SLSA framework via ateliers interactifs, analysez les 4 niveaux de sécurité pour pipelines CI/CD, configurez outils comme slsa-verifier et GitHub Actions sécurisées, réalisez audits manuels sur projets open-source, produisez rapports de conformité initiaux, appliquez cas concrets d'attaques SolarWinds pour ancrer compétences professionnelles durables.

Module 2SLSA niveau 2 : implémenter contrôles source et build (Git integrity, provenance)

Passez à l'action avec exercices pratiques sur SLSA niveau 2, intégrez tampons Git et signatures cryptographiques dans vos repos, déployez builders reproductibles via Bazel ou Nix, testez génération metadata SLSA sur artefacts Docker, simulez attaques injection code pour valider défenses, générez livrables conformes prêts pour audits d'entreprise, boostez efficacité pipelines dès demain.

Module 3SLSA niveau 3 : automatiser dépendances et vérifications (Rekor, Cosign)

Montez en puissance sur SLSA niveau 3 avec labs intensifs, automatisez scans dépendances via SLSA provenance et tools comme Sigstore Rekor, intégrez Cosign pour signatures conteneurs, analysez chaînes complexes en multi-étapes CI/CD, résolvez cas réels breaches Log4j, produisez dashboards conformité pour équipes DevSecOps, transformez vos pratiques en forteresse sécurisée.

Module 4SLSA avancé : audits et conformité niveau 4 (SLSA verifier, CI/CD enterprise)

Atteignez expertise SLSA niveau 4 par simulations avancées, déployez slsa-verifier sur pipelines Jenkins ou GitLab, auditez workflows end-to-end avec preuves cryptographiques, intégrez SLSA dans stratégies zero-trust d'entreprise, traitez incidents supply chain simulés, élaborez politiques certifiantes pour compliance réglementaire, livrez portfolio projets démontrant ROI immédiat en sécurité.

Module 5Déploiement SLSA : optimisation et cas d'entreprise (intégration prod, monitoring)

Clôturez en appliquant SLSA framework à votre projet fil rouge, optimisez performances vérifications sans freiner déploiements, intégrez monitoring continu avec Prometheus et alertes SLSA, partagez retours d'expérience en groupe, finalisez plans d'action personnalisés pour entreprise, recevez certificats compétences validées, repartez prêt à sécuriser supply chains à échelle industrielle.