Is the training Qualiopi certified?

Yes, Learni is a Qualiopi-certified training organization. This certification guarantees the quality of our courses and enables funding through OPCO and other mechanisms.

What is the duration of the Formation Trivy - Sécuriser pipelines CI/CD avancés training?

The Formation Trivy - Sécuriser pipelines CI/CD avancés training takes place over 21 heures. The program is structured in progressive modules for optimal skill development.

How can I fund my training?

Our courses are eligible for OPCO funding. Learni supports you through the funding process. A personalized quote is available upon request.

What are the prerequisites for this training?

The prerequisites for the Formation Trivy - Sécuriser pipelines CI/CD avancés training are: Maîtrise Docker, Kubernetes, pipelines CI/CD et bases Linux/Git. A preliminary interview validates your eligibility.

Is the training available in person?

Yes, the Formation Trivy - Sécuriser pipelines CI/CD avancés training is available in présentiel. The format can be adapted to your needs (inter, intra, custom).

Formation Trivy - Sécuriser pipelines CI/CD avancés | Learni

The story of Learni

Founded by passionate advocates of learning and innovation, Learni set out to make professional training accessible to everyone, everywhere in the world. Our team works in the largest cities such as Paris, Lyon, Marseille, and internationally, to support talents and organizations in their skills development.

Configure your training

Response within 24hNo commitment100% free

9 spots remaining for the next session

FormatParticipantsDateDetails

Which format do you prefer?

Methods, approaches, and teaching resources

The Formation Trivy - Sécuriser pipelines CI/CD avancés training is delivered in-person or remotely (blended-learning, e-learning, virtual classroom, remote in-person). At Learni, a Qualiopi-certified training organization, each program is designed to maximize skills acquisition, regardless of the training mode chosen.

The trainer alternates between demonstrative, interrogative, and active methods (through practical exercises and/or real-world scenarios). This pedagogical approach ensures concrete and directly applicable learning in the workplace.

Teaching resources provided

To ensure the quality of the Formation Trivy - Sécuriser pipelines CI/CD avancés training, Learni provides the following teaching resources:

Mac or PC computers, high-speed fiber internet, whiteboard or flipchart, video projector or interactive touchscreen (for remote sessions)
Training environments installed on workstations or accessible online
Course materials, practical exercises, and supplementary resources
Post-training access to materials and teaching resources

For in-house training at a location external to Learni, the client ensures and commits to having all necessary teaching materials (IT equipment, internet connection...) for the proper conduct of the training action in accordance with the prerequisites indicated in the communicated training program.

* contact us for remote feasibility** ratio varies depending on the training followed

Assessment methods

The assessment of skills acquired during the Formation Trivy - Sécuriser pipelines CI/CD avancés training is carried out through:

During training: case studies, practical exercises, and professional scenarios
At the end of training: self-assessment questionnaire and skills evaluation by the trainer
After training: training completion certificate detailing acquired skills

Training accessibility

Learni is committed to the accessibility of its professional training programs. All our training programs are accessible to people with disabilities. Our teams are available to adapt teaching methods to your specific needs. Do not hesitate to contact us for any accommodation request.

Training access terms and deadlines

Training objectives

Maîtriser Trivy pour scanner vulnérabilités images conteneurs professionnelles

Configurer Trivy dans pipelines CI/CD d'entreprise certifiants

Développer compétences scanning Kubernetes et IaC avec Trivy

Optimiser rapports Trivy pour conformité sécurité réglementaire

Implémenter politiques Trivy personnalisées en environnement production

Intégrer Trivy à outils DevSecOps pour flux sécurisés

Déployer Trivy operator en clusters Kubernetes avancés

Training program

Module 1Fondamentaux Trivy : scanning avancé images et fichiers (CLI, politiques, outputs)

Installation rapide Trivy en mode standalone et containerisé, exécution scans approfondis sur images Docker vulnérables avec détection OS et langages, configuration politiques personnalisées via Rego pour bloquer failles critiques, génération rapports JSON/XML pour intégration outils, exercices pratiques sur votre registry privé, analyse cas réels breaches conteneurs, production premier script automatisé scanning avec code review formateur.

Module 2Intégration Trivy : pipelines CI/CD et Kubernetes (GitHub Actions, Jenkins, scans K8s)

Configuration Trivy dans GitHub Actions et Jenkins pour scans automatisés push/pull requests, intégration scans IaC Terraform/Helm avec Trivy, déploiement Trivy operator Kubernetes pour scans clusters en live, gestion secrets et SBOM via Trivy, ateliers pratiques pipeline end-to-end sécurisé, simulation attaque chaîne supply, optimisation performances scans parallèles, livrable pipeline CI/CD prêt production avec alertes Slack.

Module 3Optimisation Trivy : conformité, reporting et best practices (misconfig, épidémiologie)

Analyse misconfigurations Kubernetes via Trivy et KICS integration, génération SBOM SPDX/CycloneDX pour conformité SBOM mandate, customisation dashboards Grafana sur données Trivy, épidémiologie vulnérabilités tendances CVE, ateliers hardening policies multi-tenant, simulation audit SOC2/ISO27001, exercices remédiation automatisée, finalisation projet fil rouge avec déploiement cluster sécurisé, plan action post-formation entreprise.