Rigorous trainer selection
Each trainer is validated on three criteria: hands-on field expertise, proven pedagogy and alignment with your industry.
- Triple validation: technical, pedagogical, sectoral.
- Minimum rating 4.8/5 over the last 12 sessions.
Learning objectives
- Master the SLSA framework levels to audit and secure enterprise software supply chains
- Implement advanced SLSA policies in professional certifying CI/CD pipelines
- Develop skills in artifact verification with SLSA to prevent supply chain attacks
- Design SLSA-compliant builds integrating open-source tools and secure metadata
- Optimize DevSecOps processes with the SLSA framework for rapid enterprise compliance
- Deploy SLSA attestations in hybrid cloud environments and Kubernetes
The Learni story
Founded by passionate learning and innovation experts, Learni's mission is to make professional training accessible to everyone, anywhere in the world. Our team operates in major hubs — London, New York, Boston — and internationally, to support talents and organizations in upskilling.
Don't let this gap widen
Why this program matters
Without this upskilling, your team accumulates a technological gap that translates directly into productivity loss.
Organizations that don't train their talents on key topics see their competitiveness drop.
Every quarter without training is a gap widening with competitors who invest.
The cost of inaction quickly exceeds that of well-targeted training.
Program
Module 1SLSA Framework Fundamentals: Principles and Security Levels (SLSA 1-4, Audit Tools, Compliance Matrices)
Discover the pillars of the SLSA framework through real-world supply chain attack cases like SolarWinds, analyze SLSA maturity levels with practical exercises on GitHub Actions, configure your first automated audits, generate initial compliance reports, and integrate best practices for professional security from day one.
Module 2SLSA Framework Level 2 Implementation: Securing Sources and Builds (Git Signing, in-toto, Rekor)
Dive into practical application of SLSA framework level 2, sign Git repositories with GPG keys, implement in-toto attestations to trace builds, test secure Jenkins pipelines against tampering, generate automated verifications with Rekor, and produce compliant deliverables to validate your enterprise DevSecOps skills.
Module 3SLSA Framework Level 3: Hermetic CI/CD Pipelines (Docker SBOM, Cosign, Sigstore)
Advance to SLSA framework level 3, generate SBOMs via Syft for your Docker images, sign containers with Cosign and Sigstore, simulate attacks on vulnerable pipelines, automate security gates in GitLab CI, analyze SLSA metadata for full traceability, and deploy production-ready certifying workflows.
Module 4Advanced SLSA Framework Level 4: Enterprise Compliance and Cloud (Kubernetes, OPA, Policy-as-Code)
Achieve excellence with SLSA framework level 4, integrate OPA policies to validate SLSA attestations in Kubernetes, configure policy-as-code deployments on AWS EKS, test advanced intrusion scenarios, optimize SLSA verification performance at scale, generate compliant monitoring dashboards, and prepare certifying audits for your organization.
Module 5SLSA Framework Deployment and Optimization: Real Cases and Certification (Enterprise Projects, Troubleshooting)
Finalize your mastery of the SLSA framework with an enterprise capstone project, deploy a fully SLSA-compliant pipeline on a simulated Kubernetes cluster, resolve real supply chain incidents inspired by Log4Shell, optimize costs and performance, produce a certifying portfolio with SLSA attestations, and benefit from personalized coaching for immediate enterprise integration.
Evaluation method
- Daily interactive quizzes on SLSA framework levels
- Final project: SLSA level 3 compliant CI/CD pipeline
- Qualiopi certification and verifiable SLSA badge
Learning method
- Hands-on projects on real CI/CD pipelines
- Case studies of famous supply chain attacks
- Hands-on exercises with Sigstore and in-toto
- Live remote mentored support
Methods, materials and delivery
The Training SLSA Framework - Securing Advanced CI/CD Pipelines program is delivered onsite or remote (blended-learning, e-learning, virtual classroom, remote presence). At Learni, an industry-certified training organization, every program is built to maximize skills acquisition regardless of the chosen format.
The trainer alternates between demonstrative, interrogative and active methods (through hands-on labs and/or scenarios). This pedagogical approach guarantees concrete learning that's immediately applicable at work.
Equipment required
For the smooth delivery of the Training SLSA Framework - Securing Advanced CI/CD Pipelines program, the following equipment is required:
- Mac or PC computers, high-speed fiber internet, whiteboard or flipchart, projector or interactive touch screen (for remote sessions)
- Training environments installed on workstations or accessible online
- Course materials, hands-on exercises and complementary resources
- Post-training access to materials and educational resources
For intra-company training on a site outside Learni, the client commits to providing all required teaching materials (computers, internet, etc.) for the smooth delivery of the program in line with the prerequisites in the communicated program.
* contact us for remote delivery feasibility** ratio varies depending on the program
Skills assessment methods
Assessment of skills acquired during the Training SLSA Framework - Securing Advanced CI/CD Pipelines program is performed through:
- During training: case studies, hands-on labs and professional scenarios
- End of training: self-assessment questionnaire and skills evaluation by the trainer
- After training: completion certificate detailing acquired skills
Program accessibility
Learni is committed to making its programs accessible. All our programs are accessible to people with disabilities. Our teams are available to adapt the pedagogical methods to your specific needs. Please contact us for any adjustment request.
Enrollment terms and lead times
Learni programs are available inter-company and intra-company, onsite or remote. Enrollments are possible up to 48 business hours before the program starts. Our programs are eligible for corporate funding paths. Contact us to discuss your training project and funding options.
Verified reviews
What our learners
★★★★★
« cool, j'ai appris des trucs »
★★★★★
« j'etais perdu au debut mais Ramy Saharaoui m'a pas laché, il a pris le temps. merci vraiment »
★★★★★
« la formation dev etait intense mais grave bien. merci Anthony Khelil »
★★★★★
« 😊👍 »
★★★★★
« bien 👍 »
★★★★★
« Allan Busi t'es au top, continue comme ça. formation géniale »
★★★★★
« cool, j'ai appris des trucs »
★★★★★
« j'etais perdu au debut mais Ramy Saharaoui m'a pas laché, il a pris le temps. merci vraiment »
★★★★★
« la formation dev etait intense mais grave bien. merci Anthony Khelil »
★★★★★
« 😊👍 »
★★★★★
« bien 👍 »
★★★★★
« Allan Busi t'es au top, continue comme ça. formation géniale »
★★★★★
« cool, j'ai appris des trucs »
★★★★★
« j'etais perdu au debut mais Ramy Saharaoui m'a pas laché, il a pris le temps. merci vraiment »
★★★★★
« la formation dev etait intense mais grave bien. merci Anthony Khelil »
★★★★★
« 😊👍 »
★★★★★
« bien 👍 »
★★★★★
« Allan Busi t'es au top, continue comme ça. formation géniale »
Our method
Training quality, guaranteed at every step
Before, during, after: we frame the brief, introduce the trainer, tailor the content and measure impact. You stay in control from kickoff to wrap-up.
You meet the trainer beforehand
30-minute video call between you and the selected trainer to validate the fit, adjust content and clear any final doubts.
- Live briefing on goals and team context.
- Veto right — we swap the trainer for free if needed.
Content tailored to your context
No recycled slides. The syllabus is reworked from your real cases: tools, constraints, vocabulary, ongoing projects.
- Hands-on cases drawn from your stack and projects.
- Program co-written then validated by your team.
Continuous quality follow-up
Live evaluations, 30/90/180-day check-ins and a consolidation plan. If the impact misses the mark, we rework it.
- NPS, knowledge quizzes and skills self-assessment.
- Satisfaction guarantee: fully satisfied or free rework.
A simple promise: you don't pay to discover the trainer on day one. Everything is validated upfront, by you.
Frameworks & Libraries
More programs in Frameworks & Libraries.
Frameworks & LibrariesIndustry-certifiedTraining OT/ICS Security 2026 - Securing Critical Industrial Systems
$6,600Net · employer-funded
Frameworks & LibrariesIndustry-certifiedTraining SLSA Framework - Securing Advanced CI/CD Pipelines
$6,600Net · employer-funded
Frameworks & LibrariesIndustry-certifiedTraining WireGuard 2026 - Deploy Secure VPNs Quickly
$6,600Net · employer-funded
Frameworks & Bibliothèques
More programs in Frameworks & Bibliothèques.
Frameworks & BibliothèquesIndustry-certifiedAdvanced Flask Training - Develop Scalable and Secure APIs
$5,040Net · employer-funded
Frameworks & BibliothèquesIndustry-certifiedAdvanced Laravel Training - Build Scalable and Secure Apps
$3,780Net · employer-funded
Frameworks & BibliothèquesIndustry-certifiedAngular Expert Training - Scalable Architectures & Performance
$3,780Net · employer-funded
Frameworks & BibliothèquesIndustry-certifiedApprendre Svelte : Créer des Applications Web Modernes et Performantes
$2,640Net · employer-funded
Frameworks & BibliothèquesIndustry-certifiedApprendre à développer des APIs REST avec NancyFX : de l’installation à la mise en production
$3,960Net · employer-funded
Frameworks & BibliothèquesIndustry-certifiedApprendre à maîtriser AutoMapper en C# : de l’initiation à la pratique avancée
$2,640Net · employer-funded
Développement Web
More programs in Développement Web.
Développement WebIndustry-certifiedAPNs Training - Expert Scaling iOS Push Notifications
$2,640Net · employer-funded
Développement WebIndustry-certifiedASP.NET Core : Maîtriser le Développement Web Moderne
$6,600Net · employer-funded
Développement WebIndustry-certifiedATDD : Maîtriser l’Acceptance Test Driven Development en équipes agiles
$3,960Net · employer-funded
Développement WebIndustry-certifiedAWS IoT Core : Maîtrisez la gestion intelligente des objets connectés
$3,960Net · employer-funded
Développement WebIndustry-certifiedAWS Security Hub : Maîtriser la sécurité cloud avec AWS
$2,640Net · employer-funded
Développement WebIndustry-certifiedAccélérer vos modèles d’Intelligence Artificielle avec OpenVINO : de l’optimisation à la mise en production
$3,960Net · employer-funded
Développement Backend
More programs in Développement Backend.
Développement BackendIndustry-certifiedAdvanced Django Training - Master APIs and Scalability
$1,260Net · employer-funded
Développement BackendIndustry-certifiedAdvanced Express.js Training - Scalable and Secure APIs
$6,300Net · employer-funded
Développement BackendIndustry-certifiedAdvanced FastAPI Training - Build Scalable Ultra-High-Performance APIs
$5,040Net · employer-funded
Développement BackendIndustry-certifiedAdvanced Flask Training - Develop Scalable and Secure APIs
$5,040Net · employer-funded
Développement BackendIndustry-certifiedAdvanced Flask Training - Develop Scalable and Secure APIs
$3,780Net · employer-funded
Développement BackendIndustry-certifiedAdvanced Go Training - Master Concurrency and Microservices
$6,300Net · employer-funded
Your professional training, anywhere
Let's build
your next
program.
30 minutes with a learning advisor. No commitment. No sales pitch dressed up as a demo.
Reply within 24 h · Industry-certified · Corporate funding