Is the training Qualiopi certified?

Yes, Learni is a Qualiopi-certified training organization. This certification guarantees the quality of our courses and enables funding through OPCO and other mechanisms.

How can I fund my training?

Our courses are eligible for OPCO funding. Learni supports you through the funding process. A personalized quote is available upon request.

What are the prerequisites for this training?

The prerequisites for the Training Trivy - Securing Containers and CI/CD Pipelines training are: Mastery of Docker, Kubernetes, Git, CI/CD pipelines and basics of software vulnerabilities. A preliminary interview validates your eligibility.

Is the training available in person?

Yes, the Training Trivy - Securing Containers and CI/CD Pipelines training is available in in-person. The format can be adapted to your needs (inter, intra, custom).

Training Trivy - Securing Containers and CI/CD P... | Learni

The story of Learni

Founded by passionate advocates of learning and innovation, Learni set out to make professional training accessible to everyone, everywhere in the world. Our team works in the largest cities such as Paris, Lyon, Marseille, and internationally, to support talents and organizations in their skills development.

Configure your training

Response within 24hNo commitment100% free

7 spots remaining for the next session

FormatParticipantsDateDetails

Which format do you prefer?

Methods, approaches, and teaching resources

The Training Trivy - Securing Containers and CI/CD Pipelines training is delivered in-person or remotely (blended-learning, e-learning, virtual classroom, remote in-person). At Learni, a Qualiopi-certified training organization, each program is designed to maximize skills acquisition, regardless of the training mode chosen.

The trainer alternates between demonstrative, interrogative, and active methods (through practical exercises and/or real-world scenarios). This pedagogical approach ensures concrete and directly applicable learning in the workplace.

Teaching resources provided

To ensure the quality of the Training Trivy - Securing Containers and CI/CD Pipelines training, Learni provides the following teaching resources:

Mac or PC computers, high-speed fiber internet, whiteboard or flipchart, video projector or interactive touchscreen (for remote sessions)
Training environments installed on workstations or accessible online
Course materials, practical exercises, and supplementary resources
Post-training access to materials and teaching resources

For in-house training at a location external to Learni, the client ensures and commits to having all necessary teaching materials (IT equipment, internet connection...) for the proper conduct of the training action in accordance with the prerequisites indicated in the communicated training program.

* contact us for remote feasibility** ratio varies depending on the training followed

Assessment methods

The assessment of skills acquired during the Training Trivy - Securing Containers and CI/CD Pipelines training is carried out through:

During training: case studies, practical exercises, and professional scenarios
At the end of training: self-assessment questionnaire and skills evaluation by the trainer
After training: training completion certificate detailing acquired skills

Training accessibility

Learni is committed to the accessibility of its professional training programs. All our training programs are accessible to people with disabilities. Our teams are available to adapt teaching methods to your specific needs. Do not hesitate to contact us for any accommodation request.

Training objectives

Master Trivy for vulnerability scanning in professional environments

Configure Trivy in enterprise CI/CD pipelines for automated security

Analyze Trivy reports and implement effective remediations

Integrate Trivy with Kubernetes and IaC for secure deployments

Optimize Trivy performance and manage certifying scan policies

Develop DevSecOps skills with Trivy for scalable projects

Deploy Trivy in production with enterprise continuous monitoring

Training program

Module 1Advanced Trivy Fundamentals: Container Scan Configuration (CLI, Policies, Reports)

Dive into advanced Trivy installation on Linux servers and GitHub Actions integration, configure custom scans for multi-architecture Docker images, analyze OS and language vulnerabilities with custom critical thresholds, perform exercises on real enterprise cases like auditing public images, produce actionable detailed reports for security teams, while learning best practices to accelerate your DevSecOps workflows from day one.

Module 2Trivy in CI/CD Pipelines: GitLab/Jenkins Integration (Automations, SBOM, Compliance)

Integrate Trivy directly into CI/CD pipelines via Jenkins and GitLab plugins, automate pre-push and post-build scans on private repositories, generate CycloneDX SBOM for full traceability, test automated remediations on critical vulnerabilities, apply to the enterprise containerized red thread project, measure performance impact with Trivy metrics, and deploy blocking security gates to prevent risky deployments, boosting productivity and regulatory compliance.

Module 3Trivy for Kubernetes and IaC: Cluster Scans (Helm, Terraform, Kustomize)

Scan Kubernetes clusters with Trivy Operator for runtime detection, integrate IaC scans for Terraform and Helm charts against misconfigurations, analyze exposed secrets and weak RBAC via custom policies, practice on Minikube mini-clusters replicating prod environments, remediate vulnerabilities live with auto-patches, document findings in Jira-like tools, and optimize scans for large volumes without downtime, transforming your deployments into secure fortresses ready for certifying audits.

Module 4Trivy Production Optimization: Monitoring, Alerts, Enterprise Scalability (FSaC, Dashboards)

Deploy Trivy in server mode for high-scale distributed scans, configure Slack/Teams alerts on critical CVEs, integrate Grafana dashboards for vulnerability trend visualization, test FSaC against supply-chain attacks, scale on AWS EKS with intelligent caching, finalize the red thread project with a complete secure pipeline audit, and prepare for skills certification via advanced MCQ, ensuring immediate ROI through risk reduction and accelerated time-to-market.