This 5-day immersive training program is designed to equip professionals with the practical skills required to implement DevSecOps pipelines using open source and cost-effective tools. The course focuses on secure CI/CD automation, infrastructure-as-code, testing strategies, issue tracking integration, and real-time reporting.
Special emphasis is placed on mobile automation testing using Appium in the latter part of the course—enabling participants to integrate mobile QA into modern DevSecOps workflows. Participants will engage in hands-on labs throughout the program to build end-to-end automation pipelines for both web and mobile applications.
Day 1 – Foundations of DevSecOps & Secure CI/CD Pipelines
1. Introduction to DevSecOps (1 hr)
o DevOps vs DevSecOps, shift-left mindset, key principles
2. CI/CD Pipeline Essentials (2 hrs)
o Pipeline stages and workflows
o Tools: Jenkins (priority), GitLab CI, Redmine CI
3. Embedding Security & Quality Gates (2 hrs)
o Secure coding practices
o SonarQube (open-source), Snyk (free-tier), OWASP Top 10
4. Hands-On: Secure Pipeline Setup (2 hrs)
o CI/CD pipeline using Jenkins
o Security scans with SonarQube or Snyk
o Ansible, Docker, VMware integration
Day 2 – Orchestration, Infra Automation & Web/API Testing
1. Jenkins Pipeline & Test Orchestration (2.5 hrs)
o Jenkinsfiles, cron/triggered automation
o Ansible, Python scripting, Docker integration
2. Infrastructure Automation (2 hrs)
o Declarative provisioning using Terraform and Ansible
o Secrets management and teardown
3. Functional & Performance Testing (Web/API) (2.5 hrs)
o Test case formats (YAML/JSON)
o JMeter, Selenium, REST Assured for automation
Day 3 – Issue Integration, Reporting & Dashboards
1. Test Execution Automation Lab (3 hrs)
o Extended Jenkins pipeline automation
o Logging and result tracking
2. Issue Tracker Integration (2 hrs)
o Tools: Redmine, MantisBT, GitLab CE
o Auto issue creation from test failures
3. Reporting & Notifications (2 hrs)
o Alerts via Gmail, Google Chat API, SMTP
o Simple dashboards for QA/Dev/NOC
Day 4 – Appium Fundamentals for Mobile Automation
1. Introduction to Appium & Architecture (1 hr)
o Native, hybrid, web app testing use cases
o Appium vs Selenium for mobile
2. Setup & Configuration (2 hrs)
o Appium installation and dependencies
o Emulator/device setup
o Appium Inspector and driver configuration
3. Writing Test Scripts (2 hrs)
o Python or Java test scripts
o Element location strategies (UIAutomator, XPath, IDs)
o Assertions and validations
4. Appium + Jenkins Integration (2 hrs)
o Trigger Appium tests via Jenkins
o Log collection and result automation
Day 5 – Advanced Appium & Full Mobile Automation Flow
1. Cross-Platform & Multi-Device Testing (2 hrs)
o Android vs iOS strategies
o Emulator vs real device execution
o Platform-specific locators
2. Parallel Test Execution & Scaling (1.5 hrs)
o Setup for parallel testing
o Emulator/device farm configuration (local/cloud)
3. Reporting & Debugging Mobile Tests (1.5 hrs)
o Capturing logs, screenshots, session traces
o Debugging failed runs
4. End-to-End Mobile Testing Pipeline Lab (2 hrs)
o Full mobile pipeline setup using Appium
o Results dashboarding and alert integration