
Raunak Parmar - Attacking & Securing CI/CD Pipeline Certification (ASCPC) by White Knight Labs - DCTLV2025
Name of Training: Attacking & Securing CI/CD Pipeline Certification (ASCPC) by White Knight LabsTrainer(s): Raunak ParmarDates: August 11-12, 2025Time: 8:00 am to 5:00 pm PT Venue: Las Vegas Convention CenterCost: $2,000 Course Description: The Attacking and Securing CI/CD course is an on-demand and self-paced program designed to equip participants with the knowledge and skills to identify vulnerabilities and implement security measures within Continuous Integration and Continuous Deployment (CI/CD) pipelines. This course combines theoretical knowledge with practical, hands-on labs that simulate real-world scenarios in a CI/CD environment. Course Outline: Fundamentals CI/CD Overview GitHub Actions Security GitHub Actions Overview Hijacking Techniques Artifact Handling: Secret Leakage via Uploads Artifact Poisoning Advanced Exploitation: Race Conditions Bypassing Protected Branches OIDC Misconfigurations Dependabot Automerge Vulnerabilities GitHub Actions Securit