bongoDev

Loading...

Empowering technology learners worldwide with professional online live trainings. Transform your IT career with expert-led courses.

Facebook Instagram LinkedIn Github

Company

About Us
Careers
Blog
Events

Legal

Privacy Policy
Refund Policy
Terms and Conditions

Contact us

[email protected]
01757258398 01978367094 01576641348
01757258398

Our office

Flat 5/A, Shimanto Plaza, Plot #26/D, Main Road-03, Section #11, Mirpur, Dhaka 1216

© 2026 bongoDev. All rights reserved. | ই-ট্রেড লাইসেন্স: TRADEDNCC/015304/2024

Courses Job Success

Blog Events Free Assessment Login

bongoDev | Artifact Attestations, SBOM & Software Supply-Chain Provenance - GitHub Actions CI/CD Pro

TopicGitHub Actions CI/CD Pro

01CI/CD Mental Model & GitHub Actions ArchitecturePreview
02Workflow YAML Anatomy: name, on, permissions, env, jobs & steps
03Events, Triggers, Branch/Tag Filters & Manual Runs
04Jobs, Steps, needs, Outputs & DAG Design
05Runners: GitHub-Hosted, Larger, Self-Hosted & ARC
06Shell Execution, defaults, Working Directories & Environment Files
07Contexts, Expressions, Variables & Conditional Logic
08GITHUB_TOKEN, permissions, Secrets & Repository/Environment Variables
09Dependency Setup, Toolchains & Cache Design
10Artifacts, Reports, Retention & Promotion Boundaries
11Matrix Builds, include/exclude & Cross-Platform Testing
12Concurrency, Cancellation & Deployment Serialization
13Environments, Required Reviewers, Deployment Protection & Secrets
14Reusable Workflows, workflow_call & Organization Golden Pipelines
15Custom Actions: Composite, JavaScript & Docker Actions
16Service Containers & Integration-Test Dependencies
17Pull Request Security, Forks & pull_request_target
18OIDC Federation: Short-Lived Cloud Authentication for AWS, Azure & GCP
19Build & Test Pipeline Patterns: Fast Feedback to Release Confidence
20Docker Build, Buildx, Registry Push & Image Metadata
21Security Scanning: CodeQL, Dependency Review, Secrets & Container/IaC Gates
22Artifact Attestations, SBOM & Software Supply-Chain Provenance
23Kubernetes Delivery: Manifests, Helm, Rollout Verification & Rollback
24Terraform CI/CD: fmt, validate, plan, Review, Apply & State Safety
25Release Workflows: Tags, Semantic Versions, Changelogs & GitHub Releases
26Monorepos, Path-Aware CI & Change-Based Workflows
27Workflow Security Hardening: Action Pinning, Trust & Policy
28Self-Hosted Runner Hardening, Ephemeral Scale & ARC Operations
29Performance, Cost & Pipeline Optimization
30Workflow Observability: Logs, Annotations, Summaries, gh run & API
31GitHub Actions Debugging & Troubleshooting Playbook
32Production CI/CD Reference Architecture: PR → Build → Attest → Deploy
33GitHub Actions CI/CD Pro Cheatsheet

Englishবাংলা

Knowledge Hub/GitHub Actions CI/CD Pro/Artifact Attestations, SBOM & Software Supply-Chain Provenance

GitHub Actions CI/CD Pro

Paid lesson · Advanced · 28 min read

Artifact Attestations, SBOM & Software Supply-Chain Provenance

Establish build provenance, generate/verify attestations and understand how SBOM evidence strengthens software supply-chain trust.

This lesson is locked

This lesson is part of the paid course.

View free previews

PreviousSecurity Scanning: CodeQL, Dependency Review, Secrets & Container/IaC GatesLocked NextKubernetes Delivery: Manifests, Helm, Rollout Verification & RollbackLocked

Discount price

৳ 320.00৳ 120.00Save ৳ 200.00