Hardening Fernwood Systems' GitHub and GitLab platform around the repository loop of eight arcs — identity and SSO, permissions, branch protection, secrets scanning, commit integrity, automation tokens, third-party apps, and audit and response — worked in turn around the billing-api repository and its protected main branch; on one side what was found, from credentials with no login and an accepted force-push to main to a departed user's never-expiring tokens and a leaked key revoked seven hours late; on the other what is enforced now, from SAML SSO with SCIM and push protection to verified signatures, short-lived OIDC credentials and audit logs streamed to the SIEM.

CY-MID-110Mid Level · Source Control Security

Source Control Platform Security — The Repository Loop

A hands-on mid-level course that hardens the source control platform itself - org and repo access, branch rules, secret scanning, commit signing, tokens, apps, and audit - through the repository loop's eight arcs: Identity & SSO, Permissions, Branch Protection, Secrets Scanning, Commit Integrity, Automation Tokens, Third-Party Apps, and Audit & Response, with realistic gh/glab CLI, git config, and API/webhook work at every arc. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Enforce SSO and MFA org-wide, and close outside-collaborator and dormant-account gaps.
Grant org, team, and repo access by least privilege, with a low base permission and reviewed admin roles.
Enforce branch protection - reviews, status checks, no force-push, org-wide rulesets, and signed commits.
Replace long-lived tokens with scoped, short-lived, identity-based credentials, and catch a leaked secret or account takeover the same day.

Price:৳8,000