Source Control Platform Security — The Repository Loop

A hands-on mid-level course that hardens the source control platform itself - org and repo access, branch rules, secret scanning, commit signing, tokens, apps, and audit - through the repository loop's eight arcs: Identity & SSO, Permissions, Branch Protection, Secrets Scanning, Commit Integrity, Automation Tokens, Third-Party Apps, and Audit & Response, with realistic gh/glab CLI, git config, and API/webhook work at every arc. Four hands-on activities in every lesson.

What you'll learn

• Enforce SSO and MFA org-wide, and close outside-collaborator and dormant-account gaps.
• Grant org, team, and repo access by least privilege, with a low base permission and reviewed admin roles.
• Enforce branch protection - reviews, status checks, no force-push, org-wide rulesets, and signed commits.
• Replace long-lived tokens with scoped, short-lived, identity-based credentials, and catch a leaked secret or account takeover the same day.

Sign in to enrol — you can pay by bKash or Nagad, or apply a promo code.