CI/CD Security Scanning and Quality Gates
Add security scanning to your CI/CD pipeline, configure branch protection rules, and enforce quality gates that prevent merging broken or insecure code.
Lab Overview
🛠Lab from the Platform Engineering Bootcamp. Used in Week 3. Bootcamp landing page: https://academy.tekanaid.com/bootcamps/platform-engineering-bootcamp Parent course(s):
- Week 3: Git, GitHub & CI/CD Fundamentals (slug: git-github-cicd-fundamentals)
In this lab you add security scanning and a required quality gate to the real CI pipeline you built for your TaskFlow fork. You audit the real frontend's dependencies with npm audit, automate that scan with a scheduled GitHub Actions workflow and Dependabot, then require a quality gate check on every pull request with branch protection, proving it blocks a broken build before you fix it and merge.
You'll learn to:
- Audit real npm dependencies and separate production risk from dev-tooling noise
- Automate dependency scanning with a scheduled GitHub Actions workflow and Dependabot
- Require a quality gate check via GitHub branch protection on your own fork
- Prove the gate works by pushing a broken build, watching it get blocked, then fixing and merging it
Builds on Your First GitHub Actions CI Pipeline and completes your automated quality pipeline.
What You'll Learn
Run npm audit against real production and dev dependencies and interpret the results
Automate dependency security scanning with a scheduled GitHub Actions workflow and Dependabot
Configure GitHub branch protection on a real fork to require a passing quality gate check
Validate quality gate enforcement end to end by breaking, blocking, fixing, and merging a pull request
Prerequisites
github-actions-first-pipeline
cicd-code-quality
Technologies Covered
Choose your plan
Simple, Transparent Pricing
Unlock full access to TeKanAid courses, labs, and bootcamps
Just exploring? Start free below. Want the full experience? Try Premium free for 7 days (card required, $0 today).
Pro
All courses, with lab scripts to run on your own machine
Renews automatically. Cancel anytime.
Final price verified at checkout.
- Full access to all courses
- Lab scripts to download and run on your own machine (hosted labs not included)
- Progress tracking
- Certificate of completion
- Community access
- Bootcamp participation
- New content access
Premium
Full access, including unlimited hosted labs
Renews automatically. Cancel anytime.
Final price verified at checkout.
- Everything in Pro
- Unlimited hands-on labs, fully hosted on TeKanAid Academy (nothing to set up)
- Lab AI Assistant
- Accelerator bootcamps with live office hours
- Priority support
Prefer a single course?
Purchase individual courses for a one-time fee of $79. Full access to course content, quizzes, certificates, and community features, lab access is not included.
Browse CoursesJust exploring? Start free, no account needed
Three free ways to start. All bridge into the paid Premium catalog when you're ready.
Not ready to commit? The crash course is email-only. No academy account required.
Ready to Get Started?
Start this hands-on lab and build real-world Platform Engineering skills
Get Access Now