Resources and Education

Educational resources, training, and technical guidance for securing the software delivery lifecycle, including AI development, software supply chain security, and DevSecOps.

Get Informed

Securing the software delivery lifecycle requires more than tools and technology. It also requires knowledge, practical skills, and an understanding of evolving cybersecurity threats, standards, and best practices. As software development increasingly incorporates open-source dependencies, automated CI/CD pipelines, and AI-assisted development, continuous education has become an essential part of building and maintaining secure software.

The CI/CD Cybersecurity Guide is designed to help developers, DevOps teams, platform engineers, security professionals, and open-source maintainers identify practical, open-source solutions for securing their software delivery processes. This Resources and Education chapter extends that mission by connecting practitioners with training, technical guidance, industry standards, and community resources that support secure software development.

Accessible Cybersecurity Education

This chapter highlights educational resources from the Open Source Security Foundation (OpenSSF), the Linux Foundation, and other trusted organizations, with an emphasis on free and accessible training.

Our goal is simple: Make cybersecurity education and practical resources accessible to every software team, regardless of its size, budget, or security expertise.

By combining education with the Guide’s open-source tooling recommendations, we hope to help teams move beyond understanding security requirements to implementing them throughout the software delivery lifecycle.

This chapter includes:


Free Linux Foundation Courses

Educational courses for securing the software delivery lifecycle, including AI development, software supply chain security, and DevSecOps from the OpenSSF and Linux Foundation.

NIST Resources

NIST research, guides and documents for securing the software delivery lifecycle, including AI development, software supply chain security, and DevSecOps.

EU Cyber Resilience Act Resources

Official European Union Cyber Resilience Act resources covering secure software development, software supply chain security, DevSecOps, vulnerability management, and regulatory compliance.