Continuous Delivery and Deployment: Shipping Safely, Continuously

IntermediateFree5 modules · 15 lessons · ~2 min

About this course

A platform and DevOps course in the path from a merged change to a running, trusted artefact. You will learn to design gates that block for the right reasons, use progressive delivery, canary releases, blue-green deployment and feature flags, as security controls in their own right, sign and attest artefacts at release, verify provenance through to admission control, and treat rollback and break glass overrides as designed, evidenced security controls rather than afterthoughts.

What you'll learn

The Path to Production and What a Gate Is For

From Merge to Running: The Stages Between Code and Users
Gates That Block for the Right Reasons
Gate Actions: Block, Warn, Notify, Require Approval

Progressive Delivery as a Security Control

Canary Releases: Limiting Blast Radius by Design
Blue Green Deployment and the Rollback It Buys You
Feature Flags: Decoupling Deploy From Release

Signing and Attestation at Release

What Gets Signed and Why: Artefacts, Not Just Code
Sigstore, Keyless Signing and Verifying at Admission
Supply-chain Levels for Software Artifacts (SLSA): What Each Level Actually Proves

Provenance Carried Into the Artefact

01The Path to Production and What a Gate Is For3 lessons

From Merge to Running: The Stages Between Code and Users
Gates That Block for the Right Reasons
Gate Actions: Block, Warn, Notify, Require Approval

02Progressive Delivery as a Security Control3 lessons

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

From Build Provenance to Release Provenance: Closing the Chain

Verifying Provenance at Deploy Time: Who Checks What

Safeguard Component Attestation Level (SCAL): Reading the Score Right

When the Gate and the Incident Collide

The Judgment Call: What to Do When a Gate Blocks During an Incident
Break Glass Discipline: Who Can Override, and What Gets Logged
Building a Release Runbook That Survives an Audit

Canary Releases: Limiting Blast Radius by Design

Blue Green Deployment and the Rollback It Buys You

Feature Flags: Decoupling Deploy From Release

03Signing and Attestation at Release3 lessons

What Gets Signed and Why: Artefacts, Not Just Code
Sigstore, Keyless Signing and Verifying at Admission
Supply-chain Levels for Software Artifacts (SLSA): What Each Level Actually Proves

04Provenance Carried Into the Artefact3 lessons

From Build Provenance to Release Provenance: Closing the Chain
Verifying Provenance at Deploy Time: Who Checks What
Safeguard Component Attestation Level (SCAL): Reading the Score Right

05When the Gate and the Incident Collide3 lessons

The Judgment Call: What to Do When a Gate Blocks During an Incident
Break Glass Discipline: Who Can Override, and What Gets Logged
Building a Release Runbook That Survives an Audit2 min

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.