Integrate PQC into CI/CD Pipelines
For organizations practicing DevSecOps, PQC migration must be integrated into the development pipeline rather than handled as a separate initiative. This course covers integrating cryptographic migration into CI/CD: scanning for cryptographic dependencies, testing post-quantum implementations in staging, managing certificates and keys for dual-stack deployments, and handling container and Kubernetes considerations.
Who Should Take This Course
DevSecOps engineers, platform engineers, SREs, and security engineers integrating cryptographic migration into development pipelines.
What You Will Learn
This course provides hands-on technical depth in a specific dimension of PQC migration, aligned with the PQC Migration Framework. You will gain practical, applicable skills you can use immediately in migration work.
Course Outline
Module 1 — Cryptographic Dependency Scanning in CI/CD
Integrating cryptographic discovery into the development pipeline. Scanning code and dependencies for cryptographic usage. Automated CBOM generation in CI/CD. Failing builds on policy violations. Tracking cryptographic debt as code.
Module 2 — Testing PQC in the Pipeline
Post-quantum testing in staging environments. Automated testing for hybrid implementations. Performance regression testing for cryptographic changes. Interoperability testing in CI/CD. Negative testing for downgrade prevention.
Module 3 — Key and Certificate Management for Dual-Stack
Managing certificates and keys for dual-algorithm deployments. Secrets management for PQC. Automating certificate provisioning for dual-stack. Key rotation in agile pipelines.
Module 4 — Container and Kubernetes Considerations
PQC in containerized environments. Service mesh cryptographic migration. mTLS with post-quantum algorithms in Kubernetes. Image signing with post-quantum signatures. Managing cryptographic configuration across container orchestration.
Prerequisites
A working understanding of PQC fundamentals is recommended. Consider Post-Quantum Foundation or PQCS certification for background. Some courses assume security engineering experience.
Certificate of Completion
Upon completion, you will receive a Quantum Academy certificate of completion. CPE credits earned may apply toward Quantum Academy certification maintenance.