roadmaps: add hands-on security exercises to 17 topics (#10297)

roadmaps/git-github/content/github-security@f2PG4t6iVtfIH8BVe5H7f.md

@@ -6,4 +6,5 @@ Visit the following resources to learn more:
 
 - [@official@GitHub security features](https://docs.github.com/en/code-security/getting-started/github-security-features)
 - [@official@Dependabot Quick-start Guide](https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide)
-- [@official@About user alerts](https://docs.github.com/en/code-security/secret-scanning/managing-alerts-from-secret-scanning/about-alerts#about-user-alerts)
+- [@official@About user alerts](https://docs.github.com/en/code-security/secret-scanning/managing-alerts-from-secret-scanning/about-alerts#about-user-alerts)
+- [@course@Git and Repository Security: Hands-on Labs](https://ransomleak.com/catalogue/git-security/)

roadmaps/git-github/content/secrets-and-env-vars@aflP7oWsQzAr4YPo2LLiQ.md

@@ -6,4 +6,5 @@ Visit the following resources to learn more:
 
 - [@official@Using secrets in GitHub Actions](https://docs.github.com/en/actions/security-for-github-actions/security-guides/using-secrets-in-github-actions)
 - [@official@Store information in variables](https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables)
+- [@course@CI/CD Secret Exposure: Hands-on Exercise](https://ransomleak.com/exercises/cicd-secret-exposure/)
 - [@video@Secrets and Environment Variables in your GitHub Action](https://www.youtube.com/watch?v=dPLPSaFqJmY)