https://blog.repithwin.com/5-ways-to-secure-devops/