https://www.pivotpointsecurity.com/getting-started-with-devsecops/