https://hostingjournalist.com/automating-security-in-cloud-workloads-with-devsecops-sec303/