https://securingdev.github.io/posts/devsecops-essentials-code-security/