https://developers-heaven.net/blog/automating-security-and-compliance-checks-in-devops-pipelines/