https://workingoutjournal.com/shifting-security-left-a-practical-devsecops-guide-for-developers/