https://blog.escape.tech/the-ultimate-devsecops-checklist/