Applying security with DevSecOps