How to implement security automation in DevSecOps