Shift left security best practices for DevSecOps