The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.
git clone https://github.com/OWASP/DevSecOpsGuideline.git
# OWASP/DevSecOpsGuideline
git clone https://github.com/OWASP/DevSecOpsGuideline
cd DevSecOpsGuideline
# See README for setup instructions