Putting security into DevOps is tougher than it looks

If software development has absorbed a single lesson in the last two decades it’s that there’s an urgent need to integrate security at an early stage rather than leaving flaws to rot dangerously inside compiled code. Optimistically, dubbed shift left, the trick has been working out what this means in an era undergoing an historic transformation of development models.