How the shift left security approach is transforming DevOps