# data[].attributes.body
PEN Testing

# data[].attributes.body
Change Control

# data[].attributes.body
Release Control

# data[].attributes.body
security vulnerabilities, code-quality, performance.

# data[].attributes.body
Documentation

# data[].attributes.body
Security Policies

# data[].attributes.body
Model Threats

# data[].attributes.body
DAST

# data[].attributes.body
Security Analysis

# data[].attributes.body
SAST

# data[].attributes.body
Integrated security monitoring tool.

# data[].attributes.body
OWASP

# data[].attributes.body
Specify the cultural practices that improve security
Training stuff about security.
Starting each project with security in mind so it's not an afterthought but a planned part of the system.

These will cut across the entire pipeline

# data[].attributes.body
Specify the security infrastructure activity and pipeline location(s)

Examples include (but not limited to)
Secrets management
Configuration management
Version control
Container security management

# data[].attributes.body
Specify the integrated security activity that fits into SDLC

Examples include (but not limited to):
Automated tools like SonarQube
Code reviews
Static or dynamic code scanning
Red team blue team
Bug bounty
Automated attack
Threat intelligence

# data[].attributes.body
Specify an automated security task and pipeline location(s)

Examples include (but not limited to):
Static code analysis
Dependency analysis
Unit testing
Dynamic app security tests

# data[].attributes.body
Specify the cultural practices that improve security

These will cut across the entire pipeline

# data[].attributes.body
Specify the security infrastructure activity and pipeline location(s)

Examples include (but not limited to)
Secrets management
Configuration management
Version control
Container security management

# data[].attributes.body
Specify the integrated security activity that fits into SDLC

Examples include (but not limited to):
Threat modelling
Code reviews
Static or dynamic code scanning
Red team blue team
Bug bounty
Automated attack
Threat intelligence

# data[].attributes.body
Specify an automated security task and pipeline location(s)

Examples include (but not limited to):
Static code analysis
Dependency analysis
Unit testing
Dynamic app security tests