Modern application architectures and DevOps technology-particularly container and serverless workloads-have blurred the boundaries between code and an application in a runtime environment. Since code now defines containers, services and infrastructure provisioning, an effective security strategy requires a DevSecOps solution that can bridge the gap between a security practitioners’ context in