How to Automate Security and Compliance for DevOps