Securing DevOps at Scale