Security that Scales: Automating Security and Compliance for DevOps