Covers how security is built into DevOps delivery pipelines: shift-left testing with SAST, DAST, SCA, IaC and secrets scanning, threat modelling and security champions. Explains software supply chain security with SBOMs, SLSA provenance and Sigstore signing, policy as code and awareness of the OWASP Top 10.