When DevOps Meets Security to Protect Software