software pipeline security