local DevSecOps implementation