Just how do you build a healthy software pipeline and make sure it's secure?