Secure CI/CD pipeline design for DevSecOps