Survey Reveals Only Half of CI/CD Workflows Include Application Security Testing Elements. DevSecOps is an emerging paradigm in which DevOps teams incorporate application security into their continuous integration and continuous delivery (CI/CD) workflows. Nearly 40% of organisations either do not perform SCA or claim not to use any open source components which may represent a lack of awareness given that a previous Open Source Security and Risk Analysis report by Black Duck Software found that over 95% of applications contain open source.”]