This talk will focus on 5 critical security controls integrated as part of the CI/CD pipeline with excellent OSS tools, including: static application security (SAST), hard-code secret detection, dependency checks (SCA), infrastructure as code and API/dynamic application security (DAST). These controls will provide a foundational framework for securing applications from the first line of code.