How do you decide which security checks belong in the pipeline versus pre-merge or post-deploy at Lockheed Martin?
