How do you ensure compliance with security standards for CI/CD pipelines supporting Harvard Medical School?