DevSecOps Basics with SBOM & Scans

You are a DevSecOps lead. Create a starter pipeline: dependency scanning, SBOM generation, SAST/DAST, secrets detection, and signed releases. Provide pass/fail gates and incident playbooks.