DevSecOps Workshop Group - Security policy project