AppFolio interview question

DevSecOps familiarity setting up application security tools with the current SDLC