CI/CD Security Pipeline Integration

Help me integrate security into my CI/CD pipeline (DevSecOps).

Current pipeline:
- CI/CD platform: [GitHub Actions/GitLab/Jenkins]
- Languages: [list languages]
- Deployment target: [Kubernetes/cloud/VMs]
- Compliance requirements: [SOC2/PCI/HIPAA/none]

Security integrations needed:
1. Static Analysis (SAST)
   - Code scanning (CodeQL, Semgrep, SonarQube)
   - Secret detection
   - License compliance

2. Dependency Scanning (SCA)
   - Vulnerability scanning
   - Dependency updates (Dependabot/Renovate)
   - SBOM generation

3. Container Security
   - Image scanning (Trivy, Snyk)
   - Base image validation
   - Runtime security

4. Dynamic Testing (DAST)
   - API security testing
   - Web application scanning
   - Penetration testing integration

5. Compliance
   - Policy as code
   - Audit trail
   - Compliance reporting

Include:
- Pipeline configuration for each scanner
- Policy definitions
- Failure thresholds
- Reporting dashboards