Security is not just the security team’s job. The way developers handle secrets, dependencies, and access has an outsized impact on an organisation’s risk.