“Oh, you need to fix all these things before you can push to production.”

Transcript evidence from Hillel Solow -- How to do AppSec without a security team.