Dev0ops hints

The best hint I would give is to read what you have found is actually telling you, and then check out the OWASP TOP 10 for 2017.