https://j-nunn.com/2020/09/integrating-arm-template-security-testing-into-a-devops-pipeline/