Do you involve security validation tasks or automations in your development cycles?

If so which and how? How do you manage to do it seamlessly without disturbing too much with your work?

I wonder about IaC and specifically Kubernetes, but I guess everything which is security related is relevant here.

Thanks!