What are the OWASP Top 10, and why should DevOps engineers be familiar with them? Give examples of how infrastructure and pipeline security relates to application vulnerabilities.

Sample answer preview

The OWASP Top 10 is a standard awareness document representing the most critical security risks to web applications. Published by the Open Web Application Security Project, it is updated periodically based on data about real-world vulnerabilities.