open source application security posture management