In the constantly evolving landscape of continuously integrated cloud-native applications, the process of security assurance has a consistently increasing importance. In order to ensure that systems are secure and behave as expected, the assurance process has to be included in the whole software lifecycle, from development to operations.