common security pipeline