Identify and apply security controls in development environments