Shift left

Finding problems earlier is cheaper. That is not the same as making developers responsible for security.

The phrase gets used to justify handing engineers a pile of scanner output with no context, time or expertise attached, which produces resentment and ignored findings. Shifting left works when it means better defaults, safer libraries and design review; it fails when it means moving the same work onto people who have not been given anything to do it with.