Shifting security earlier in the development pipeline saves meaningful time in the innovation cycle while making software more secure, says a GitHub white paper.