Merge remote-tracking branch 'upstream/main' into chadradams/ux-ui-en…

…gineering-updates

docs/automated-testing/shadow-testing/README.md

@@ -32,6 +32,7 @@ There are some tools to implement shadow testing. The main purpose of these tool
 - [Envoy](https://www.envoyproxy.io)
 - [McRouter](https://github.com/facebook/mcrouter)
 - [Scientist](https://github.com/github/scientist)
+- [Keploy](https://github.com/keploy/keploy)
 
 One of the most popular tools is [Diffy](https://github.com/opendiffy/diffy). It was created and used at Twitter. Now the original author and a former Twitter employee maintains their own version of this project, called [Opendiffy](https://github.com/opendiffy/diffy). Twitter announced this tool on their engineering blog as "[Testing services without writing tests](https://blog.twitter.com/engineering/en_us/a/2015/diffy-testing-services-without-writing-tests.html)".
 

docs/security/README.md

@@ -18,7 +18,7 @@ When requesting a security review for your application, please make sure you hav
 
 ## Azure DevOps Security
 
-- [Security Engineering DevSecOps Practices](https://www.microsoft.com/en-us/securityengineering/devsecops)
+- [Security Engineering DevSecOps Practices](https://wiki.owasp.org/images/0/08/OWASP_SCP_Quick_Reference_Guide_v2.pdf)
 - [Azure DevOps Data Protection Overview](https://learn.microsoft.com/en-us/azure/devops/organizations/security/data-protection?view=azure-devops)
 - [Security and Identity in Azure DevOps](https://learn.microsoft.com/en-us/azure/devops/organizations/security/about-security-identity?view=azure-devops)
 - [Security Code Analysis](https://secdevtools.azurewebsites.net/)