Excoriations and suggestions are on point. Build systems that encourage secure outcomes rather than (incomplete) rules that classify artifacts.
“In this post, I’ll excoriate special snowflake security programs then offer opportunities for how we can make our programs more constructive rather than constrictive.”
https://kellyshortridge.com/blog/posts/cybersecurity-isnt-special/