Rough structure

[Sparrow0hawk]

This PR is for rough ideas on topics and structuring of the book.

• Introduction
• Why security for research software?
• Credentials
  • Managing credentials in code
  • Time limited access tokens
• Dependency management
  • Package supply chain attacks
  • Tools for vetting your dependencies

[Sparrow0hawk]

Unsure if this should be a section or fit into other sections but:

• Language best practice ideas:
  • Python
  • Dealing with serialised data
  • Sanitizing data
  • Understanding what happens to setup.py when pip install runs
  • Safe use of string formatting
  • Docker
  • Using official images
  • Setting a user when running a container
  • Minimise container dependencies