What is the git flow strategy that best fits devsecops?

Question

I need to implement a DevSecOps framework in our team to comply with banking regulations. Since DevSecOps encourages shiftleft and lean (CALMS), which git flow strategy betw