Recently, keywords such as DevSecOps and the approach of "shift left" to realize it have come to be heard as important. Shift left is a very logical concept, but it is not easy to introduce, and there are big challenges in operating it. In this document, we will explain the major issues that hinder the realization of a shift left from the viewpoint of vulnerability response and how to solve them.