Do you have any links to good resources on "secure coding practices" or more generally "good engineering practices"?

I feel like there are lots of resources about specific programming skills (language and library details) but it is difficult to find good resources about more higher level concerns; security, maintenance, tooling, operations, availability, authentication/authorization, scaling, automation.

Google's Site Reliability Engineering is one example of a good resource in this area.