Since it appears to be completely non-obvious what is going on here, this is an in-development update of the current development guide (https://www.owasp.org/index.php/Category:OWASP_Guide_Project). More info in that link.