Healthy developer-team culture and adherence to DevSecOps best practices to protect against supply chain attacks are sur