SOFTWARE SUPPLY CHAIN AND DEVOPS SECURITY PRACTICES