How Open Source Dependency and Repo Attacks Compromise DevOps Pipelines and How to Stay Safe DevOps.com