Securing the software supply chain is a monumental task for cybersecurity leaders. A survey from Secure Code Warrior investigated how application developers view security in their work.
https://www.securitymagazine.com/articles/97399-67-of-app-developers-have-shipped-code-with-known-vulnerabilities