Tech sector embraces public-private collaboration on open-source software security