Securing the CI/CD Pipeline: Best Practices for DevSecOps