@joshbressers Both. Which is why I've been advocating for more overlap and collaboration between both groups for years. At Deutsche Bahn, we are impending this via a cross-functional "topic team software supply chain security".
Same applies for other Open-Source-related topics that require a broader skillset and benefit from diverse expertise, e.g. legal issues (licenses, patents) or business/financial questions (strategic funding, partnerships), just with other teams in those cases.