Promoting Developer Security: Creating a Lightweight Program of Assurance Techniques