Tech giants including Amazon, Google and Microsoft have pledged millions of dollars to bolster the security of open source software.