Since the compromise of the SolarWinds Orion update mechanism two years ago this month, governments and the IT industry have made strides in trying to reduce the attack surface of applications. However, Google believes software supply chain security is still one of the most critical security risks facing the world. "There is an urgent need