Software supply chain security for a resilient and secure development cycle