What Is a Software Supply Chain Attestation | Hacker News Reader