What Is a Software Supply Chain Attestation? | Hacker News Reader