Supply chain security is not easy, but it’s an important defense. Red Hat has done some good work in this area.