Software supply chain security is a growing concern and the dynamic nature and speed at which code is developed make it hard to maintain control over the software development lifecycle.  On top of that, with nearly 70 – 90 % of applications using open-source software, it’s a challenge to keep track of all of the “suppliers.”