At the inaugural CloudNativeSecurityCon, DevSecOps practitioners discussed how to shore up the software supply chain.