Your software supply chain is under attack how are you going to react?