As governments strengthen software supply-chain security, digital signatures, verified build histories and hardware ...