https://handbook.gitlab.com/handbook/company/working-groups/software-supply-chain-security/#priorities-and-progress