https://labs.ripe.net/author/kathleen_moriarty/a-role-for-isacs-in-software-supply-chain-assurance/