4 ways to improve software supply chain security