Bazel software supply chain audit