Kim Lewandowski and Michael Lieberman on Securing the Software Supply Chain with SLSA