Mitigating attack on Software Supply Chain using GOSH Docker Extension