Open Source security and Bazel