Secure your software supply chain with Go