Are there security risk points in your software supply chain? Google is now sharing its own software supply chain security practices externally — so we all can benefit.