On 17 November, the “Guidance for Customers on Securing the Software Supply Chain” was published jointly by the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Office of the Director of National I…