Policy and Attestations. Best Practices for Supply Chain Security | Hacker News Reader