Secure Software Supply Chain Working Group Call