Software Supply Chain Manifesto