Software Supply Chain

This is a very good guide by Microsoft!