The threat situation in the software supply chain is intensifying. Securing it belongs at the top of the CISO’s agenda.