“You need to choose that vendor, that solution that you're going to partner with that knows supply chain and has a roadmap item to address all your capability concerns.”

Transcript evidence from Steve Springett — An insiders checklist for Software Composition Analysis.