Software Bill of Materials, Dependency Confusion, Code Signing, Build Security