Watch On Demand: Securing the Software Supply Chain