Coalfire's analysis on the 2022 software supply chain