Google announces GUAC open source project on software supply chains - The Record by Recorded Future; Oct 2022. slides, design doc