Software Assurance, Testing, and Supply Chain Integrity