AI turns software supply chain security into a continuous engineering discipline