Sonatype focuses on the challenge of creating a secure software supply chain.