We re struggling with software supply chain security. Looking for automated vulnerability detection tools and sbom generation that don t need source code access. How are you securing software dependencies today?