How should businesses address risks in software supply chain attacks?

by

How should businesses address risks in software supply chain attacks?