Huawei CISA issues guidance on defending against software supply chain attacks

The government makes recommendations for both organizations and software vendors to attenuate the danger of software compromised by a criminal or foreign adversary.