Sonatype CTO Brian Fox dives into a report on the status of software supply chain security shared at a virtual All Day DevOps (ADDO) event.