Enhance security guidelines for software supply chain#387

JustinCappos wants to merge 2 commits intoossf:mainossf/security-baseline:mainfrom

JustinCappos:mainJustinCappos/security-baseline:mainCopy head branch name to clipboard