Legit Security Software Supply Chain Security vs XBOM (2026)