How Go mitigates supply chain attacks