Through artifact attestation and the SLSA framework, GitHub's director of product management, Jennifer Schelkopf, argues that at least some supply chain attacks can be stopped in their tracks.