software composition analysis 1 Beyond CVEs: AI-Driven Supply Chain Security for DevSecOps in 2026 Jun 24, 2026