GitHub brings supply chain security features to the Go community