Four steps enterprises need to take to prevent software supply chain attacks