https://zdnetsa.pages.dev/posts/github-boosts-supply-chain-security-for-go-modules/