Supply chain security, compliance, and privacy for cloud-native ecosystems