GitHub Supply Chain Security Using GitGat