As most of the organizations increasingly integrate DevSecOps practices to enhance their development and deployment CI/CD pipelines, securing the software supply chain has become a critical concern for the cyber industry. This panel will delve into the complexities of supply chain security, exploring how vulnerabilities in third-party components, open-source libraries, and vendor software can compromise the integrity of the entire development ecosystem. We will discuss and review insights on the latest threats and challenges in supply chain security, and discuss advanced strategies for mitigating risks. Topics will include effective threat modeling, integrating security into the CI/CD pipeline, and leveraging tools and frameworks designed to enhance supply chain visibility and integrity.