supply chain vetting