Explore the critical topic of open source software supply chain security in this keynote presentation from All Things Open 2022. Delve into the challenges and opportunities facing the OSS community as recent attacks and executive orders have brought increased attention to this crucial issue. Learn how important security measures are being implemented in upstream projects, generating more information about dependencies and potential vulnerabilities. Examine the paradox of having abundant supply chain information but struggling to extract actionable knowledge for developers and operators. Gain insights from Google's Bob Callaway as he discusses the future landscape of OSS security and the ongoing efforts to bridge the gap between information overload and practical wisdom in the field.