Companies may have to provide a bill of materials so the Defense Department can keep an eye on its software supply chain.
