Add some word about Supply Chain defence

[rodwiddowson]

It turns out that nuget and msbuild make locking down your toolset to be only those tools distributed by the wix project is quite easy.

Document this so that non .NET users can pick this up easily.

[rodwiddowson]

I have read the CLA Document and I hereby sign the CLA

[rodwiddowson]

Not sure how to unstick the CLABOT. I'll try to push the change again and see if that helps

[rodwiddowson]

Anybody want to guess how I unblock this? Last time it happened I got an email from a Robot and I did what it said.
I have do the same (i.e. 'I have read the CLA Document and I hereby sign the CLA') But nothing has budged.

If its a case of waiting I'm fine.

[rodwiddowson]

Cross reference for completeness

https://github.com/orgs/wixtoolset/discussions/7746

[robmen]

The CLA-Bot step is completed. It has a green checkmark by it.

[rodwiddowson]

@robmen Apologies. Still feeling my way around the processes here.. I do beg your pardon

[BryanCrotaz]

I had to type refresh in a comment to unstick it

[robmen]

Thanks, but as you point out, this is functionality provided by NuGet and MSBuild. I think you'd be better off sending your doc changes there. It isn't unique to WiX and not something I want to maintain as part of this project.