The integration of artificial intelligence into software development workflows presents novel security challenges for the software supply chain. Organizations are now compelled to assess the security risks associated with code produced by AI systems, a consideration that extends beyond the established practice of analyzing third-party components.