With the two new services, Google aims to help minimize risk from malicious code in the software supply chain.