Backfill commit SHAs for tagged Git versions

Change-Id: I37731d88335456130a8e57b66334bd1210215f07
diff --git a/METADATA b/METADATA
index b58abc6..1844922 100644
--- a/METADATA
+++ b/METADATA
@@ -1,6 +1,5 @@
 name: "bazel-contrib-supply-chain"
 description: "Supply-chain rules for Bazel"
-
 third_party {
   license_type: NOTICE
   last_upgrade_date {
@@ -11,6 +10,7 @@
   identifier {
     type: "Git"
     value: "https://github.com/bazel-contrib/supply-chain"
-    version: "v0.0.2"
+    version: "16d3636503939b77c00c832e2546c98497eb8ab3"
+    closest_version: "v0.0.2"
   }
 }