security and skeleton (#4)

defenseunicorns · Nov 3, 2023 · ae22346 · ae22346
1 parent 1d53b83
commit ae22346
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,9 @@
+# Security Policy
+
+## Supported Versions
+
+As Zarf has not yet reached v1.0.0, only the current latest minor release is supported.
+
+## Reporting a Vulnerability
+
+Please email `security-notice [at] defenseunicorns.com` to report a vulnerability. If you are unable to disclose details via email, please let us know and we can coordinate alternate communications.
diff --git a/zarf.yaml b/zarf.yaml
@@ -41,7 +41,7 @@ components:
   - name: zarf-registry
     required: true
     import:
-      path: zarf-registry
+      url: oci://ghcr.io/defenseunicorns/packages/init:v0.31.0-skeleton
 
   # Push longhorn (and registry) images to permanent registry
   - name: longhorn-images