Base images should originate from registries explicitly allowed by policy. Any FROM instruction using an unapproved registry triggers this rule.
FROM
(c) 2025 Asymmetric Effort, LLC. scaldwell@asymmetric-effort.com
