Konflux can scan our images and produce Enterprise Contract violations and warnings around CVEs that it detects.  The documentation for this is here:

https://conforma.dev/docs/policy/packages/release_cve.html

We need to update ACM and MCE so that we are logging warnings for crtical, high and medium CVEs