The application is using a default Enterprise Contract policy. We should follow the docs to update to the releng tmp policy, and eventually the final policy (TBD)

We will probably fail the policy at first, since several of our components are not yet using hermetic builds and approved image registries