This project would like to make sure that it stays on top of all vulnerabilities and address them within a reasonable time and/or report them to appropriate upstream project. This is done in good faith and best effort.

v1 and v2 will be maintained for critical issues.

For security related issues with this project, please report it privately using the Report a Vulnerability form including as much detail as possible.

For security related issues with crane, please report it to their respective project using their guidelines.
https://github.com/google/go-containerregistry