Merge branch 'main' into stored-tools-as-property

.github/workflows/promote.yaml

@@ -30,11 +30,10 @@ jobs:
           destination=$(echo "$channel_promotion" | sed 's/.*->\s*//')
           echo "destination-channel=$destination" >> $GITHUB_OUTPUT
           echo "origin-channel=$origin" >> $GITHUB_OUTPUT
-      - name: Release charm to channel
-        uses: canonical/charming-actions/release[email protected].2
+      - name: Promote charm to channel
+        uses: canonical/charming-actions/promote[email protected].3
         with:
           credentials: ${{ secrets.CHARMHUB_TOKEN }}
-          github-token: ${{ secrets.GITHUB_TOKEN }}
           destination-channel: ${{ steps.set-channels.outputs.destination-channel }}
           origin-channel: ${{ steps.set-channels.outputs.origin-channel }}
           charmcraft-channel: "2.x/stable"

SECURITY.md

@@ -0,0 +1,16 @@
+<!-- This file is centrally managed as a template file in https://github.com/canonical/solutions-engineering-automation -->
+<!-- To update the file: -->
+<!-- - Edit it in the canonical/solutions-engineering-automation repository. -->
+<!-- - Open a PR with the changes. -->
+<!-- - When the PR merges, the soleng-terraform bot will open a PR to the target repositories with the changes. -->
+
+# Security policy
+
+
+## Reporting a vulnerability
+To report a security issue, file a [Private Security Report](https://github.com/canonical/hardware-observer-operator/security/advisories/new)
+with a description of the issue, the steps you took to create the issue, affected versions, and,
+if known, mitigations for the issue.
+
+The [Ubuntu Security disclosure and embargo policy](https://ubuntu.com/security/disclosure-policy)
+contains more information about what you can expect when you contact us and what we expect from you.