This PR removes the code defaults resulting in the policy-engine fall back to legacy vulnerabilities provider when the config is not found or invalid. policy-engine will fail bootstrap if a provider is not explicitly configured in the configuration with this change
This PR removes the code defaults resulting in the policy-engine fall back to legacy vulnerabilities provider when the config is not found or invalid. policy-engine will fail bootstrap if a provider is not explicitly configured in the configuration with this change