{
    "apiVersion": "v1",
    "items": [
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-05-05T11:37:27Z",
                "generation": 12,
                "name": "ec-policy",
                "namespace": "chains-e2e-vlas",
                "resourceVersion": "80526",
                "uid": "e5b50f05-0e58-41ee-a83a-219b9642d4de"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "trusted_task.pinned"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-05-05T12:11:53Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-kokohazamar-backwards-compat-dr-managed",
                "resourceVersion": "144898",
                "uid": "9251be0a-a2a1-4842-846e-6d9b86013611"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-kokohazamar-backwards-compat-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-05-05T12:11:52Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-moshekipod-backwards-compat-dr-managed",
                "resourceVersion": "144884",
                "uid": "d9f69a52-4036-41e3-bbd8-b5e46140f6b1"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-moshekipod-backwards-compat-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default\"},\"name\":\"default\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes rules for levels 1, 2 \\u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml\",\"name\":\"Default\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-05T11:20:24Z",
                "generation": 1,
                "name": "default",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "25328",
                "uid": "f60d6dd6-da21-47c6-bbb6-7d41c9c7dde1"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat\"},\"name\":\"redhat\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml\",\"name\":\"Red Hat\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-05T11:20:25Z",
                "generation": 1,
                "name": "redhat",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "25371",
                "uid": "a3d67a60-a416-4d8a-9fd7-d45d2c158d3d"
            },
            "spec": {
                "description": "Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml",
                "name": "Red Hat",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic\"},\"name\":\"redhat-no-hermetic\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml\",\"name\":\"Red Hat (non hermetic)\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[\"hermetic_build_task\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-05T11:20:25Z",
                "generation": 1,
                "name": "redhat-no-hermetic",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "25380",
                "uid": "87dc7f03-b9a9-4957-95cd-feb0d0ead272"
            },
            "spec": {
                "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml",
                "name": "Red Hat (non hermetic)",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [
                                "hermetic_build_task",
                                "tasks.required_tasks_found:prefetch-dependencies"
                            ],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms\"},\"name\":\"redhat-rpms\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml\",\"name\":\"Red Hat RPMs\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat_rpms\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-05T11:20:25Z",
                "generation": 1,
                "name": "redhat-rpms",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "25376",
                "uid": "50039dae-09ec-49b5-8fee-ff11b5fa2a95"
            },
            "spec": {
                "description": "For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml",
                "name": "Red Hat RPMs",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat_rpms"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks\"},\"name\":\"redhat-trusted-tasks\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules used to verify Tekton Task definitions comply to Red Hat's standards.\",\"name\":\"Red Hat Trusted Tasks\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"kind\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-task-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-05T11:20:25Z",
                "generation": 1,
                "name": "redhat-trusted-tasks",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "25378",
                "uid": "f1f62548-c5cd-4f92-8b67-3db7d1754dfb"
            },
            "spec": {
                "description": "Rules used to verify Tekton Task definitions comply to Red Hat's standards.",
                "name": "Red Hat Trusted Tasks",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "kind"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-task-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3\"},\"name\":\"slsa3\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules specifically related to levels 1, 2 \\u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml\",\"name\":\"SLSA3\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@minimal\",\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-05T11:20:25Z",
                "generation": 1,
                "name": "slsa3",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "25379",
                "uid": "8a4db1e8-53b5-45b1-b1fd-bdf5ebfcc242"
            },
            "spec": {
                "description": "Rules specifically related to levels 1, 2 \u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml",
                "name": "SLSA3",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@minimal",
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        }
    ],
    "kind": "List",
    "metadata": {
        "resourceVersion": ""
    }
}