{
    "apiVersion": "v1",
    "items": [
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-22T19:10:18Z",
                "generation": 1,
                "name": "ec-policy",
                "namespace": "chains-e2e-afor",
                "resourceVersion": "73139",
                "uid": "6e76ca5d-743a-4cfb-a757-9776a2a1025c"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "slsa_provenance_available"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-22T19:59:00Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-kokohazamar-same-version-dr-managed",
                "resourceVersion": "165782",
                "uid": "a5e41747-1bd7-4e70-bad6-12af534dce86"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-kokohazamar-same-version-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-22T19:59:02Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-moshekipod-same-version-dr-managed",
                "resourceVersion": "166092",
                "uid": "f217ade4-0a75-49bf-9383-394fd195998a"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-moshekipod-same-version-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default\"},\"name\":\"default\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes rules for levels 1, 2 \\u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml\",\"name\":\"Default\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-04-22T18:48:58Z",
                "generation": 1,
                "name": "default",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "21107",
                "uid": "292689b9-bf9b-497d-91a5-f1b9cfb9df0c"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat\"},\"name\":\"redhat\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml\",\"name\":\"Red Hat\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-04-22T18:48:58Z",
                "generation": 1,
                "name": "redhat",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "21112",
                "uid": "1b5e436e-e6ef-45b2-bd54-0af31b109ad2"
            },
            "spec": {
                "description": "Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml",
                "name": "Red Hat",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic\"},\"name\":\"redhat-no-hermetic\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml\",\"name\":\"Red Hat (non hermetic)\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[\"hermetic_build_task\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-04-22T18:48:58Z",
                "generation": 1,
                "name": "redhat-no-hermetic",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "21111",
                "uid": "8d39067a-2f7d-497c-9906-148e9de89d55"
            },
            "spec": {
                "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml",
                "name": "Red Hat (non hermetic)",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [
                                "hermetic_build_task",
                                "tasks.required_tasks_found:prefetch-dependencies"
                            ],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms\"},\"name\":\"redhat-rpms\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml\",\"name\":\"Red Hat RPMs\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat_rpms\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-04-22T18:48:58Z",
                "generation": 1,
                "name": "redhat-rpms",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "21110",
                "uid": "766e5e87-7ccc-43b9-bccc-bbcb320bdc01"
            },
            "spec": {
                "description": "For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml",
                "name": "Red Hat RPMs",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat_rpms"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks\"},\"name\":\"redhat-trusted-tasks\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules used to verify Tekton Task definitions comply to Red Hat's standards.\",\"name\":\"Red Hat Trusted Tasks\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"kind\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-task-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-04-22T18:48:59Z",
                "generation": 1,
                "name": "redhat-trusted-tasks",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "21114",
                "uid": "dd44c5bd-3457-43f5-82a3-8f7de83161c0"
            },
            "spec": {
                "description": "Rules used to verify Tekton Task definitions comply to Red Hat's standards.",
                "name": "Red Hat Trusted Tasks",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "kind"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-task-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3\"},\"name\":\"slsa3\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules specifically related to levels 1, 2 \\u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml\",\"name\":\"SLSA3\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@minimal\",\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-04-22T18:48:59Z",
                "generation": 1,
                "name": "slsa3",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "21113",
                "uid": "2f00663a-474a-4dc0-9a86-5c4f9c16c2d8"
            },
            "spec": {
                "description": "Rules specifically related to levels 1, 2 \u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml",
                "name": "SLSA3",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@minimal",
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        }
    ],
    "kind": "List",
    "metadata": {
        "resourceVersion": ""
    }
}