{"success": false,"components": [{"name": "-sha256:accce62e3f7018ff8dead73b5b4fc3cba816069ed939750555ce0effe6aef99c-arm64","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:accce62e3f7018ff8dead73b5b4fc3cba816069ed939750555ce0effe6aef99c","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false},{"name": "-sha256:718c880015c46cf996593ae2a9fb050caf4f48b9e716cc80fd191b560816968a-amd64","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:718c880015c46cf996593ae2a9fb050caf4f48b9e716cc80fd191b560816968a","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false},{"name": "","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:1d1ffaeff4867f7ccf7126d4e30f376b7becbfee2a65352fde244622fd257acb","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false}],"key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE51ObOiw8F0XDAZ/AQrZ7AOR2fUtt\n90mi3dQxsR5a1NBxFfKaMstUPLZnRf7UdW/hY2oPxq12xioJ9X6imOEXfg==\n-----END PUBLIC KEY-----\n","policy": {"name": "Default","description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml","sources": [{"name": "Default","policy": ["oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:0d3ab4efb94bd8ee361bda3146cae0c509c41d597431af658ce2570112efe469"],"data": ["git::github.com/release-engineering/rhtap-ec-policy//data?ref=5a749b9a6e46d358ee240e8c884fabd8da93b6c5","oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:1ef4231af73705a7e18f2e35b1e0980c901fcf3f3e89b9370b7c9ac17483ff1c","oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea","oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"],"config": {"include": ["slsa_provenance_available"]}}],"publicKey": "k8s://chains-e2e-dmwr/cosign-public-key"},"ec-version": "v0.9.25","effective-time": "2026-10-11T01:56:08.414375812Z"}