Success: true
Result: WARNING
Violations: 0, Warnings: 9, Successes: 447

Components:
- Name: -sha256:e12fff33de57add008e0961fcc5a8510ab6cd329fc0fb85d588d429bd351bc6b-amd64
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:e12fff33de57add008e0961fcc5a8510ab6cd329fc0fb85d588d429bd351bc6b
  Violations: 0, Warnings: 3, Successes: 149

- Name: 
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:ce0d72f44f3a3c1b36cbc687140311a74b2d6754a82b2b94640dd50d1bda33d5
  Violations: 0, Warnings: 3, Successes: 149

- Name: -sha256:19c7e73227f92496e7c19581637e653e4a2d4e5dd52acd8651c3f41fb35b2dac-arm64
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:19c7e73227f92496e7c19581637e653e4a2d4e5dd52acd8651c3f41fb35b2dac
  Violations: 0, Warnings: 3, Successes: 149

Results:
› [Warning] base_image_registries.allowed_registries_provided
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:e12fff33de57add008e0961fcc5a8510ab6cd329fc0fb85d588d429bd351bc6b
  Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting
  signing_identities in rule data.
  Title: Allowed base image registry prefixes list or signing identity was provided
  Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least
  one is required by the policy rules in this package.
  Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities`
  https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in
  `allowed_registry_prefixes`.

› [Warning] buildah_build_task.disallowed_platform_patterns_pattern
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:e12fff33de57add008e0961fcc5a8510ab6cd329fc0fb85d588d429bd351bc6b
  Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^
  Title: disallowed_platform_patterns format
  Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format.

› [Warning] test.no_failed_informative_tests
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:e12fff33de57add008e0961fcc5a8510ab6cd329fc0fb85d588d429bd351bc6b
  Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test
  Term: ecosystem-cert-preflight-checks
  Title: No informative tests failed
  Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by
  the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule
  data.
  Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not
  fail. More information about the test should be available in the logs for the build Pipeline.

› [Warning] base_image_registries.allowed_registries_provided
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:ce0d72f44f3a3c1b36cbc687140311a74b2d6754a82b2b94640dd50d1bda33d5
  Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting
  signing_identities in rule data.
  Title: Allowed base image registry prefixes list or signing identity was provided
  Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least
  one is required by the policy rules in this package.
  Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities`
  https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in
  `allowed_registry_prefixes`.

› [Warning] buildah_build_task.disallowed_platform_patterns_pattern
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:ce0d72f44f3a3c1b36cbc687140311a74b2d6754a82b2b94640dd50d1bda33d5
  Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^
  Title: disallowed_platform_patterns format
  Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format.

› [Warning] test.no_failed_informative_tests
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:ce0d72f44f3a3c1b36cbc687140311a74b2d6754a82b2b94640dd50d1bda33d5
  Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test
  Term: ecosystem-cert-preflight-checks
  Title: No informative tests failed
  Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by
  the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule
  data.
  Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not
  fail. More information about the test should be available in the logs for the build Pipeline.

› [Warning] base_image_registries.allowed_registries_provided
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:19c7e73227f92496e7c19581637e653e4a2d4e5dd52acd8651c3f41fb35b2dac
  Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting
  signing_identities in rule data.
  Title: Allowed base image registry prefixes list or signing identity was provided
  Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least
  one is required by the policy rules in this package.
  Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities`
  https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in
  `allowed_registry_prefixes`.

› [Warning] buildah_build_task.disallowed_platform_patterns_pattern
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:19c7e73227f92496e7c19581637e653e4a2d4e5dd52acd8651c3f41fb35b2dac
  Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^
  Title: disallowed_platform_patterns format
  Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format.

› [Warning] test.no_failed_informative_tests
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:19c7e73227f92496e7c19581637e653e4a2d4e5dd52acd8651c3f41fb35b2dac
  Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test
  Term: ecosystem-cert-preflight-checks
  Title: No informative tests failed
  Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by
  the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule
  data.
  Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not
  fail. More information about the test should be available in the logs for the build Pipeline.

For more information about policy issues, see the policy documentation: https://conforma.dev/docs/policy/