{
    "apiVersion": "v1",
    "items": [
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-06-29T22:37:54Z",
                "generation": 12,
                "name": "ec-policy",
                "namespace": "chains-e2e-ktby",
                "resourceVersion": "56509",
                "uid": "32555f66-edc3-4449-bd12-bb951b7c978e"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "trusted_task.pinned"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-06-29T22:40:49Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-kokohazamar-backwards-compat-dr-managed",
                "resourceVersion": "58011",
                "uid": "3d43d362-e8cd-410d-a9cf-52b74a39ce19"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-kokohazamar-backwards-compat-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-06-29T22:40:48Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-moshekipod-backwards-compat-dr-managed",
                "resourceVersion": "57823",
                "uid": "b8194335-75b1-4f47-903c-b15c649b3ca6"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-moshekipod-backwards-compat-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default\"},\"name\":\"default\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes rules for levels 1, 2 \\u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml\",\"name\":\"Default\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-06-29T22:13:36Z",
                "generation": 1,
                "name": "default",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "22526",
                "uid": "a794c9fd-7091-4ab0-a558-82fbb94012d5"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat\"},\"name\":\"redhat\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml\",\"name\":\"Red Hat\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-06-29T22:13:36Z",
                "generation": 1,
                "name": "redhat",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "22559",
                "uid": "0d4629d8-dfb7-465b-8352-ef7efac356ae"
            },
            "spec": {
                "description": "Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml",
                "name": "Red Hat",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic\"},\"name\":\"redhat-no-hermetic\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml\",\"name\":\"Red Hat (non hermetic)\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[\"hermetic_build_task\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-06-29T22:13:36Z",
                "generation": 1,
                "name": "redhat-no-hermetic",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "22558",
                "uid": "f2914e4e-2737-431f-8b9f-79fb228ca0c8"
            },
            "spec": {
                "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml",
                "name": "Red Hat (non hermetic)",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [
                                "hermetic_build_task",
                                "tasks.required_tasks_found:prefetch-dependencies"
                            ],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms\"},\"name\":\"redhat-rpms\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml\",\"name\":\"Red Hat RPMs\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat_rpms\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-06-29T22:13:36Z",
                "generation": 1,
                "name": "redhat-rpms",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "22560",
                "uid": "576310ce-4e2d-42a9-8cd3-d295412b087a"
            },
            "spec": {
                "description": "For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml",
                "name": "Red Hat RPMs",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat_rpms"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks\"},\"name\":\"redhat-trusted-tasks\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules used to verify Tekton Task definitions comply to Red Hat's standards.\",\"name\":\"Red Hat Trusted Tasks\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"kind\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-task-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-06-29T22:13:36Z",
                "generation": 1,
                "name": "redhat-trusted-tasks",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "22561",
                "uid": "68896db9-7dc8-4602-997d-56d70b2adaad"
            },
            "spec": {
                "description": "Rules used to verify Tekton Task definitions comply to Red Hat's standards.",
                "name": "Red Hat Trusted Tasks",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "kind"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-task-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3\"},\"name\":\"slsa3\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules specifically related to levels 1, 2 \\u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml\",\"name\":\"SLSA3\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@minimal\",\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-06-29T22:13:36Z",
                "generation": 1,
                "name": "slsa3",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "22562",
                "uid": "0e99b8b4-0c7a-447e-899a-6dfdc8d88062"
            },
            "spec": {
                "description": "Rules specifically related to levels 1, 2 \u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml",
                "name": "SLSA3",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@minimal",
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        }
    ],
    "kind": "List",
    "metadata": {
        "resourceVersion": ""
    }
}