{ "policy": { "name": "Default", "description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml", "sources": [ { "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:29379afbc9847fee8be1c0adf615b10e7dcf683c3bdfcb7b916d8718f29cfacb" ], "data": [ "git::github.com/release-engineering/rhtap-ec-policy//data?ref=2c3fedd04fa2ab5611dc9ddf05ab751ad566074d", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:5eb2cd823963e9acc02f2ce359aaace860da60a0c5d2cbd500efe565ef3cb277", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:285061c0ce1489eea71f39a68bb2a22184f502d31b6cd852cb4bf46003a63fd3", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc" ], "config": { "include": [ "slsa_provenance_available" ] } } ], "publicKey": "k8s://chains-e2e-buaa/cosign-public-key" }, "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEqZvFzuKUeAS5WUNAF0xXa+DTbApO\nBE6D6Bq4Wq36fV2Cq/7549nz2weKbVYFlb6CUcJ0h3wP0Xv9cj82GgPYfA==\n-----END PUBLIC KEY-----\n", "effective-time": "2026-01-23T02:00:10.69397045Z" }