Success: true
Result: WARNING
Violations: 0, Warnings: 9, Successes: 447

Components:
- Name: -sha256:cbc04db8f0d4f48b47746ee223f0f31cfbdb9230d516e7ef5ae6b90d26be0a55-arm64
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:cbc04db8f0d4f48b47746ee223f0f31cfbdb9230d516e7ef5ae6b90d26be0a55
  Violations: 0, Warnings: 3, Successes: 149

- Name: -sha256:7dc434ba693d4e8820a64c10f5f8862fcf6f6e32343e3496c9e30055ac339321-amd64
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:7dc434ba693d4e8820a64c10f5f8862fcf6f6e32343e3496c9e30055ac339321
  Violations: 0, Warnings: 3, Successes: 149

- Name: 
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:33ce86bca8ce5c088e3e93f68725f56ecb3638914c14becc833e3a35ea72f71f
  Violations: 0, Warnings: 3, Successes: 149

Results:
› [Warning] base_image_registries.allowed_registries_provided
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:cbc04db8f0d4f48b47746ee223f0f31cfbdb9230d516e7ef5ae6b90d26be0a55
  Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting
  signing_identities in rule data.
  Title: Allowed base image registry prefixes list or signing identity was provided
  Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least
  one is required by the policy rules in this package.
  Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities`
  https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in
  `allowed_registry_prefixes`.

› [Warning] buildah_build_task.disallowed_platform_patterns_pattern
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:cbc04db8f0d4f48b47746ee223f0f31cfbdb9230d516e7ef5ae6b90d26be0a55
  Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^
  Title: disallowed_platform_patterns format
  Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format.

› [Warning] test.no_failed_informative_tests
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:cbc04db8f0d4f48b47746ee223f0f31cfbdb9230d516e7ef5ae6b90d26be0a55
  Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test
  Term: ecosystem-cert-preflight-checks
  Title: No informative tests failed
  Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by
  the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule
  data.
  Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not
  fail. More information about the test should be available in the logs for the build Pipeline.

› [Warning] base_image_registries.allowed_registries_provided
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:7dc434ba693d4e8820a64c10f5f8862fcf6f6e32343e3496c9e30055ac339321
  Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting
  signing_identities in rule data.
  Title: Allowed base image registry prefixes list or signing identity was provided
  Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least
  one is required by the policy rules in this package.
  Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities`
  https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in
  `allowed_registry_prefixes`.

› [Warning] buildah_build_task.disallowed_platform_patterns_pattern
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:7dc434ba693d4e8820a64c10f5f8862fcf6f6e32343e3496c9e30055ac339321
  Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^
  Title: disallowed_platform_patterns format
  Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format.

› [Warning] test.no_failed_informative_tests
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:7dc434ba693d4e8820a64c10f5f8862fcf6f6e32343e3496c9e30055ac339321
  Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test
  Term: ecosystem-cert-preflight-checks
  Title: No informative tests failed
  Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by
  the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule
  data.
  Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not
  fail. More information about the test should be available in the logs for the build Pipeline.

› [Warning] base_image_registries.allowed_registries_provided
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:33ce86bca8ce5c088e3e93f68725f56ecb3638914c14becc833e3a35ea72f71f
  Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting
  signing_identities in rule data.
  Title: Allowed base image registry prefixes list or signing identity was provided
  Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least
  one is required by the policy rules in this package.
  Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities`
  https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in
  `allowed_registry_prefixes`.

› [Warning] buildah_build_task.disallowed_platform_patterns_pattern
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:33ce86bca8ce5c088e3e93f68725f56ecb3638914c14becc833e3a35ea72f71f
  Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^
  Title: disallowed_platform_patterns format
  Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format.

› [Warning] test.no_failed_informative_tests
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:33ce86bca8ce5c088e3e93f68725f56ecb3638914c14becc833e3a35ea72f71f
  Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test
  Term: ecosystem-cert-preflight-checks
  Title: No informative tests failed
  Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by
  the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule
  data.
  Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not
  fail. More information about the test should be available in the logs for the build Pipeline.

For more information about policy issues, see the policy documentation: https://conforma.dev/docs/policy/