{ "apiVersion": "v1", "items": [ { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:10:04Z", "generation": 6, "name": "ec-policy", "namespace": "build-e2e-adak", "resourceVersion": "103273", "uid": "3f15a1ac-931e-4948-a48b-67ed53de5fda" }, "spec": { "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml", "name": "Default", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [ "slsa_source_correlated.source_code_reference_provided" ], "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:02:06Z", "generation": 12, "name": "ec-policy", "namespace": "chains-e2e-qius", "resourceVersion": "88135", "uid": "29505e5f-26da-48e0-b522-bb100abfd043" }, "spec": { "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml", "name": "Default", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "include": [ "trusted_task.pinned" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:48:25Z", "generation": 1, "name": "dr-ec-policy", "namespace": "dr-test-kokohazamar-backwards-compat-dr-managed", "resourceVersion": "144552", "uid": "f30fce3b-4bca-4d81-8a43-b0c830520639" }, "spec": { "configuration": { "collections": [ "@slsa3" ], "exclude": [ "step_image_registries", "tasks.required_tasks_found:prefetch-dependencies" ] }, "description": "DR test Enterprise Contract policy", "publicKey": "k8s://dr-test-kokohazamar-backwards-compat-dr-managed/cosign-public-key", "sources": [ { "config": { "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:48:23Z", "generation": 1, "name": "dr-ec-policy", "namespace": "dr-test-moshekipod-backwards-compat-dr-managed", "resourceVersion": "144405", "uid": "8c6d5bc4-6fbd-4411-9821-33640aadae24" }, "spec": { "configuration": { "collections": [ "@slsa3" ], "exclude": [ "step_image_registries", "tasks.required_tasks_found:prefetch-dependencies" ] }, "description": "DR test Enterprise Contract policy", "publicKey": "k8s://dr-test-moshekipod-backwards-compat-dr-managed/cosign-public-key", "sources": [ { "config": { "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default\"},\"name\":\"default\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes rules for levels 1, 2 \\u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml\",\"name\":\"Default\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:44:30Z", "generation": 1, "name": "default", "namespace": "enterprise-contract-service", "resourceVersion": "23406", "uid": "d22c9ca4-1f13-4714-8b1e-aeb7e654a59f" }, "spec": { "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml", "name": "Default", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat\"},\"name\":\"redhat\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml\",\"name\":\"Red Hat\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:44:31Z", "generation": 1, "name": "redhat", "namespace": "enterprise-contract-service", "resourceVersion": "23432", "uid": "325af3f6-3c9b-4aa9-b5e8-768f64d45ba3" }, "spec": { "description": "Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml", "name": "Red Hat", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@redhat" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic\"},\"name\":\"redhat-no-hermetic\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml\",\"name\":\"Red Hat (non hermetic)\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[\"hermetic_build_task\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:44:31Z", "generation": 1, "name": "redhat-no-hermetic", "namespace": "enterprise-contract-service", "resourceVersion": "23431", "uid": "8935b6b9-b4ed-4498-8615-5d0d1934e839" }, "spec": { "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml", "name": "Red Hat (non hermetic)", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [ "hermetic_build_task", "tasks.required_tasks_found:prefetch-dependencies" ], "include": [ "@redhat" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms\"},\"name\":\"redhat-rpms\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml\",\"name\":\"Red Hat RPMs\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat_rpms\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:44:31Z", "generation": 1, "name": "redhat-rpms", "namespace": "enterprise-contract-service", "resourceVersion": "23434", "uid": "f76a470c-60d3-46c8-8e9f-c2f96a473c27" }, "spec": { "description": "For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml", "name": "Red Hat RPMs", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@redhat_rpms" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest", "oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks\"},\"name\":\"redhat-trusted-tasks\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules used to verify Tekton Task definitions comply to Red Hat's standards.\",\"name\":\"Red Hat Trusted Tasks\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"kind\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-task-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:44:31Z", "generation": 1, "name": "redhat-trusted-tasks", "namespace": "enterprise-contract-service", "resourceVersion": "23435", "uid": "a126d102-0985-4c23-a001-3a257a6ea784" }, "spec": { "description": "Rules used to verify Tekton Task definitions comply to Red Hat's standards.", "name": "Red Hat Trusted Tasks", "sources": [ { "config": { "exclude": [], "include": [ "kind" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-task-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3\"},\"name\":\"slsa3\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules specifically related to levels 1, 2 \\u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml\",\"name\":\"SLSA3\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@minimal\",\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:44:31Z", "generation": 1, "name": "slsa3", "namespace": "enterprise-contract-service", "resourceVersion": "23436", "uid": "f4bb89cb-c185-4757-b693-fb151c653838" }, "spec": { "description": "Rules specifically related to levels 1, 2 \u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml", "name": "SLSA3", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@minimal", "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T10:58:31Z", "generation": 1, "name": "konflux-demo-component-policy", "namespace": "konflux-ncgf-managed", "resourceVersion": "50908", "uid": "f47551ca-fbf6-40d6-9ccf-afd65a1465b2" }, "spec": { "configuration": { "collections": [ "minimal" ], "exclude": [ "cve" ] }, "description": "Red Hat's enterprise requirements", "publicKey": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEKFqL4o9di44mcIpXeN4OYyVz0C8Y\nBMgAOy7ndsJt5nkn1OAlUivy8xyJdiX/hC96stzFPThPKd0p2NeFPOcvVQ==\n-----END PUBLIC KEY-----", "sources": [ { "config": { "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }