{ "apiVersion": "v1", "items": [ { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:17:26Z", "generation": 6, "name": "ec-policy", "namespace": "build-e2e-esrr", "resourceVersion": "104740", "uid": "1a710b7f-5d15-4129-8ae2-67a69567cdb0" }, "spec": { "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml", "name": "Default", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [ "slsa_source_correlated.source_code_reference_provided" ], "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:07:52Z", "generation": 1, "name": "ec-policy", "namespace": "chains-e2e-dvry", "resourceVersion": "67280", "uid": "c840186f-d859-427e-9abb-d502c7b71681" }, "spec": { "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml", "name": "Default", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "include": [ "slsa_provenance_available" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:44:03Z", "generation": 1, "name": "dr-ec-policy", "namespace": "dr-test-kokohazamar-backwards-compat-dr-managed", "resourceVersion": "131092", "uid": "7f5c8fb4-b639-4bf7-9ddb-3ba4aee17d16" }, "spec": { "configuration": { "collections": [ "@slsa3" ], "exclude": [ "step_image_registries", "tasks.required_tasks_found:prefetch-dependencies" ] }, "description": "DR test Enterprise Contract policy", "publicKey": "k8s://dr-test-kokohazamar-backwards-compat-dr-managed/cosign-public-key", "sources": [ { "config": { "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:44:03Z", "generation": 1, "name": "dr-ec-policy", "namespace": "dr-test-moshekipod-backwards-compat-dr-managed", "resourceVersion": "131094", "uid": "1a1b5e9c-404e-4d64-b1bf-85f9d130f3d6" }, "spec": { "configuration": { "collections": [ "@slsa3" ], "exclude": [ "step_image_registries", "tasks.required_tasks_found:prefetch-dependencies" ] }, "description": "DR test Enterprise Contract policy", "publicKey": "k8s://dr-test-moshekipod-backwards-compat-dr-managed/cosign-public-key", "sources": [ { "config": { "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default\"},\"name\":\"default\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes rules for levels 1, 2 \\u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml\",\"name\":\"Default\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:51:39Z", "generation": 1, "name": "default", "namespace": "enterprise-contract-service", "resourceVersion": "23605", "uid": "a0052018-ae87-41f0-9360-8dc2afcffbe2" }, "spec": { "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml", "name": "Default", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat\"},\"name\":\"redhat\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml\",\"name\":\"Red Hat\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:51:40Z", "generation": 1, "name": "redhat", "namespace": "enterprise-contract-service", "resourceVersion": "23719", "uid": "ec3ce47c-2a75-4864-b9a9-b02078d17e5a" }, "spec": { "description": "Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml", "name": "Red Hat", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@redhat" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic\"},\"name\":\"redhat-no-hermetic\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml\",\"name\":\"Red Hat (non hermetic)\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[\"hermetic_build_task\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:51:40Z", "generation": 1, "name": "redhat-no-hermetic", "namespace": "enterprise-contract-service", "resourceVersion": "23711", "uid": "2fea927e-1021-4cf7-8f15-96c1273c23ec" }, "spec": { "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml", "name": "Red Hat (non hermetic)", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [ "hermetic_build_task", "tasks.required_tasks_found:prefetch-dependencies" ], "include": [ "@redhat" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms\"},\"name\":\"redhat-rpms\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml\",\"name\":\"Red Hat RPMs\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat_rpms\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:51:40Z", "generation": 1, "name": "redhat-rpms", "namespace": "enterprise-contract-service", "resourceVersion": "23717", "uid": "d96096ac-bbe5-4b83-ac73-b0fc970047e1" }, "spec": { "description": "For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml", "name": "Red Hat RPMs", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@redhat_rpms" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest", "oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks\"},\"name\":\"redhat-trusted-tasks\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules used to verify Tekton Task definitions comply to Red Hat's standards.\",\"name\":\"Red Hat Trusted Tasks\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"kind\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-task-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:51:40Z", "generation": 1, "name": "redhat-trusted-tasks", "namespace": "enterprise-contract-service", "resourceVersion": "23714", "uid": "7dd482a9-db4c-4e76-b06e-7dc3fb064a6e" }, "spec": { "description": "Rules used to verify Tekton Task definitions comply to Red Hat's standards.", "name": "Red Hat Trusted Tasks", "sources": [ { "config": { "exclude": [], "include": [ "kind" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-task-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "annotations": { "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3", "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3\"},\"name\":\"slsa3\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules specifically related to levels 1, 2 \\u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml\",\"name\":\"SLSA3\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@minimal\",\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n" }, "creationTimestamp": "2026-05-14T10:51:40Z", "generation": 1, "name": "slsa3", "namespace": "enterprise-contract-service", "resourceVersion": "23720", "uid": "ef513a7c-dcc9-423f-98da-286eef1fda60" }, "spec": { "description": "Rules specifically related to levels 1, 2 \u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml", "name": "SLSA3", "publicKey": "k8s://openshift-pipelines/public-key", "sources": [ { "config": { "exclude": [], "include": [ "@minimal", "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } }, { "apiVersion": "appstudio.redhat.com/v1alpha1", "kind": "EnterpriseContractPolicy", "metadata": { "creationTimestamp": "2026-05-14T11:04:15Z", "generation": 1, "name": "konflux-demo-component-policy", "namespace": "konflux-hxhp-managed", "resourceVersion": "52959", "uid": "6412fc70-9f95-43d5-ab17-c5359fb592b9" }, "spec": { "configuration": { "collections": [ "minimal" ], "exclude": [ "cve" ] }, "description": "Red Hat's enterprise requirements", "publicKey": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEjY2105F1x1CQMqGFmh11oZ4O9qf4\n8zoDrlBQbil4gtlD3hnEyJKYDSbxkUh6hPEKpAhiKKtrgYsX9eLU3N5qEw==\n-----END PUBLIC KEY-----", "sources": [ { "config": { "include": [ "@slsa3" ] }, "data": [ "github.com/release-engineering/rhtap-ec-policy//data", "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest", "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest" ], "name": "Default", "policy": [ "oci::quay.io/enterprise-contract/ec-release-policy:konflux" ] } ] } } ], "kind": "List", "metadata": { "resourceVersion": "" } }