{"success": false,"components": [{"name": "-sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb-arm64","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature\n invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false},{"name": "","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:d6162d4d6e9a810c5d94c7b00d8a093576a5d4e5d11bc536450843e422d3f7d3","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false},{"name": "-sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65-amd64","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature\n invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false}],"key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n","policy": {"name": "Default","description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml","sources": [{"name": "Default","policy": ["oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"],"data": ["git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2","oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109","oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea","oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"],"config": {"include": ["slsa_provenance_available"]}}],"publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"},"ec-version": "v0.9.25","effective-time": "2026-08-14T04:40:14.608633112Z"}