2026-08-14T03:18:39.647863Z  INFO vector::app: Log level is enabled. level="info"
2026-08-14T03:18:39.648306Z  INFO vector::app: Loading configs. paths=["/etc/vector"]
2026-08-14T03:18:39.651380Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}: vector::sources::kubernetes_logs: Obtained Kubernetes Node name to collect logs for (self). self_node_name="ip-10-0-136-31.ec2.internal"
2026-08-14T03:18:39.658822Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}: vector::sources::kubernetes_logs: Including matching files. ret=["**/*"]
2026-08-14T03:18:39.658839Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}: vector::sources::kubernetes_logs: Excluding matching files. ret=["**/*.gz", "**/*.tmp"]
2026-08-14T03:18:39.660981Z  INFO vector::topology::running: Running healthchecks.
2026-08-14T03:18:39.661029Z  INFO vector::topology::builder: Healthcheck passed.
2026-08-14T03:18:39.661045Z  INFO vector: Vector has started. debug="false" version="0.45.0" arch="x86_64" revision="063cabb 2025-02-24 14:52:02.810034614"
2026-08-14T03:18:39.662360Z  INFO vector::internal_events::api: API server running. address=127.0.0.1:8686 playground=off graphql=http://127.0.0.1:8686/graphql
2026-08-14T03:18:39.662414Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: file_source::checkpointer: Attempting to read legacy checkpoint files.
2026-08-14T04:35:24.023462Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-clone-repository-pod_b3c2b620-b56a-4f4a-8122-dd07499391ca/place-scripts/0.log
2026-08-14T04:35:24.023531Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-clone-repository-pod_b3c2b620-b56a-4f4a-8122-dd07499391ca/prepare/0.log
2026/08/14 04:35:23 Entrypoint initialization
2026/08/14 04:35:23 Decoded script /tekton/scripts/script-0-dvccm
2026-08-14T04:35:36.328079Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-clone-repository-pod_b3c2b620-b56a-4f4a-8122-dd07499391ca/step-clone/0.log
2026-08-14T04:35:38.378266Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-clone-repository-pod_b3c2b620-b56a-4f4a-8122-dd07499391ca/step-clone/0.log
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
time="2026-08-14T04:35:38Z" level=info msg="[param] url: https://github.com/conforma/golden-container.git"
time="2026-08-14T04:35:38Z" level=info msg="[param] depth: 1"
time="2026-08-14T04:35:38Z" level=info msg="[param] short-commit-length: 7"
time="2026-08-14T04:35:38Z" level=info msg="[param] subdirectory: source"
time="2026-08-14T04:35:38Z" level=info msg="[param] delete-existing: true"
time="2026-08-14T04:35:38Z" level=info msg="[param] target-branch: main"
time="2026-08-14T04:35:38Z" level=info msg="[param] merge-commit-author-name: Konflux CI Git Clone"
time="2026-08-14T04:35:38Z" level=info msg="[param] merge-commit-author-email: git-clone@konflux-ci.dev"
time="2026-08-14T04:35:38Z" level=info msg="[param] output-dir: /workspace/output"
time="2026-08-14T04:35:38Z" level=info msg="[param] retry-max-attempts: 10"
2026-08-14T04:35:43.006019Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-prefetch-dependencies-pod_cc5d1a30-38f0-4cb4-9b51-d36bf796ec42/place-scripts/0.log
2026-08-14T04:35:43.006071Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-prefetch-dependencies-pod_cc5d1a30-38f0-4cb4-9b51-d36bf796ec42/prepare/0.log
2026/08/14 04:35:41 Entrypoint initialization
2026/08/14 04:35:41 Decoded script /tekton/scripts/script-0-hvmgc
2026-08-14T04:35:51.212400Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-prefetch-dependencies-pod_cc5d1a30-38f0-4cb4-9b51-d36bf796ec42/step-prefetch-dependencies/0.log
2026-08-14T04:35:53.261854Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-prefetch-dependencies-pod_cc5d1a30-38f0-4cb4-9b51-d36bf796ec42/step-prefetch-dependencies/0.log
Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using mounted service CA bundle: /mnt/service-ca/ca-bundle.crt
'/mnt/service-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/service-ca.crt'
time="2026-08-14T04:35:54Z" level=debug msg="Starting prefetch-dependencies"
time="2026-08-14T04:35:54Z" level=info msg="Using in-cluster config" logger=KubeClient
time="2026-08-14T04:35:54Z" level=info msg="Not using package registry proxy because allow-package-registry-proxy is not set to `true` on the cluster level" logger=PrefetchDependencies
time="2026-08-14T04:35:54Z" level=info msg="[param] source-dir: /workspace/source/source"
time="2026-08-14T04:35:54Z" level=info msg="[param] output-dir: /workspace/source/cachi2/output"
time="2026-08-14T04:35:54Z" level=info msg="[param] sbom-format: spdx"
time="2026-08-14T04:35:54Z" level=info msg="[param] mode: strict"
time="2026-08-14T04:35:54Z" level=info msg="[param] output-dir-mount-point: /cachi2/output"
time="2026-08-14T04:35:54Z" level=info msg="[param] env-files: [/workspace/source/cachi2/cachi2.env /workspace/source/cachi2/prefetch.env /workspace/source/cachi2/prefetch-env.json]"
time="2026-08-14T04:35:54Z" level=info msg="hermeto [stdout] hermeto 0.55.0"
time="2026-08-14T04:35:55Z" level=warning msg="No input provided; skipping prefetch-dependencies" logger=PrefetchDependencies
time="2026-08-14T04:35:55Z" level=debug msg="Finished prefetch-dependencies"
2026-08-14T04:35:57.384468Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/prepare/0.log
2026-08-14T04:35:59.433726Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/place-scripts/0.log
2026-08-14T04:35:59.433767Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/prepare/0.log
2026-08-14T04:35:59.952168Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/working-dir-initializer/0.log
2026/08/14 04:35:57 Entrypoint initialization
2026/08/14 04:35:57 Decoded script /tekton/scripts/script-0-bjhb2
2026/08/14 04:35:57 Decoded script /tekton/scripts/script-1-h4pch
2026/08/14 04:35:57 Decoded script /tekton/scripts/script-2-pv2xt
2026/08/14 04:35:57 Decoded script /tekton/scripts/script-3-lqdnb
2026/08/14 04:35:58 Decoded script /tekton/scripts/script-4-84xqm
2026-08-14T04:36:11.740802Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-build/0.log
2026-08-14T04:36:11.740833Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-push/0.log
2026-08-14T04:36:26.084903Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-sbom-syft-generate/0.log
2026-08-14T04:36:36.332009Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-prepare-sboms/0.log
2026-08-14T04:36:36.332050Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-upload-sbom/0.log
2026-08-14T04:36:38.382221Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-build/0.log
[2026-08-14T04:36:36,544179343+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2026-08-14T04:36:36,547257942+00:00] Update CA trust
[2026-08-14T04:36:38,648210994+00:00] Prepare system (architecture: x86_64)
Effective container policy:
{
  "default": [
    {
      "type": "insecureAcceptAnything"
    }
  ],
  "transports": {
    "docker-daemon": {
      "": [
        {
          "type": "insecureAcceptAnything"
        }
      ]
    }
  }
}
[2026-08-14T04:36:38,683982963+00:00] Run the build
[2026-08-14T04:36:38,686780431+00:00] konflux-build-cli image build -f /workspace/source/source/./Containerfile -t quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp --source source --context . --secret-dirs src=/additional-secret\,name=does-not-exist\,optional=true --workdir-mount '' --target '' --inherit-labels=true --source-date-epoch '' --rewrite-timestamp=false --squash=false --omit-history=false --image-source https://github.com/conforma/golden-container.git --image-revision 1170f583db17b9db20e993f89d6907dab9acc06f --quay-image-expires-after '' --build-args-file '' --annotations-file '' --legacy-build-timestamp '' --add-legacy-labels --include-legacy-buildinfo-path=true --skip-injections=false --skip-unused-stages=true --hermetic=false --image-pull-proxy '' --image-pull-noproxy '' --yum-repos-d-sources --yum-repos-d-target /etc/yum.repos.d --prefetch-dir '' --prefetch-dir-copy '' --prefetch-env-mount /cachi2/cachi2.env --prefetch-output-mount /cachi2/output --security-opts unmask=/proc/interrupts --rhsm-entitlements=/entitlement --containerfile-json-output /shared/parsed_dockerfile.json --resolved-base-images-output /shared/base_images_digests --no-cache --ulimits nofile=4096:4096 --src-tls-verify=true --dest-tls-verify=true --allow-cross-platform-images=false --build-args --envs --labels --annotations 
time="2026-08-14T04:36:38Z" level=info msg="[param] containerfile: /workspace/source/source/./Containerfile"
time="2026-08-14T04:36:38Z" level=info msg="[param] context: ."
time="2026-08-14T04:36:38Z" level=info msg="[param] source: source"
time="2026-08-14T04:36:38Z" level=info msg="[param] output-ref: quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp"
time="2026-08-14T04:36:38Z" level=info msg="[param] secret-dirs: [src=/additional-secret,name=does-not-exist,optional=true]"
time="2026-08-14T04:36:38Z" level=info msg="[param] image-source: https://github.com/conforma/golden-container.git"
time="2026-08-14T04:36:38Z" level=info msg="[param] image-revision: 1170f583db17b9db20e993f89d6907dab9acc06f"
time="2026-08-14T04:36:38Z" level=info msg="[param] add-legacy-labels: true"
time="2026-08-14T04:36:38Z" level=info msg="[param] containerfile-json-output: /shared/parsed_dockerfile.json"
time="2026-08-14T04:36:38Z" level=info msg="[param] include-legacy-buildinfo-path: true"
time="2026-08-14T04:36:38Z" level=info msg="[param] yum-repos-d-target: /etc/yum.repos.d"
time="2026-08-14T04:36:38Z" level=info msg="[param] prefetch-output-mount: /cachi2/output"
time="2026-08-14T04:36:38Z" level=info msg="[param] prefetch-env-mount: /cachi2/cachi2.env"
time="2026-08-14T04:36:38Z" level=info msg="[param] resolved-base-images-output: /shared/base_images_digests"
time="2026-08-14T04:36:38Z" level=info msg="[param] rhsm-entitlements: /entitlement"
time="2026-08-14T04:36:38Z" level=info msg="[param] rhsm-mount-ca-certs: auto"
time="2026-08-14T04:36:38Z" level=info msg="[param] no-cache: true"
time="2026-08-14T04:36:38Z" level=info msg="[param] security-opts: [unmask=/proc/interrupts]"
time="2026-08-14T04:36:38Z" level=info msg="[param] ulimits: [nofile=4096:4096]"
time="2026-08-14T04:36:38Z" level=info msg="[param] sbom-format: spdx"
2026-08-14T04:37:13.753067Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-push/0.log
[2026-08-14T04:37:13,633950762+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
2026-08-14T04:37:21.507309Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-sbom-syft-generate/0.log
[2026-08-14T04:37:17,126047615+00:00] Convert image
[2026-08-14T04:37:17,127178979+00:00] Push image with unique tag
Pushing to quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp-build-container
[retry] executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp docker://quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp-build-container
Getting image source signatures
Copying blob sha256:744477751ae399dccbbb0e787fc05702eaf715170026f024d1ac7ff3953b8bab
Copying blob sha256:6338bf48070048703b5e67ce3004f7e50baca61d725c74f673530571491f12bf
Copying blob sha256:1c4c7b821008611be4d06cbd2dce718750bece4ba6de72a7e85d1d75f8d2162f
Copying config sha256:061cc97465b053b8efd3710dc5642d095f49ae793cfa6d650fd55fdbf18abf27
Writing manifest to image destination
[2026-08-14T04:37:20,213721927+00:00] Push image with git revision
Pushing to quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp
[retry] executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp docker://quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp
Getting image source signatures
Copying blob sha256:744477751ae399dccbbb0e787fc05702eaf715170026f024d1ac7ff3953b8bab
Copying blob sha256:6338bf48070048703b5e67ce3004f7e50baca61d725c74f673530571491f12bf
Copying blob sha256:1c4c7b821008611be4d06cbd2dce718750bece4ba6de72a7e85d1d75f8d2162f
Copying config sha256:061cc97465b053b8efd3710dc5642d095f49ae793cfa6d650fd55fdbf18abf27
Writing manifest to image destination
sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005bquay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp
[retry] executing: kubectl get configmap cluster-config -n konflux-info -o json
Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap)
[2026-08-14T04:37:21,126400257+00:00] End push
time="2026-08-14T04:37:08Z" level=info msg="buildah [stderr] Trying to pull registry.access.redhat.com/ubi9/ubi-micro@sha256:414cfa255ea10eaef4528a26d5618eb67cf487b635ee20f8f14b9317bfd6a4be..."
time="2026-08-14T04:37:09Z" level=info msg="buildah [stderr] Getting image source signatures"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] Checking if image destination supports signatures"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] Copying blob sha256:a6ea345e47d8c80d172b8dedf5a286e29024b63b1af4934e688b7d12a0c8ab6b"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] Copying blob sha256:61c3e70d16b0534e4cf004a9c336e4ae8ee348580cca7a8fe487aa088ea63d12"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] Copying config sha256:6922b7871a144fd939d85d27a53dd7a3790bb5078ea10bdc683da0f9b2e62728"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] Writing manifest to image destination"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] Storing signatures"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] 6922b7871a144fd939d85d27a53dd7a3790bb5078ea10bdc683da0f9b2e62728"
time="2026-08-14T04:37:12Z" level=info msg="Injecting buildinfo: added labels.json"
time="2026-08-14T04:37:12Z" level=info msg="Injecting buildinfo: no prefetch SBOM found, not adding content-sets.json"
time="2026-08-14T04:37:12Z" level=info msg="Building container image..."
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] time=\"2026-08-14T04:37:12Z\" level=warning msg=\"missing \\\"GIT_ID\\\" build argument. Try adding \\\"--build-arg GIT_ID=<VALUE>\\\" to the command line\""
time="2026-08-14T04:37:12Z" level=info msg="buildah [stderr] time=\"2026-08-14T04:37:12Z\" level=warning msg=\"missing \\\"BUILD_DATE\\\" build argument. Try adding \\\"--build-arg BUILD_DATE=<VALUE>\\\" to the command line\""
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 1/8: FROM registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:414cfa255ea10eaef4528a26d5618eb67cf487b635ee20f8f14b9317bfd6a4be"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 2/8: ARG GIT_ID"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 3/8: ARG TARGETARCH"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 4/8: ARG BUILD_DATE"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 5/8: LABEL name=\"Enterprise Contract Golden Container\"       vendor=\"Red Hat, Inc.\"       maintainer=\"hacbs-contract@redhat.com\"       version=\"1\"       release=\"1\"       build-date=$BUILD_DATE       summary=\"Trivial image build in compliance with Enterprise Contract policy\"       description=\"Trivial image build in compliance with Enterprise Contract policy\"       url=\"https://github.com/enterprise-contract/golden-container\"       distribution-scope=\"public\"       io.k8s.description=\"Trivial image build in compliance with Enterprise Contract policy\"       io.k8s.display-name=\"Enterprise Contract Contract Golden Container\"       io.openshift.tags=\"golden\"       vcs-ref=$GIT_ID       vcs-type=git       architecture=$TARGETARCH       com.redhat.component=\"enterprise-contract-golden-container\"       com.redhat.build-host=\"somewhere.over.the.rainbow\""
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 6/8: COPY --from=.konflux-buildinfo . /usr/share/buildinfo/"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 7/8: COPY --from=.konflux-buildinfo . /root/buildinfo/"
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] STEP 8/8: LABEL \"org.opencontainers.image.created\"=\"2026-08-14T04:36:38Z\" \"org.opencontainers.image.source\"=\"https://github.com/conforma/golden-container.git\" \"org.opencontainers.image.revision\"=\"1170f583db17b9db20e993f89d6907dab9acc06f\" \"build-date\"=\"2026-08-14T04:36:38Z\" \"architecture\"=\"x86_64\" \"vcs-url\"=\"https://github.com/conforma/golden-container.git\" \"vcs-ref\"=\"1170f583db17b9db20e993f89d6907dab9acc06f\" \"vcs-type\"=\"git\""
time="2026-08-14T04:37:12Z" level=info msg="buildah [stdout] COMMIT quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp"
time="2026-08-14T04:37:13Z" level=info msg="buildah [stdout] --> 061cc97465b0"
time="2026-08-14T04:37:13Z" level=info msg="buildah [stdout] Successfully tagged quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp"
time="2026-08-14T04:37:13Z" level=info msg="buildah [stdout] 061cc97465b053b8efd3710dc5642d095f49ae793cfa6d650fd55fdbf18abf27"
time="2026-08-14T04:37:13Z" level=info msg="Build completed successfully"
time="2026-08-14T04:37:13Z" level=info msg="Writing parsed Containerfile to: /shared/parsed_dockerfile.json"
time="2026-08-14T04:37:13Z" level=info msg="Containerfile JSON written successfully"
time="2026-08-14T04:37:13Z" level=info msg="Writing resolved base images to: /shared/base_images_digests"
time="2026-08-14T04:37:13Z" level=info msg="Resolved base images written successfully"
{"image_url":"quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp"}[2026-08-14T04:37:13,084925529+00:00] Add metadata
Getting image source signatures
Copying blob sha256:744477751ae399dccbbb0e787fc05702eaf715170026f024d1ac7ff3953b8bab
Copying blob sha256:6338bf48070048703b5e67ce3004f7e50baca61d725c74f673530571491f12bf
Copying blob sha256:1c4c7b821008611be4d06cbd2dce718750bece4ba6de72a7e85d1d75f8d2162f
Copying config sha256:061cc97465b053b8efd3710dc5642d095f49ae793cfa6d650fd55fdbf18abf27
Writing manifest to image destination
[2026-08-14T04:37:13,253983686+00:00] End build
[2026-08-14T04:37:21,496880391+00:00] Generate SBOM
Running syft on the image
Running syft on the source code
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
2026-08-14T04:37:25.115939Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-prepare-sboms/0.log
[2026-08-14T04:37:24,175596080+00:00] End sbom-syft-generate
[2026-08-14T04:37:24,649230430+00:00] Prepare SBOM
[2026-08-14T04:37:24,652952658+00:00] Generate SBOM with mobster
Skipping SBOM validation
2026-08-14T04:37:41.517675Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-build-container-pod_bd138c49-765f-4c95-8068-693ff9dcecea/step-upload-sbom/0.log
[2026-08-14T04:37:39,660164909+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
2026-08-14 04:37:36,811 [INFO] mobster.log: Logging level set to 20
2026-08-14 04:37:37,107 [INFO] mobster.oci: Fetching manifest for registry.access.redhat.com/ubi9/ubi-micro@sha256:414cfa255ea10eaef4528a26d5618eb67cf487b635ee20f8f14b9317bfd6a4be
2026-08-14 04:37:38,240 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual workflow will be used. Parent SBOM used for contextualization: https://anchore.com/syft/dir/var/workdir/source-3511c1a9-0ec3-4454-bf6d-0a95249b4ccc
2026-08-14 04:37:38,414 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.logging: {"event_type": "contextual_sbom_matching_statistics", "parent_sbom_reference": "https://anchore.com/syft/dir/var/workdir/source-3511c1a9-0ec3-4454-bf6d-0a95249b4ccc", "component_sbom_reference": "https://konflux-ci.dev/spdxdocs/quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b-1d283b94-7961-4a61-a77c-7394b85dc993", "component_packages": {"total": 35, "matched": 22, "unmatched_all": 13, "unmatched_component_only": 13, "unmatched_without_unique_id": 0}, "parent_packages": {"total": 174, "matched": 146, "unmatched_all": 28, "unmatched_removed_at_build": 28, "unmatched_without_unique_id": 0}, "match_methods": {"by_checksum": 0, "by_verification_code": 14, "by_purl": 8, "total": 22}, "match_origins": {"syft_to_syft": 19, "syft_to_hermeto": 0, "hermeto_to_syft": 3, "hermeto_to_hermeto": 0}, "duplicate_identifiers": {"checksums": {"count": 0, "details": []}, "verification_codes": {"count": 0, "details": []}, "purls": {"count": 0, "details": []}}}
2026-08-14 04:37:38,415 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully.
2026-08-14 04:37:38,415 [INFO] mobster.log: Contextual workflow completed in 1.40s
2026-08-14 04:37:38,512 [INFO] mobster.main: Exiting with code 0.
[2026-08-14T04:37:39,605453706+00:00] End prepare-sboms
Using token for quay.io/redhat-appstudio-qe
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b] to [quay.io/redhat-appstudio-qe/test-images:sha256-c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/test-images@sha256:d34c73504a4d65cf4f7444b7c69608757115c883df7e1efe626be5aa0b29400b
[2026-08-14T04:38:04,783090249+00:00] End upload-sbom
2026-08-14T04:38:38.928824Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-apply-tags-pod_e5e50a3c-3e98-4d59-bb69-61f628909542/prepare/0.log
2026-08-14T04:38:38.928856Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-apply-tags-pod_e5e50a3c-3e98-4d59-bb69-61f628909542/step-apply-additional-tags/0.log
2026-08-14T04:38:39.960790Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-apply-tags-pod_e5e50a3c-3e98-4d59-bb69-61f628909542/step-apply-additional-tags/0.log
2026/08/14 04:38:37 Entrypoint initialization
time="2026-08-14T04:38:39Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp"
time="2026-08-14T04:38:39Z" level=info msg="[param] digest: sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b"
time="2026-08-14T04:38:39Z" level=info msg="[param] tags-from-image-label: konflux.additional-tags"
time="2026-08-14T04:38:40Z" level=warning msg="No tags given in 'konflux.additional-tags' image label"
2026-08-14T04:38:48.688598Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-push-dockerfile-pod_cb951ded-4d6c-4cd7-a7e7-51ab16c7beae/prepare/0.log
2026-08-14T04:38:48.688641Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-push-dockerfile-pod_cb951ded-4d6c-4cd7-a7e7-51ab16c7beae/step-push/0.log
2026-08-14T04:38:48.688654Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-push-dockerfile-pod_cb951ded-4d6c-4cd7-a7e7-51ab16c7beae/working-dir-initializer/0.log
2026-08-14T04:38:50.749343Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_buildah-demo-ovgjnrasyp-push-dockerfile-pod_cb951ded-4d6c-4cd7-a7e7-51ab16c7beae/step-push/0.log
2026/08/14 04:38:47 Entrypoint initialization
time="2026-08-14T04:38:50Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp"
time="2026-08-14T04:38:50Z" level=info msg="[param] image-digest: sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b"
time="2026-08-14T04:38:50Z" level=info msg="[param] containerfile: Containerfile"
time="2026-08-14T04:38:50Z" level=info msg="[param] context: ."
time="2026-08-14T04:38:50Z" level=info msg="[param] tag-suffix: .dockerfile"
time="2026-08-14T04:38:50Z" level=info msg="[param] artifact-type: application/vnd.konflux.dockerfile"
time="2026-08-14T04:38:50Z" level=info msg="[param] source: source"
time="2026-08-14T04:38:50Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF"
time="2026-08-14T04:38:50Z" level=info msg="[param] alternative-filename: Dockerfile"
time="2026-08-14T04:38:51Z" level=info msg="oras [stdout] quay.io/redhat-appstudio-qe/test-images@sha256:55d3466a8e406f520fa7c0c6329a20789f608d335e5a16f66a5a1093244e6c1e"
time="2026-08-14T04:38:51Z" level=info msg="Containerfile 'source/Containerfile' is pushed to registry with tag: sha256-c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b.dockerfile"
2026-08-14T04:38:57.939912Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/place-scripts/0.log
2026-08-14T04:38:57.939950Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/prepare/0.log
2026/08/14 04:38:56 Entrypoint initialization
2026/08/14 04:38:56 Decoded script /tekton/scripts/script-2-62s4w
2026-08-14T04:39:08.199205Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-assert/0.log
2026-08-14T04:39:08.199237Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-detailed-report/0.log
2026-08-14T04:39:08.199245Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-initialize-tuf/0.log
2026-08-14T04:39:08.199257Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-reduce/0.log
2026-08-14T04:39:08.199264Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-report-json/0.log
2026-08-14T04:39:08.199271Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-show-config/0.log
2026-08-14T04:39:08.199277Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-summary/0.log
2026-08-14T04:39:08.199284Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-validate/0.log
2026-08-14T04:39:08.199291Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-version/0.log
2026-08-14T04:39:10.250395Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-initialize-tuf/0.log
2026-08-14T04:39:10.250521Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-reduce/0.log
2026/08/14 04:39:09 INFO Step was skipped due to when expressions were evaluated to false.
Single Component mode? false
{
  "components": [
    {
      "name": "",
      "containerImage": "quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b",
      "source": {}
    }
  ],
  "artifacts": {}
}
{"tags":null}
2026-08-14T04:39:18.465789Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-assert/0.log
2026-08-14T04:39:18.465841Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-detailed-report/0.log
2026-08-14T04:39:18.465892Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-report-json/0.log
2026-08-14T04:39:18.465917Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-show-config/0.log
2026-08-14T04:39:18.465945Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-summary/0.log
2026-08-14T04:39:18.465978Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-85c0941bbd70dd531b77383f1127ad1e-pod_b23a9c78-b097-4138-9696-73fba2c9142c/step-version/0.log
2026-08-14T04:39:20.527615Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/prepare/0.log
2026-08-14T04:39:21.047525Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/place-scripts/0.log
{
  "policy": {
    "name": "Default",
    "description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
    "sources": [
      {
        "name": "Default",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109",
          "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea",
          "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"
        ],
        "config": {
          "include": [
            "slsa_provenance_available"
          ]
        }
      }
    ],
    "publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-08-14T04:39:09.537331846Z"
}
{
  "timestamp": "1786682356",
  "namespace": "",
  "successes": 5,
  "failures": 0,
  "warnings": 0,
  "result": "SUCCESS"
}
Version            v0.9.25
Source ID          b345847182602d9a5ce9e957fa76fe02575c8018
Change date        2026-04-27 12:52:43 +0000 UTC (15 weeks ago)
ECC                v0.1.7
OPA                v1.15.2
Conftest           v0.68.2
Cosign             v3.0.4
Sigstore           v1.10.4
Rekor              v1.5.0
Tekton Pipeline    v1.9.2
Kubernetes Client  v0.35.0
true
Success: true
Result: SUCCESS
Violations: 0, Warnings: 0, Successes: 5
Component: 
ImageRef: quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b

2026-08-14T04:39:22.080793Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-initialize-tuf/0.log
2026-08-14T04:39:22.080823Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-reduce/0.log
2026-08-14T04:39:22.080830Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-report-json/0.log
2026-08-14T04:39:22.080837Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-summary/0.log
2026-08-14T04:39:22.080846Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-validate/0.log
2026-08-14T04:39:22.080857Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-version/0.log
2026-08-14T04:39:23.106769Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-assert/0.log
2026-08-14T04:39:23.106800Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-detailed-report/0.log
2026-08-14T04:39:23.106828Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-show-config/0.log
2026/08/14 04:39:20 Decoded script /tekton/scripts/script-2-7mvp9
2026/08/14 04:39:20 Entrypoint initialization
2026-08-14T04:39:25.156305Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-initialize-tuf/0.log
2026-08-14T04:39:25.156349Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-reduce/0.log
{"image_ref":"quay.io/redhat-appstudio-qe/test-images@sha256:55d3466a8e406f520fa7c0c6329a20789f608d335e5a16f66a5a1093244e6c1e"}
2026/08/14 04:39:24 INFO Step was skipped due to when expressions were evaluated to false.
Single Component mode? false
{
  "components": [
    {
      "name": "",
      "containerImage": "quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b",
      "source": {}
    }
  ],
  "artifacts": {}
}
2026-08-14T04:39:33.367596Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-assert/0.log
2026-08-14T04:39:33.367643Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-detailed-report/0.log
2026-08-14T04:39:33.367680Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-report-json/0.log
2026-08-14T04:39:33.367697Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-show-config/0.log
2026-08-14T04:39:33.367712Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-summary/0.log
2026-08-14T04:39:33.367733Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-2473f96b878f3c844bd5f0a030bbccab-pod_0c2b1c8b-38ce-41e9-ab40-723162926439/step-version/0.log
2026-08-14T04:39:35.431178Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/prepare/0.log
true
Version            v0.9.25
Source ID          b345847182602d9a5ce9e957fa76fe02575c8018
Change date        2026-04-27 12:52:43 +0000 UTC (15 weeks ago)
ECC                v0.1.7
OPA                v1.15.2
Conftest           v0.68.2
Cosign             v3.0.4
Sigstore           v1.10.4
Rekor              v1.5.0
Tekton Pipeline    v1.9.2
Kubernetes Client  v0.35.0
{
  "policy": {
    "name": "Default",
    "description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
    "sources": [
      {
        "name": "Default",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109",
          "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea",
          "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"
        ],
        "config": {
          "include": [
            "test"
          ]
        }
      }
    ],
    "publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-08-14T04:39:25.248941126Z"
}
Success: false
Result: FAILURE
Violations: 1, Warnings: 0, Successes: 5
Component: 
ImageRef: quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b

Results:
✕ [Violation] test.test_data_found
  ImageRef: quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b
  Reason: No test data found
  Title: Test data found in task results
  Description: Ensure that at least one of the tasks in the pipeline includes a TEST_OUTPUT task result, which is where Conforma
  expects to find test result data. To exclude this rule add "test.test_data_found" to the `exclude` section of the policy
  configuration.
  Solution: Confirm at least one task in the build pipeline contains a result named TEST_OUTPUT.

For more information about policy issues, see the policy documentation: https://conforma.dev/docs/policy/
{
  "timestamp": "1786682371",
  "namespace": "",
  "successes": 5,
  "failures": 1,
  "warnings": 0,
  "result": "FAILURE"
}
2026-08-14T04:39:37.481809Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/place-scripts/0.log
2026-08-14T04:39:37.481865Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/prepare/0.log
2026-08-14T04:39:37.481879Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-assert/0.log
2026-08-14T04:39:37.481892Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-detailed-report/0.log
2026-08-14T04:39:37.481906Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-initialize-tuf/0.log
2026-08-14T04:39:37.481916Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-reduce/0.log
2026-08-14T04:39:37.481931Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-report-json/0.log
2026-08-14T04:39:37.481942Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-show-config/0.log
2026-08-14T04:39:37.481956Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-summary/0.log
2026-08-14T04:39:37.481967Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-validate/0.log
2026-08-14T04:39:37.481980Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-version/0.log
2026/08/14 04:39:35 Decoded script /tekton/scripts/script-2-nk5z5
2026/08/14 04:39:35 Entrypoint initialization
2026-08-14T04:39:41.593161Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-initialize-tuf/0.log
2026-08-14T04:39:41.593199Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-reduce/0.log
2026/08/14 04:39:39 INFO Step was skipped due to when expressions were evaluated to false.
Single Component mode? false
{
  "components": [
    {
      "name": "",
      "containerImage": "quay.io/redhat-appstudio-qe/test-images:buildah-demo-ovgjnrasyp@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b",
      "source": {}
    }
  ],
  "artifacts": {}
}
2026-08-14T04:39:47.754174Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-assert/0.log
2026-08-14T04:39:47.754212Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-detailed-report/0.log
2026-08-14T04:39:47.754248Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-report-json/0.log
2026-08-14T04:39:47.754263Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-show-config/0.log
2026-08-14T04:39:47.754274Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-summary/0.log
2026-08-14T04:39:47.754294Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-87645b540b23b247006a7c51375486ed-pod_95872eeb-186a-4a2d-a187-7351e13ba1b2/step-version/0.log
false
Success: false
Result: FAILURE
Violations: 1, Warnings: 0, Successes: 5
Component: 
ImageRef: quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b

Results:
✕ [Violation] test.test_data_found
  ImageRef: quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b
  Reason: No test data found
  Title: Test data found in task results
  Description: Ensure that at least one of the tasks in the pipeline includes a TEST_OUTPUT task result, which is where Conforma
  expects to find test result data. To exclude this rule add "test.test_data_found" to the `exclude` section of the policy
  configuration.
  Solution: Confirm at least one task in the build pipeline contains a result named TEST_OUTPUT.

For more information about policy issues, see the policy documentation: https://conforma.dev/docs/policy/
{"success": true,"components": [{"name": "","containerImage": "quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b","source": {},"successes": [{"msg": "Pass","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "Pass","metadata": {"code": "builtin.attestation.syntax_check","description": "The attestation has correct syntax.","title": "Attestation syntax check passed"}},{"msg": "Pass","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}},{"msg": "Pass","metadata": {"code": "slsa_provenance_available.allowed_predicate_types_provided","collections": ["minimal","slsa3","redhat","redhat_rpms","policy_data","redhat_security"],"description": "Confirm the `allowed_predicate_types` rule data was provided, since it is required by the policy rules in this package.","title": "Allowed predicate types provided"}},{"msg": "Pass","metadata": {"code": "slsa_provenance_available.attestation_predicate_type_accepted","collections": ["minimal","slsa3","redhat","redhat_rpms","redhat_security"],"depends_on": ["attestation_type.known_attestation_type"],"description": "Verify that the predicateType field of the attestation indicates the in-toto SLSA Provenance format was used to attest the PipelineRun.","title": "Expected attestation predicate type found"}}],"success": true,"signatures": [{"keyid": "","sig": "MEYCIQDeI4TJGbDPCyTg4wU/P2vCnkCgBtyqhhO6mJhufs74SQIhAOyOf0trv+mqDu2MFklrhcye9PwkYHnIvcRSzRc7O+45"}],"attestations": [{"type": "https://in-toto.io/Statement/v0.1","predicateType": "https://slsa.dev/provenance/v0.2","predicateBuildType": "tekton.dev/v1/PipelineRun","signatures": [{"keyid": "SHA256:q/+qnubG1Ap6x7sYAfHwB8N0MoWc5iR/Nv2cqQIUS9s","sig": "MEQCIEenhd4KY21nUErd72hTqKikNr3imSeFqxTzDzLobJbQAiBzcovARRiewNtizcj9H3lENSy6Lv82iOwI/doD/Hz9hA=="}]}]}],"key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n","policy": {"name": "Default","description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml","sources": [{"name": "Default","policy": ["oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"],"data": ["git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2","oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109","oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea","oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"],"config": {"include": ["slsa_provenance_available"]}}],"publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"},"ec-version": "v0.9.25","effective-time": "2026-08-14T04:39:09.537331846Z"}
{
  "policy": {
    "name": "Default",
    "description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
    "sources": [
      {
        "name": "Default",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109",
          "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea",
          "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"
        ],
        "config": {
          "include": [
            "test"
          ]
        }
      }
    ],
    "publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-08-14T04:39:40.310772442Z"
}
{
  "timestamp": "1786682386",
  "namespace": "",
  "successes": 5,
  "failures": 1,
  "warnings": 0,
  "result": "FAILURE"
}
Version            v0.9.25
Source ID          b345847182602d9a5ce9e957fa76fe02575c8018
Change date        2026-04-27 12:52:43 +0000 UTC (15 weeks ago)
ECC                v0.1.7
OPA                v1.15.2
Conftest           v0.68.2
Cosign             v3.0.4
Sigstore           v1.10.4
Rekor              v1.5.0
Tekton Pipeline    v1.9.2
Kubernetes Client  v0.35.0
{"success": false,"components": [{"name": "","containerImage": "quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b","source": {},"violations": [{"msg": "No test data found","metadata": {"code": "test.test_data_found","collections": ["redhat","redhat_security"],"depends_on": ["attestation_type.known_attestation_type"],"description": "Ensure that at least one of the tasks in the pipeline includes a TEST_OUTPUT task result, which is where Conforma expects to find test result data. To exclude this rule add \"test.test_data_found\" to the `exclude` section of the policy configuration.","solution": "Confirm at least one task in the build pipeline contains a result named TEST_OUTPUT.","title": "Test data found in task results"}}],"successes": [{"msg": "Pass","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "Pass","metadata": {"code": "builtin.attestation.syntax_check","description": "The attestation has correct syntax.","title": "Attestation syntax check passed"}},{"msg": "Pass","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}},{"msg": "Pass","metadata": {"code": "test.rule_data_provided","collections": ["redhat","policy_data","redhat_security"],"description": "Confirm the expected rule data keys have been provided in the expected format. The keys are `supported_tests_results`, `failed_tests_results`, `informative_tests`, `erred_tests_results`, `skipped_tests_results`, and `warned_tests_results`.","title": "Rule data provided"}},{"msg": "Pass","metadata": {"code": "test.test_all_images","collections": ["redhat","redhat_security"],"description": "Ensure that task producing the IMAGES_PROCESSED result contains the digests of the built image.","effective_on": "2024-05-29T00:00:00Z","title": "Image digest is present in IMAGES_PROCESSED result"}}],"success": false,"signatures": [{"keyid": "","sig": "MEYCIQDeI4TJGbDPCyTg4wU/P2vCnkCgBtyqhhO6mJhufs74SQIhAOyOf0trv+mqDu2MFklrhcye9PwkYHnIvcRSzRc7O+45"}],"attestations": [{"type": "https://in-toto.io/Statement/v0.1","predicateType": "https://slsa.dev/provenance/v0.2","predicateBuildType": "tekton.dev/v1/PipelineRun","signatures": [{"keyid": "SHA256:q/+qnubG1Ap6x7sYAfHwB8N0MoWc5iR/Nv2cqQIUS9s","sig": "MEQCIEenhd4KY21nUErd72hTqKikNr3imSeFqxTzDzLobJbQAiBzcovARRiewNtizcj9H3lENSy6Lv82iOwI/doD/Hz9hA=="}]}]}],"key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n","policy": {"name": "Default","description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml","sources": [{"name": "Default","policy": ["oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"],"data": ["git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2","oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109","oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea","oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"],"config": {"include": ["test"]}}],"publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"},"ec-version": "v0.9.25","effective-time": "2026-08-14T04:39:25.248941126Z"}
2026-08-14T04:40:10.321860Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/place-scripts/0.log
2026-08-14T04:40:10.321913Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/prepare/0.log
2026-08-14T04:40:11.355623Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-initialize-tuf/0.log
2026-08-14T04:40:11.355655Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-reduce/0.log
2026-08-14T04:40:11.355663Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-report-json/0.log
2026-08-14T04:40:11.355670Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-summary/0.log
2026-08-14T04:40:11.355676Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-validate/0.log
2026-08-14T04:40:11.355682Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-version/0.log
2026-08-14T04:40:12.381522Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-assert/0.log
2026-08-14T04:40:12.381573Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-detailed-report/0.log
2026-08-14T04:40:12.381595Z  WARN source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Currently ignoring file too small to fingerprint. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-show-config/0.log
2026/08/14 04:40:10 Decoded script /tekton/scripts/script-2-4tdkb
2026/08/14 04:40:09 Entrypoint initialization
2026-08-14T04:40:14.431783Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-initialize-tuf/0.log
2026-08-14T04:40:14.431827Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-reduce/0.log
Single Component mode? false
{
  "components": [
    {
      "name": "",
      "containerImage": "quay.io/konflux-ci/ec-golden-image:latest",
      "source": {}
    }
  ],
  "artifacts": {}
}
2026/08/14 04:40:14 INFO Step was skipped due to when expressions were evaluated to false.
2026-08-14T04:40:20.606400Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-assert/0.log
2026-08-14T04:40:20.606449Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-detailed-report/0.log
2026-08-14T04:40:20.606487Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-report-json/0.log
2026-08-14T04:40:20.606505Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-show-config/0.log
2026-08-14T04:40:20.606521Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-summary/0.log
2026-08-14T04:40:20.606541Z  INFO source{component_kind="source" component_id=kubernetes_logs component_type=kubernetes_logs}:file_server: vector::internal_events::file::source: Found new file to watch. file=/var/log/pods/chains-e2e-ozqz_verify-enterprise-contract-fd4e9f8bdb79df45dc2c4ce44767b88d-pod_68c4c4ca-f1c2-4368-9d28-200f8041d101/step-version/0.log
{"success": false,"components": [{"name": "","containerImage": "quay.io/redhat-appstudio-qe/test-images@sha256:c4c35543d656cce81c876d02702141ec755f1111253dc89b07a09b08e8cb005b","source": {},"violations": [{"msg": "No test data found","metadata": {"code": "test.test_data_found","collections": ["redhat","redhat_security"],"depends_on": ["attestation_type.known_attestation_type"],"description": "Ensure that at least one of the tasks in the pipeline includes a TEST_OUTPUT task result, which is where Conforma expects to find test result data. To exclude this rule add \"test.test_data_found\" to the `exclude` section of the policy configuration.","solution": "Confirm at least one task in the build pipeline contains a result named TEST_OUTPUT.","title": "Test data found in task results"}}],"successes": [{"msg": "Pass","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "Pass","metadata": {"code": "builtin.attestation.syntax_check","description": "The attestation has correct syntax.","title": "Attestation syntax check passed"}},{"msg": "Pass","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}},{"msg": "Pass","metadata": {"code": "test.rule_data_provided","collections": ["redhat","policy_data","redhat_security"],"description": "Confirm the expected rule data keys have been provided in the expected format. The keys are `supported_tests_results`, `failed_tests_results`, `informative_tests`, `erred_tests_results`, `skipped_tests_results`, and `warned_tests_results`.","title": "Rule data provided"}},{"msg": "Pass","metadata": {"code": "test.test_all_images","collections": ["redhat","redhat_security"],"description": "Ensure that task producing the IMAGES_PROCESSED result contains the digests of the built image.","effective_on": "2024-05-29T00:00:00Z","title": "Image digest is present in IMAGES_PROCESSED result"}}],"success": false,"signatures": [{"keyid": "","sig": "MEYCIQDeI4TJGbDPCyTg4wU/P2vCnkCgBtyqhhO6mJhufs74SQIhAOyOf0trv+mqDu2MFklrhcye9PwkYHnIvcRSzRc7O+45"}],"attestations": [{"type": "https://in-toto.io/Statement/v0.1","predicateType": "https://slsa.dev/provenance/v0.2","predicateBuildType": "tekton.dev/v1/PipelineRun","signatures": [{"keyid": "SHA256:q/+qnubG1Ap6x7sYAfHwB8N0MoWc5iR/Nv2cqQIUS9s","sig": "MEQCIEenhd4KY21nUErd72hTqKikNr3imSeFqxTzDzLobJbQAiBzcovARRiewNtizcj9H3lENSy6Lv82iOwI/doD/Hz9hA=="}]}]}],"key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n","policy": {"name": "Default","description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml","sources": [{"name": "Default","policy": ["oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"],"data": ["git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2","oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109","oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea","oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"],"config": {"include": ["test"]}}],"publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"},"ec-version": "v0.9.25","effective-time": "2026-08-14T04:39:40.310772442Z"}
{
  "timestamp": "1786682420",
  "namespace": "",
  "successes": 0,
  "failures": 6,
  "warnings": 0,
  "result": "FAILURE"
}
Success: false
Result: FAILURE
Violations: 6, Warnings: 0, Successes: 0

Components:
- Name: -sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb-arm64
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb
  Violations: 2, Warnings: 0, Successes: 0

- Name: 
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:d6162d4d6e9a810c5d94c7b00d8a093576a5d4e5d11bc536450843e422d3f7d3
  Violations: 2, Warnings: 0, Successes: 0

- Name: -sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65-amd64
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65
  Violations: 2, Warnings: 0, Successes: 0

Results:
✕ [Violation] builtin.attestation.signature_check
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb
  Reason: No image attestations found matching the given public key. Verify the correct public key was provided, and one or more
  attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1
  Title: Attestation signature check passed
  Description: The attestation signature matches available signing materials.

✕ [Violation] builtin.image.signature_check
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb
  Reason: No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was
  created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature
   invalid signature when validating ASN.1 encoded signature
  Title: Image signature check passed
  Description: The image signature matches available signing materials.

✕ [Violation] builtin.attestation.signature_check
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:d6162d4d6e9a810c5d94c7b00d8a093576a5d4e5d11bc536450843e422d3f7d3
  Reason: No image attestations found matching the given public key. Verify the correct public key was provided, and one or more
  attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1
  Title: Attestation signature check passed
  Description: The attestation signature matches available signing materials.

✕ [Violation] builtin.image.signature_check
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:d6162d4d6e9a810c5d94c7b00d8a093576a5d4e5d11bc536450843e422d3f7d3
  Reason: No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was
  created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature
  Title: Image signature check passed
  Description: The image signature matches available signing materials.

✕ [Violation] builtin.attestation.signature_check
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65
  Reason: No image attestations found matching the given public key. Verify the correct public key was provided, and one or more
  attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1
  Title: Attestation signature check passed
  Description: The attestation signature matches available signing materials.

✕ [Violation] builtin.image.signature_check
  ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65
  Reason: No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was
  created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature
   invalid signature when validating ASN.1 encoded signature
  Title: Image signature check passed
  Description: The image signature matches available signing materials.

For more information about policy issues, see the policy documentation: https://conforma.dev/docs/policy/
Version            v0.9.25
Source ID          b345847182602d9a5ce9e957fa76fe02575c8018
Change date        2026-04-27 12:52:43 +0000 UTC (15 weeks ago)
ECC                v0.1.7
OPA                v1.15.2
Conftest           v0.68.2
Cosign             v3.0.4
Sigstore           v1.10.4
Rekor              v1.5.0
Tekton Pipeline    v1.9.2
Kubernetes Client  v0.35.0
false
{
  "policy": {
    "name": "Default",
    "description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
    "sources": [
      {
        "name": "Default",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109",
          "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea",
          "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"
        ],
        "config": {
          "include": [
            "slsa_provenance_available"
          ]
        }
      }
    ],
    "publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-08-14T04:40:14.608633112Z"
}
{"success": false,"components": [{"name": "-sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb-arm64","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:ef5ab8d75ed0717b1c9000ee8dab8ae927c4c8663b0fe33247792ca3cd7c4adb","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature\n invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false},{"name": "","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:d6162d4d6e9a810c5d94c7b00d8a093576a5d4e5d11bc536450843e422d3f7d3","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false},{"name": "-sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65-amd64","containerImage": "quay.io/konflux-ci/ec-golden-image@sha256:8258706e8caa93e835c946fac2224afdada4dea69962fcca8491c43cfb610e65","source": {},"violations": [{"msg": "No image attestations found matching the given public key. Verify the correct public key was provided, and one or more attestations were created. Error: no matching attestations: accepted signatures do not match threshold, Found: 0, Expected 1","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "No image signatures found matching the given public key. Verify the correct public key was provided, and a signature was created. Error: no matching signatures: invalid signature when validating ASN.1 encoded signature\n invalid signature when validating ASN.1 encoded signature","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}}],"success": false}],"key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEl69qP5U0gi74m3Vo2Vsr9U8w/nUF\n9KPgqtelz+N/5LMVE9MCwgXVFTyJvxg3uGMsoAplg38dFTYHeJpEmfgwIQ==\n-----END PUBLIC KEY-----\n","policy": {"name": "Default","description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml","sources": [{"name": "Default","policy": ["oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"],"data": ["git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2","oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:f8cb3e1240c4ff6061d370b91b661800c09cc96db791fc9d6925f72e4ba70109","oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea","oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"],"config": {"include": ["slsa_provenance_available"]}}],"publicKey": "k8s://chains-e2e-ozqz/cosign-public-key"},"ec-version": "v0.9.25","effective-time": "2026-08-14T04:40:14.608633112Z"}