Success: true Result: WARNING Violations: 0, Warnings: 9, Successes: 447 Components: - Name: -sha256:accce62e3f7018ff8dead73b5b4fc3cba816069ed939750555ce0effe6aef99c-arm64 ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:accce62e3f7018ff8dead73b5b4fc3cba816069ed939750555ce0effe6aef99c Violations: 0, Warnings: 3, Successes: 149 - Name: -sha256:718c880015c46cf996593ae2a9fb050caf4f48b9e716cc80fd191b560816968a-amd64 ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:718c880015c46cf996593ae2a9fb050caf4f48b9e716cc80fd191b560816968a Violations: 0, Warnings: 3, Successes: 149 - Name: ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:1d1ffaeff4867f7ccf7126d4e30f376b7becbfee2a65352fde244622fd257acb Violations: 0, Warnings: 3, Successes: 149 Results: › [Warning] base_image_registries.allowed_registries_provided ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:accce62e3f7018ff8dead73b5b4fc3cba816069ed939750555ce0effe6aef99c Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting signing_identities in rule data. Title: Allowed base image registry prefixes list or signing identity was provided Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least one is required by the policy rules in this package. Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities` https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in `allowed_registry_prefixes`. › [Warning] buildah_build_task.disallowed_platform_patterns_pattern ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:accce62e3f7018ff8dead73b5b4fc3cba816069ed939750555ce0effe6aef99c Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^ Title: disallowed_platform_patterns format Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format. › [Warning] test.no_failed_informative_tests ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:accce62e3f7018ff8dead73b5b4fc3cba816069ed939750555ce0effe6aef99c Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test Term: ecosystem-cert-preflight-checks Title: No informative tests failed Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule data. Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not fail. More information about the test should be available in the logs for the build Pipeline. › [Warning] base_image_registries.allowed_registries_provided ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:718c880015c46cf996593ae2a9fb050caf4f48b9e716cc80fd191b560816968a Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting signing_identities in rule data. Title: Allowed base image registry prefixes list or signing identity was provided Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least one is required by the policy rules in this package. Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities` https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in `allowed_registry_prefixes`. › [Warning] buildah_build_task.disallowed_platform_patterns_pattern ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:718c880015c46cf996593ae2a9fb050caf4f48b9e716cc80fd191b560816968a Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^ Title: disallowed_platform_patterns format Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format. › [Warning] test.no_failed_informative_tests ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:718c880015c46cf996593ae2a9fb050caf4f48b9e716cc80fd191b560816968a Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test Term: ecosystem-cert-preflight-checks Title: No informative tests failed Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule data. Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not fail. More information about the test should be available in the logs for the build Pipeline. › [Warning] base_image_registries.allowed_registries_provided ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:1d1ffaeff4867f7ccf7126d4e30f376b7becbfee2a65352fde244622fd257acb Reason: allowed_registry_prefixes is configured without signing_identities. Migrate to signature-based verification by setting signing_identities in rule data. Title: Allowed base image registry prefixes list or signing identity was provided Description: Confirm that either the `allowed_registry_prefixes` or a `signing_identities` entry was provided, since at least one is required by the policy rules in this package. Solution: Make sure to configure either a signing identity under the `rh-release` key in the `signing_identities` https://conforma.dev/docs/cli/configuration.html#_data_sources or a list of trusted registry prefixes in `allowed_registry_prefixes`. › [Warning] buildah_build_task.disallowed_platform_patterns_pattern ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:1d1ffaeff4867f7ccf7126d4e30f376b7becbfee2a65352fde244622fd257acb Reason: Pattern ".*root.*" in disallowed_platform_patterns is not effectively anchored with ^ Title: disallowed_platform_patterns format Description: Confirm the `disallowed_platform_patterns` rule data, if provided matches the expected format. › [Warning] test.no_failed_informative_tests ImageRef: quay.io/konflux-ci/ec-golden-image@sha256:1d1ffaeff4867f7ccf7126d4e30f376b7becbfee2a65352fde244622fd257acb Reason: The Task "ecosystem-cert-preflight-checks" from the build Pipeline reports a failed informative test Term: ecosystem-cert-preflight-checks Title: No informative tests failed Description: Produce a warning if any informative tests have their result set to "FAILED". The result type is configurable by the "failed_tests_results" key, and the list of informative tests is configurable by the "informative_tests" key in the rule data. Solution: There is a test that failed. Make sure that any task in the build pipeline with a result named 'TEST_OUTPUT' does not fail. More information about the test should be available in the logs for the build Pipeline. For more information about policy issues, see the policy documentation: https://conforma.dev/docs/policy/