{
    "apiVersion": "v1",
    "items": [
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-05-13T17:17:17Z",
                "generation": 6,
                "name": "ec-policy",
                "namespace": "build-e2e-czqn",
                "resourceVersion": "109191",
                "uid": "97039e18-0719-4f99-b4b2-c2097f865236"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [
                                "slsa_source_correlated.source_code_reference_provided"
                            ],
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-05-13T17:11:15Z",
                "generation": 12,
                "name": "ec-policy",
                "namespace": "chains-e2e-psft",
                "resourceVersion": "90283",
                "uid": "8e2c1b3c-7c18-4774-afc8-b68487ae906c"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "trusted_task.pinned"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-05-13T17:46:57Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-kokohazamar-backwards-compat-dr-managed",
                "resourceVersion": "140517",
                "uid": "11b9672e-1a97-4f67-8930-ff8eb794fdac"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-kokohazamar-backwards-compat-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-05-13T17:46:58Z",
                "generation": 1,
                "name": "dr-ec-policy",
                "namespace": "dr-test-moshekipod-backwards-compat-dr-managed",
                "resourceVersion": "140636",
                "uid": "7760af56-e66e-4daf-8841-855ecaf2e041"
            },
            "spec": {
                "configuration": {
                    "collections": [
                        "@slsa3"
                    ],
                    "exclude": [
                        "step_image_registries",
                        "tasks.required_tasks_found:prefetch-dependencies"
                    ]
                },
                "description": "DR test Enterprise Contract policy",
                "publicKey": "k8s://dr-test-moshekipod-backwards-compat-dr-managed/cosign-public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/default\"},\"name\":\"default\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes rules for levels 1, 2 \\u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml\",\"name\":\"Default\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-13T16:48:20Z",
                "generation": 1,
                "name": "default",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "27218",
                "uid": "8d8fee30-cef0-493d-8fd9-06554838f519"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat\"},\"name\":\"redhat\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml\",\"name\":\"Red Hat\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-13T16:48:21Z",
                "generation": 1,
                "name": "redhat",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "27301",
                "uid": "c31e9766-b7fe-4c60-a44b-dbea8e3394ff"
            },
            "spec": {
                "description": "Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Source: https://github.com/conforma/config/blob/main/redhat/policy.yaml",
                "name": "Red Hat",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-no-hermetic\"},\"name\":\"redhat-no-hermetic\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml\",\"name\":\"Red Hat (non hermetic)\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[\"hermetic_build_task\",\"tasks.required_tasks_found:prefetch-dependencies\"],\"include\":[\"@redhat\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-13T16:48:21Z",
                "generation": 1,
                "name": "redhat-no-hermetic",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "27294",
                "uid": "dae1d85c-0507-4188-a0f3-a188292a42bb"
            },
            "spec": {
                "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Source: https://github.com/conforma/config/blob/main/redhat-no-hermetic/policy.yaml",
                "name": "Red Hat (non hermetic)",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [
                                "hermetic_build_task",
                                "tasks.required_tasks_found:prefetch-dependencies"
                            ],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-rpms\"},\"name\":\"redhat-rpms\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml\",\"name\":\"Red Hat RPMs\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@redhat_rpms\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-13T16:48:21Z",
                "generation": 1,
                "name": "redhat-rpms",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "27295",
                "uid": "b0c0362e-dd24-4822-8d18-228dee706ccb"
            },
            "spec": {
                "description": "For Red Hat RPM builds in Red Hat Konflux. Source: https://github.com/conforma/config/blob/main/redhat-rpms/policy.yaml",
                "name": "Red Hat RPMs",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat_rpms"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/enterprise-contract/rpmbuild-data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/redhat-trusted-tasks\"},\"name\":\"redhat-trusted-tasks\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules used to verify Tekton Task definitions comply to Red Hat's standards.\",\"name\":\"Red Hat Trusted Tasks\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"kind\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-task-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-13T16:48:21Z",
                "generation": 1,
                "name": "redhat-trusted-tasks",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "27300",
                "uid": "40b9dc6a-9f35-4b15-99a1-b75c7ffd366b"
            },
            "spec": {
                "description": "Rules used to verify Tekton Task definitions comply to Red Hat's standards.",
                "name": "Red Hat Trusted Tasks",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "kind"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-task-policy:konflux"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "annotations": {
                    "argocd.argoproj.io/tracking-id": "enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3",
                    "kubectl.kubernetes.io/last-applied-configuration": "{\"apiVersion\":\"appstudio.redhat.com/v1alpha1\",\"kind\":\"EnterpriseContractPolicy\",\"metadata\":{\"annotations\":{\"argocd.argoproj.io/tracking-id\":\"enterprise-contract-in-cluster-local:appstudio.redhat.com/EnterpriseContractPolicy:enterprise-contract-service/slsa3\"},\"name\":\"slsa3\",\"namespace\":\"enterprise-contract-service\"},\"spec\":{\"description\":\"Rules specifically related to levels 1, 2 \\u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml\",\"name\":\"SLSA3\",\"publicKey\":\"k8s://openshift-pipelines/public-key\",\"sources\":[{\"config\":{\"exclude\":[],\"include\":[\"@minimal\",\"@slsa3\"]},\"data\":[\"github.com/release-engineering/rhtap-ec-policy//data\",\"oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest\",\"oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest\"],\"name\":\"Default\",\"policy\":[\"oci::quay.io/enterprise-contract/ec-release-policy:konflux\"]}]}}\n"
                },
                "creationTimestamp": "2026-05-13T16:48:21Z",
                "generation": 1,
                "name": "slsa3",
                "namespace": "enterprise-contract-service",
                "resourceVersion": "27280",
                "uid": "aedc9e39-bd33-4d8e-bdaf-a4bb28a3184a"
            },
            "spec": {
                "description": "Rules specifically related to levels 1, 2 \u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Source: https://github.com/conforma/config/blob/main/slsa3/policy.yaml",
                "name": "SLSA3",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@minimal",
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy//data",
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest",
                            "oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/enterprise-contract/ec-release-policy:konflux"
                        ]
                    }
                ]
            }
        }
    ],
    "kind": "List",
    "metadata": {
        "resourceVersion": ""
    }
}