{"success": false,"components": [{"name": "","containerImage": "quay.io/redhat-appstudio-qe/test-images@sha256:547379187ec0f6fc7c10b2bb1ecba70320a6b2910ab89778839068960dec6ad2","source": {},"violations": [{"msg": "No test data found","metadata": {"code": "test.test_data_found","collections": ["redhat","redhat_security"],"depends_on": ["attestation_type.known_attestation_type"],"description": "Ensure that test data is available either as a TEST_OUTPUT task result in the build pipeline or as verified test-result attestations attached to the image via OCI referrers. To exclude this rule add \"test.test_data_found\" to the `exclude` section of the policy configuration.","solution": "Confirm at least one task in the build pipeline contains a result named TEST_OUTPUT, or that verified test-result attestations (predicateType https://in-toto.io/attestation/test-result/v0.1) are attached to the image via OCI referrers.","title": "Test data found"}}],"successes": [{"msg": "Pass","metadata": {"code": "builtin.attestation.signature_check","description": "The attestation signature matches available signing materials.","title": "Attestation signature check passed"}},{"msg": "Pass","metadata": {"code": "builtin.attestation.syntax_check","description": "The attestation has correct syntax.","title": "Attestation syntax check passed"}},{"msg": "Pass","metadata": {"code": "builtin.image.signature_check","description": "The image signature matches available signing materials.","title": "Image signature check passed"}},{"msg": "Pass","metadata": {"code": "test.rule_data_provided","collections": ["redhat","policy_data","redhat_security"],"description": "Confirm the expected rule data keys have been provided in the expected format. The keys are `supported_tests_results`, `failed_tests_results`, `informative_tests`, `erred_tests_results`, `skipped_tests_results`, and `warned_tests_results`.","title": "Rule data provided"}},{"msg": "Pass","metadata": {"code": "test.test_all_images","collections": ["redhat","redhat_security"],"description": "Ensure that task producing the IMAGES_PROCESSED result contains the digests of the built image.","effective_on": "2024-05-29T00:00:00Z","title": "Image digest is present in IMAGES_PROCESSED result"}}],"success": false,"signatures": [{"keyid": "","sig": "MEQCIDoRYFhoaQQKN54iRUykWI2ahSrxMXHki/005OlVrGtpAiBozQ1SiC7SN459iX/PRkhtd8Illm8ZRDbzYEKDZNyg0g=="}],"attestations": [{"type": "https://in-toto.io/Statement/v0.1","predicateType": "https://slsa.dev/provenance/v0.2","predicateBuildType": "tekton.dev/v1/PipelineRun","signatures": [{"keyid": "SHA256:4p89gHv+sKscOwINQujuMxmdq+cX6aNIXzzGx1y69Ow","sig": "MEUCIAxGR6jzL/wKtugteMgcC6qy0+KvrjbPtnOwfvFRjDA2AiEA6qyvtqpvE4NraMIh6bOi5HialShQ6ohqtsnJatZ8mZI="}]}]}],"key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbBq2ASDZ0KzOu2Y8JH2AcGZyAY/Q\nr6C12DcEafz5mkikEp/enOymNEt5Zcr5kh3T4lYVRgS0MrOvhZw4LSiQBw==\n-----END PUBLIC KEY-----\n","policy": {"name": "Default","description": "Includes rules for levels 1, 2 & 3 of SLSA v0.1. This is the default config used for new Konflux applications. Source: https://github.com/conforma/config/blob/main/default/policy.yaml","sources": [{"name": "Default","policy": ["oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:0d3ab4efb94bd8ee361bda3146cae0c509c41d597431af658ce2570112efe469"],"data": ["git::github.com/release-engineering/rhtap-ec-policy//data?ref=5a749b9a6e46d358ee240e8c884fabd8da93b6c5","oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:1ef4231af73705a7e18f2e35b1e0980c901fcf3f3e89b9370b7c9ac17483ff1c","oci::quay.io/konflux-ci/konflux-vanguard/data-acceptable-bundles:latest@sha256:0b31c7bc77a7463a1bc52f3d3625ef0e0e75443da7fd2de8005d7885282138ea","oci::quay.io/konflux-ci/integration-service-catalog/data-acceptable-bundles:latest@sha256:7b00455045ea3873a72caeb1e7ac7d036bd53963a26409891a4cc9d0d242b9fc"],"config": {"include": ["test"]}}],"publicKey": "k8s://chains-e2e-ycof/cosign-public-key"},"ec-version": "v0.9.25","effective-time": "2026-10-11T02:16:57.897820987Z"}