{
  "policy": {
    "description": "Red Hat's enterprise requirements",
    "sources": [
      {
        "name": "Release Policies",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:614408c473895bc7263173ccadcbf782e0c3c7c0a8c10851e6b0c94b5ea448c1"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=4d65cbe855560a5e032ccdf99b3264b9685ccfb6",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:7cbc2a44e8d2d8408eac0dca77dfee9d5e7853e972c93db9c569a746b7037147"
        ],
        "ruleData": {
          "pipeline_intention": "release"
        },
        "config": {
          "exclude": [
            "step_image_registries",
            "tasks.required_tasks_found:prefetch-dependencies",
            "slsa_source_correlated.source_code_reference_provided"
          ],
          "include": [
            "@slsa3"
          ]
        }
      }
    ],
    "publicKey": "k8s://ex-registry-sh-managed-0c1cbd90/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEocSG/SnE0vQ20wRfPltlXrY4Ib9B\nCRnFUCg/fndZsXdz0IX5sfzIyspizaTbu4rapV85KirmSBU6XUaLY347xg==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-07-08T02:37:35.350644901Z"
}