{
  "policy": {
    "description": "Red Hat's enterprise requirements",
    "sources": [
      {
        "name": "Release Policies",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:614408c473895bc7263173ccadcbf782e0c3c7c0a8c10851e6b0c94b5ea448c1"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=debc5dbf7dbb435bfd0f43aa74f5a959b99269b9",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:2bc61ca64a0aacb1461d5eacc9e5468c6d3c6266e9b9b84491ac9a875337288d"
        ],
        "ruleData": {
          "pipeline_intention": "release"
        },
        "config": {
          "exclude": [
            "step_image_registries",
            "tasks.required_tasks_found:prefetch-dependencies",
            "slsa_source_correlated.source_code_reference_provided"
          ],
          "include": [
            "@slsa3"
          ]
        }
      }
    ],
    "publicKey": "k8s://ex-registry-sh-managed-7d16fae9/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEocSG/SnE0vQ20wRfPltlXrY4Ib9B\nCRnFUCg/fndZsXdz0IX5sfzIyspizaTbu4rapV85KirmSBU6XUaLY347xg==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-07-06T18:29:09.314845543Z"
}