{
  "policy": {
    "description": "Red Hat's enterprise requirements",
    "sources": [
      {
        "name": "Release Policies",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=df1123f847bde0108ec39d6a707d29e262735b36",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:21539d308973d4de3250731e82a63806d47555240656f26853afae5706506319"
        ],
        "ruleData": {
          "pipeline_intention": "release"
        },
        "config": {
          "exclude": [
            "step_image_registries",
            "tasks.required_tasks_found:prefetch-dependencies",
            "slsa_source_correlated.source_code_reference_provided"
          ],
          "include": [
            "@slsa3"
          ]
        }
      }
    ],
    "publicKey": "k8s://ex-registry-sh-managed-31f43ea4/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEocSG/SnE0vQ20wRfPltlXrY4Ib9B\nCRnFUCg/fndZsXdz0IX5sfzIyspizaTbu4rapV85KirmSBU6XUaLY347xg==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-08-19T14:52:48.757296671Z"
}