{
  "policy": {
    "description": "Red Hat's enterprise requirements",
    "sources": [
      {
        "name": "Release Policies",
        "policy": [
          "oci::quay.io/enterprise-contract/ec-release-policy:konflux@sha256:ee5c3a020c9545eca738ed87198af0b235463069b2d72c5dba609364a83321d2"
        ],
        "data": [
          "git::github.com/release-engineering/rhtap-ec-policy//data?ref=a32d53f84f63c1157d0df30d949d07b064ed74a2",
          "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:128c7277cab5d91f5d374e169c3785bc5f1244c38150cd0626fb15f37830cbc1"
        ],
        "ruleData": {
          "pipeline_intention": "release"
        },
        "config": {
          "exclude": [
            "step_image_registries",
            "tasks.required_tasks_found:prefetch-dependencies",
            "slsa_source_correlated.source_code_reference_provided"
          ],
          "include": [
            "@slsa3"
          ]
        }
      }
    ],
    "publicKey": "k8s://ex-registry-sh-managed-e67c4008/cosign-public-key"
  },
  "key": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEocSG/SnE0vQ20wRfPltlXrY4Ib9B\nCRnFUCg/fndZsXdz0IX5sfzIyspizaTbu4rapV85KirmSBU6XUaLY347xg==\n-----END PUBLIC KEY-----\n",
  "effective-time": "2026-08-18T16:43:15.279269367Z"
}