{
  "policy": {
    "name": "Default",
    "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Available collections are defined in https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/release_policy.html#_available_rule_collections. If a different policy configuration is desired, this resource can serve as a starting point. See the docs on how to include and exclude rules https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/policy_configuration.html#_including_and_excluding_rules.",
    "sources": [
      {
        "name": "Default",
        "policy": [
          "oci::quay.io/conforma/release-policy:latest@sha256:2d9f3d23e85132ab3488a268ab47e27ce0a4aeeb02a34b2f3eeab194d9864e87"
        ],
        "data": [
          "git::github.com/konflux-ci/konflux-operator-trusted-sources//data?ref=631d23a6fe1a9f8623d73b84958417de5c13343f",
          "git::github.com/redhat-appstudio/tsf-conforma-data//data?ref=1966f21842d507441a7a5e1c7de9071cf3f9ec53"
        ],
        "config": {
          "exclude": [
            "hermetic_task",
            "source_image",
            "rpm_repos"
          ],
          "include": [
            "@redhat"
          ]
        }
      }
    ],
    "rekorUrl": "http://rekor-server.tsf-tas.svc.cluster.local"
  },
  "key": "",
  "effective-time": "2026-05-08T18:40:29.895760517Z"
}