{
    "apiVersion": "v1",
    "items": [
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-01T11:52:32Z",
                "generation": 1,
                "name": "default",
                "namespace": "default-tenant-managed",
                "resourceVersion": "37421",
                "uid": "dd3be287-48f6-433b-a8e6-1aa127715131"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Available collections are defined in https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/release_policy.html#_available_rule_collections. If a different policy configuration is desired, this resource can serve as a starting point. See the docs on how to include and exclude rules https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/policy_configuration.html#_including_and_excluding_rules.",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:0affee8ccc186d69e31deb44106c1d6a0aac5774408935025033db7c1a5e8dd9",
                            "github.com/release-engineering/rhtap-ec-policy.git//data?ref=dd1a3dd1bf2299e1da9936b89e7279b6ab443bec"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/conforma/release-policy:konflux@sha256:6eb386faaf76de0d7dbc9f9e770a7f5639ebcee88e4ed4f004f8053189b21eae"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-01T11:37:58Z",
                "generation": 1,
                "labels": {
                    "konflux.konflux-ci.dev/component": "enterprise-contract",
                    "konflux.konflux-ci.dev/owner": "konflux-enterprise-contract"
                },
                "name": "all",
                "namespace": "enterprise-contract-service",
                "ownerReferences": [
                    {
                        "apiVersion": "konflux.konflux-ci.dev/v1alpha1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "KonfluxEnterpriseContract",
                        "name": "konflux-enterprise-contract",
                        "uid": "5b1809cc-5bf8-4f8a-9d1d-ffd224aae6bc"
                    }
                ],
                "resourceVersion": "28323",
                "uid": "fa9ec7ca-111c-453d-92ec-7c07267f46fd"
            },
            "spec": {
                "description": "Include every rule in the default policy source. For experiments only. This is not expected to pass for Konflux builds without excluding some rules. Available collections are defined in https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/release_policy.html#_available_rule_collections. If a different policy configuration is desired, this resource can serve as a starting point. See the docs on how to include and exclude rules https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/policy_configuration.html#_including_and_excluding_rules.",
                "name": "Everything (experimental)",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "*"
                            ]
                        },
                        "data": [
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:0affee8ccc186d69e31deb44106c1d6a0aac5774408935025033db7c1a5e8dd9",
                            "github.com/release-engineering/rhtap-ec-policy.git//data?ref=dd1a3dd1bf2299e1da9936b89e7279b6ab443bec"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/conforma/release-policy:konflux@sha256:6eb386faaf76de0d7dbc9f9e770a7f5639ebcee88e4ed4f004f8053189b21eae"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-01T11:37:58Z",
                "generation": 1,
                "labels": {
                    "konflux.konflux-ci.dev/component": "enterprise-contract",
                    "konflux.konflux-ci.dev/owner": "konflux-enterprise-contract"
                },
                "name": "default",
                "namespace": "enterprise-contract-service",
                "ownerReferences": [
                    {
                        "apiVersion": "konflux.konflux-ci.dev/v1alpha1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "KonfluxEnterpriseContract",
                        "name": "konflux-enterprise-contract",
                        "uid": "5b1809cc-5bf8-4f8a-9d1d-ffd224aae6bc"
                    }
                ],
                "resourceVersion": "28335",
                "uid": "feda6fc7-19ea-43c1-a356-78f1db380e1c"
            },
            "spec": {
                "description": "Includes rules for levels 1, 2 \u0026 3 of SLSA v0.1. This is the default config used for new Konflux applications. Available collections are defined in https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/release_policy.html#_available_rule_collections. If a different policy configuration is desired, this resource can serve as a starting point. See the docs on how to include and exclude rules https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/policy_configuration.html#_including_and_excluding_rules.",
                "name": "Default",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:0affee8ccc186d69e31deb44106c1d6a0aac5774408935025033db7c1a5e8dd9",
                            "github.com/release-engineering/rhtap-ec-policy.git//data?ref=dd1a3dd1bf2299e1da9936b89e7279b6ab443bec"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/conforma/release-policy:konflux@sha256:6eb386faaf76de0d7dbc9f9e770a7f5639ebcee88e4ed4f004f8053189b21eae"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-01T11:37:58Z",
                "generation": 1,
                "labels": {
                    "konflux.konflux-ci.dev/component": "enterprise-contract",
                    "konflux.konflux-ci.dev/owner": "konflux-enterprise-contract"
                },
                "name": "redhat",
                "namespace": "enterprise-contract-service",
                "ownerReferences": [
                    {
                        "apiVersion": "konflux.konflux-ci.dev/v1alpha1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "KonfluxEnterpriseContract",
                        "name": "konflux-enterprise-contract",
                        "uid": "5b1809cc-5bf8-4f8a-9d1d-ffd224aae6bc"
                    }
                ],
                "resourceVersion": "28344",
                "uid": "e548aa62-6e3c-4142-b74e-2054e391136b"
            },
            "spec": {
                "description": "Includes the full set of rules and policies required internally by Red Hat when building Red Hat products. Available collections are defined in https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/release_policy.html#_available_rule_collections. If a different policy configuration is desired, this resource can serve as a starting point. See the docs on how to include and exclude rules https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/policy_configuration.html#_including_and_excluding_rules.",
                "name": "Red Hat",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:0affee8ccc186d69e31deb44106c1d6a0aac5774408935025033db7c1a5e8dd9",
                            "github.com/release-engineering/rhtap-ec-policy.git//data?ref=dd1a3dd1bf2299e1da9936b89e7279b6ab443bec"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/conforma/release-policy:konflux@sha256:6eb386faaf76de0d7dbc9f9e770a7f5639ebcee88e4ed4f004f8053189b21eae"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-01T11:37:58Z",
                "generation": 1,
                "labels": {
                    "konflux.konflux-ci.dev/component": "enterprise-contract",
                    "konflux.konflux-ci.dev/owner": "konflux-enterprise-contract"
                },
                "name": "redhat-no-hermetic",
                "namespace": "enterprise-contract-service",
                "ownerReferences": [
                    {
                        "apiVersion": "konflux.konflux-ci.dev/v1alpha1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "KonfluxEnterpriseContract",
                        "name": "konflux-enterprise-contract",
                        "uid": "5b1809cc-5bf8-4f8a-9d1d-ffd224aae6bc"
                    }
                ],
                "resourceVersion": "28357",
                "uid": "92af61da-574d-49b0-ab2a-c8c0f1d3a4ed"
            },
            "spec": {
                "description": "Includes most of the rules and policies required internally by Red Hat when building Red Hat products. It excludes the requirement of hermetic builds. Available collections are defined in https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/release_policy.html#_available_rule_collections. If a different policy configuration is desired, this resource can serve as a starting point. See the docs on how to include and exclude rules https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/policy_configuration.html#_including_and_excluding_rules.",
                "name": "Red Hat (non hermetic)",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [
                                "hermetic_build_task",
                                "tasks.required_tasks_found:prefetch-dependencies"
                            ],
                            "include": [
                                "@redhat"
                            ]
                        },
                        "data": [
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:0affee8ccc186d69e31deb44106c1d6a0aac5774408935025033db7c1a5e8dd9",
                            "github.com/release-engineering/rhtap-ec-policy.git//data?ref=dd1a3dd1bf2299e1da9936b89e7279b6ab443bec"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/conforma/release-policy:konflux@sha256:6eb386faaf76de0d7dbc9f9e770a7f5639ebcee88e4ed4f004f8053189b21eae"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-01T11:37:58Z",
                "generation": 1,
                "labels": {
                    "konflux.konflux-ci.dev/component": "enterprise-contract",
                    "konflux.konflux-ci.dev/owner": "konflux-enterprise-contract"
                },
                "name": "redhat-trusted-tasks",
                "namespace": "enterprise-contract-service",
                "ownerReferences": [
                    {
                        "apiVersion": "konflux.konflux-ci.dev/v1alpha1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "KonfluxEnterpriseContract",
                        "name": "konflux-enterprise-contract",
                        "uid": "5b1809cc-5bf8-4f8a-9d1d-ffd224aae6bc"
                    }
                ],
                "resourceVersion": "28367",
                "uid": "550b7c1f-3bb1-4c6f-91b0-82e6d7f3d418"
            },
            "spec": {
                "description": "Rules used to verify Tekton Task definitions comply to Red Hat's standards.",
                "name": "Red Hat Trusted Tasks",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "kind"
                            ]
                        },
                        "data": [
                            "github.com/release-engineering/rhtap-ec-policy.git//data?ref=dd1a3dd1bf2299e1da9936b89e7279b6ab443bec"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/conforma/task-policy:konflux@sha256:d653a9e8c2280556561dfea239190f56e6d4b34a0a2ae7fda58fd2221abaeb77"
                        ]
                    }
                ]
            }
        },
        {
            "apiVersion": "appstudio.redhat.com/v1alpha1",
            "kind": "EnterpriseContractPolicy",
            "metadata": {
                "creationTimestamp": "2026-04-01T11:37:58Z",
                "generation": 1,
                "labels": {
                    "konflux.konflux-ci.dev/component": "enterprise-contract",
                    "konflux.konflux-ci.dev/owner": "konflux-enterprise-contract"
                },
                "name": "slsa3",
                "namespace": "enterprise-contract-service",
                "ownerReferences": [
                    {
                        "apiVersion": "konflux.konflux-ci.dev/v1alpha1",
                        "blockOwnerDeletion": true,
                        "controller": true,
                        "kind": "KonfluxEnterpriseContract",
                        "name": "konflux-enterprise-contract",
                        "uid": "5b1809cc-5bf8-4f8a-9d1d-ffd224aae6bc"
                    }
                ],
                "resourceVersion": "28383",
                "uid": "971a5252-a7e2-4eef-b9f8-2fcfdd4a79c1"
            },
            "spec": {
                "description": "Rules specifically related to levels 1, 2 \u0026 3 of SLSA v0.1, plus a set of basic checks that are expected to pass for all Konflux builds. Available collections are defined in https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/release_policy.html#_available_rule_collections. If a different policy configuration is desired, this resource can serve as a starting point. See the docs on how to include and exclude rules https://redhat-appstudio.github.io/docs.stonesoup.io/ec-policies/policy_configuration.html#_including_and_excluding_rules.",
                "name": "SLSA3",
                "publicKey": "k8s://openshift-pipelines/public-key",
                "sources": [
                    {
                        "config": {
                            "exclude": [],
                            "include": [
                                "@minimal",
                                "@slsa3"
                            ]
                        },
                        "data": [
                            "oci::quay.io/konflux-ci/tekton-catalog/data-acceptable-bundles:latest@sha256:0affee8ccc186d69e31deb44106c1d6a0aac5774408935025033db7c1a5e8dd9",
                            "github.com/release-engineering/rhtap-ec-policy.git//data?ref=dd1a3dd1bf2299e1da9936b89e7279b6ab443bec"
                        ],
                        "name": "Default",
                        "policy": [
                            "oci::quay.io/conforma/release-policy:konflux@sha256:6eb386faaf76de0d7dbc9f9e770a7f5639ebcee88e4ed4f004f8053189b21eae"
                        ]
                    }
                ]
            }
        }
    ],
    "kind": "List",
    "metadata": {
        "resourceVersion": ""
    }
}