Description of problem:
Violations in the latest run. Example violation:
✕ [Violation] tasks.required_untrusted_task_found
ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/cluster-api-provider-aws-mce-210@sha256:6be98bfa5307a4537bc7cb787b3a0ea3fe7e9c90f73e2dcef1c23407348429a4
Reason: Required task "rpms-signature-scan" is required and present but not from a trusted task
Term: rpms-signature-scan
Title: All required tasks are from trusted tasks
Description: Ensure that the all required tasks are resolved from trusted tasks. To exclude this rule add
"tasks.required_untrusted_task_found:rpms-signature-scan" to the `exclude` section of the policy configuration.
Solution: Make sure all required tasks in the build pipeline are resolved from trusted tasks.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
- ...