Description of problem:

✕ [Violation] source_image.signed 
  ImageRef: quay.io/redhat-user-workloads/crt-redhat-acm-tenant/multicluster-operators-application-acm-213@sha256:c7e0f33a35e3eac3a680989fb2b9c0683ae276baf25a00c369bec651b2f1c743
  Reason: Image signature verification failed for
  quay.io/redhat-user-workloads/crt-redhat-acm-tenant/multicluster-operators-application-acm-213:sha256-8f65b054651bb1d6f27343de34cf9e9414ee925f41ed118760402663c7337ea7.src@sha256:95887e2fdee8f502a5e7e5de32de840187aee9aa1a78fd3edd0fc9257ceeeb31: 
  verify image signature: no signatures found
  Title: Signed
  Description: Verify the source container image is signed. To exclude this rule add "source_image.signed" to the `exclude`
  section of the policy configuration. 

https://konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com/ns/rhtap-releng-tenant/applications/release-acm-213/pipelineruns/managed-c6nkp?releaseName=release-acm-213-c6f2q-a3ff61b-c8ng2

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:

1.  
2.  
3. ...

Actual results:

Expected results:

Additional info: