The image signature policy field raises a violation when image signatures cannot be verified with the specified signature integration. The violation messages may be confusing in certain scenarios, see this real example of a signature verification policy violation:

Container 'main' image signature is verified by io.stackrox.signatureintegration.3fee323b-da48-4fe2-8041-02e0740cc4f5

Note that it states that the signature is verified.

This should be changed to state that the signature is not verified.