When using zarf to discover images with the Ironbank chart kyverno-policies, the restrict-image-registries policy, (simple version included in tests), has an entry of:
registry.dso.mil/*
This is a false positive and cases cosign looks up to fail as that is not a valid image.
Environment
Device and OS: RHEL 9 App version: v0.43.1 Kubernetes distro being used: RKE2
Steps to reproduce
kyverno-policies
]()zarf.yaml
zarf dev find-images --skip-cosign
Expected result
Actual Result
Additional Context
When using
zarf
to discover images with the Ironbank chartkyverno-policies
, therestrict-image-registries
policy, (simple version included in tests), has an entry of:registry.dso.mil/*
This is a false positive and cases cosign looks up to fail as that is not a valid image.