diff --git a/.github/workflows/contracts/chainloop-vault-codeql.yaml b/.github/workflows/contracts/chainloop-vault-codeql.yaml index 0dadc0ad7..fd143765b 100644 --- a/.github/workflows/contracts/chainloop-vault-codeql.yaml +++ b/.github/workflows/contracts/chainloop-vault-codeql.yaml @@ -17,8 +17,6 @@ spec: with: check_signature: yes check_author_verified: yes - requirements: - - chainloop-best-practices/commit-signed policyGroups: - ref: slsa-checks with: diff --git a/.github/workflows/contracts/chainloop-vault-helm-package.yaml b/.github/workflows/contracts/chainloop-vault-helm-package.yaml index 724d2e5ba..8d1d54794 100644 --- a/.github/workflows/contracts/chainloop-vault-helm-package.yaml +++ b/.github/workflows/contracts/chainloop-vault-helm-package.yaml @@ -23,13 +23,8 @@ spec: with: check_signature: yes check_author_verified: yes - requirements: - - chainloop-best-practices/commit-signed materials: - ref: artifact-signed - requirements: - - chainloop-best-practices/container-signed - - chainloop-best-practices/helm-chart-signed policyGroups: - ref: slsa-checks with: diff --git a/.github/workflows/contracts/chainloop-vault-release.yaml b/.github/workflows/contracts/chainloop-vault-release.yaml index b5484136d..63cfd1c91 100644 --- a/.github/workflows/contracts/chainloop-vault-release.yaml +++ b/.github/workflows/contracts/chainloop-vault-release.yaml @@ -15,13 +15,9 @@ spec: with: check_signature: yes check_author_verified: yes - requirements: - - chainloop-best-practices/commit-signed - ref: containers-with-sbom materials: - ref: artifact-signed - requirements: - - chainloop-best-practices/container-signed policyGroups: - ref: sbom-quality with: diff --git a/.github/workflows/contracts/chainloop-vault-scorecards.yaml b/.github/workflows/contracts/chainloop-vault-scorecards.yaml index 323a41b0b..c1923c283 100644 --- a/.github/workflows/contracts/chainloop-vault-scorecards.yaml +++ b/.github/workflows/contracts/chainloop-vault-scorecards.yaml @@ -16,5 +16,3 @@ spec: - ref: source-commit with: check_signature: yes - requirements: - - chainloop-best-practices/commit-signed