containers-common/default-policy.json

{
    "default": [
        {
            "type": "insecureAcceptAnything"
        }
    ],
    "transports": {
        "docker": {
	    "registry.access.redhat.com": [
		{
		    "type": "sigstoreSigned",
		    "keyPath": "/etc/pki/sigstore/SIGSTORE-redhat-release3",
		    "rekorPublicKeyPath": "/etc/pki/sigstore/REKOR-signing-key"
		}
	    ],
	    "registry.redhat.io": [
		{
		    "type": "sigstoreSigned",
		    "keyPath": "/etc/pki/sigstore/SIGSTORE-redhat-release3",
		    "rekorPublicKeyPath": "/etc/pki/sigstore/REKOR-signing-key"
		}
	    ]
	},
        "docker-daemon": {
	    "": [
		{
		    "type": "insecureAcceptAnything"
		}
	    ]
	}
    }
}