From 039f2b5b2d59962fa1dddba81a41b9887a52d703 Mon Sep 17 00:00:00 2001
From: imbev <imbev@protonmail.com>
Date: Wed, 2 Sep 2026 15:58:32 -0500
Subject: [PATCH] Stop enforcing container signing update policy

---
 files/scripts/90-signing.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/files/scripts/90-signing.sh b/files/scripts/90-signing.sh
index 5e04e5c..cae3b0c 100755
--- a/files/scripts/90-signing.sh
+++ b/files/scripts/90-signing.sh
@@ -19,7 +19,7 @@ mkdir -p $CONTAINER_PKI
 cp ${CONTEXT_PATH}/keys/cosign.pub ${CONTAINER_PKI}/${IMAGE_NAME_FILE}.pub
 cp ${CONTEXT_PATH}/keys/${BACKUP_KEY}.pub ${CONTAINER_PKI}/${BACKUP_KEY}.pub
 
-POLICY_FILE="${CONTAINER_DIR}/policy.json"
+POLICY_FILE="${CONTAINER_DIR}/policy.json.example"
 
 # We need to add our cosign public key to the policy file and make sure
 # that the default policy is set to reject.