---
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: require-image-digest
  annotations:
    pod-policies.kyverno.io/autogen-controllers: none
spec:
  rules:
    - name: check-digest
      match:
        resources:
          kinds:
            - Pod
      verifyImages:
        - imageReferences:
            - "*"
          verifyDigest: true


