apiVersion: v1
kind: Pod
metadata:
  name: root-pod-from-trusted-registry
spec:
  containers:
  - image: ghcr.io/kyverno/test-verify-image:unsigned
    name: kyverno