apiVersion: v1
kind: Pod
metadata:
  namespace: default
  annotations:
    subject.cosign.sigstore.dev/demo: bad
    subject.cosign.sigstore.dev/demoagain: https://github.com/chrisns/cosign-keyless-demo/.github/workflows/ci.yml@refs/heads/invalid
  name: badsubject
spec:
  containers:
    - image: ghcr.io/chrisns/cosign-keyless-demo:latest
      name: demo
    - image: ghcr.io/chrisns/cosign-keyless-demo:latest
      name: demoagain