fix: add contract without policies for getting started (#2077)

Signed-off-by: Jose I. Paris <[email protected]>

Author: jiparis

app/controlplane/configs/config.devel.yaml

@@ -94,10 +94,11 @@ auth:
 prometheus_integration:
   - org_name: "development"
 
-policy_providers:
-  - name: chainloop
-    default: true
-    url: http://localhost:8002/v1
+# Policy providers configuration
+# policy_providers:
+#   - name: chainloop
+#     default: true
+#     url: http://localhost:8002/v1
 
 enable_profiler: true
 

docs/examples/quickstart/quickstart-contract-oss.yaml

@@ -0,0 +1,12 @@
+# This is an example contract that expects a container, an SBOM, and a vulnerabilities report.
+schemaVersion: v1
+materials:
+  - name: container
+    type: CONTAINER_IMAGE
+  - name: sbom
+    type: SBOM_CYCLONEDX_JSON
+    optional: true
+  - name: vulnerabilities-report
+    type: SARIF
+    optional: true
+