Replace "Code tampering detected" with a less alarmist message

[st3penta]

The trusted_task policy rules emit the message "Code tampering detected" in two scenarios:

1. When a trusted artifact input was not produced by the pipeline (valid_trusted_artifact_inputs rule in policy/release/trusted_task/trusted_task.rego around line 208)
2. When an untrusted PipelineTask is found in the build chain (around line 552)

This wording is overly alarming and can cause unnecessary panic for users whose pipelines simply have a configuration issue or include a task not yet on the trusted list.

The message should be replaced with something more accurate and measured, such as "Untrusted task or input detected in build pipeline" or similar.

The corresponding test expectations in trusted_task_test.rego and documentation in release_trusted_task.adoc must also be updated.

[fullsend-ai-triage]

🤖 Finished Triage · ✅ Success · Started 10:19 AM UTC · Completed 10:21 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-triage]

Triage Summary

Severity: Low | Category: Enhancement

The issue is well-described and ready for implementation. Verified that policy/release/trusted_task/trusted_task.rego contains "Code tampering detected" at exactly two locations:

• Line 208 — emitted when a trusted artifact input was not produced by the pipeline
• Line 552 — emitted when an untrusted PipelineTask is found in the build chain

Recommended Fix

1. Replace the message string at both locations with something more accurate (e.g., "Untrusted task or input detected in build pipeline")
2. Update all matching test expectations in trusted_task_test.rego
3. Regenerate docs with make generate-docs and commit any changed files under antora/
4. Run make ci to verify full test suite and 100% coverage

Proposed Test Verification

# After updating message strings:
make test                  # Verify all tests pass
make generate-docs         # Regenerate documentation
make ci                    # Full CI validation

# Additionally, confirm no stale references:
grep -r "Code tampering detected" policy/
# Should return zero matches after the fix

This is a good candidate for a first-time contributor given its well-defined scope.

---

Labels: This is a well-scoped text change suitable for newcomers, and the existing 'enhancement' label is appropriate.