fix: add missing image manifest mocks to remaining tests

Add ec.oci.image_manifests mocks to tests that were timing out due to network calls under network isolation.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: dheerajodha

policy/release/slsa_build_scripted_build/slsa_build_scripted_build_test.rego

@@ -30,6 +30,7 @@ test_all_good if {
 	assertions.assert_empty(slsa_build_scripted_build.deny) with input.image as image
 		with input.attestations as [_mock_attestation(tasks)]
 		with data.trusted_tasks as trusted_tasks
+		with ec.oci.image_manifests as _mock_image_manifests
 }
 
 # It's unclear if this should be allowed or not. This unit test exists to

policy/release/tasks/tasks_test.rego

@@ -55,6 +55,7 @@ test_failed_tasks if {
 			"buildConfig": {"tasks": given_tasks},
 		},
 	}}]
+		with ec.oci.image_manifests as _mock_image_manifests
 
 	slsav1_tasks := [
 		tekton_test.with_bundle(tekton_test.slsav1_task("buildah"), _bundle),
@@ -82,13 +83,15 @@ test_failed_tasks if {
 		{"pipelines.openshift.io/runtime": "generic"},
 		{},
 	)]
+		with ec.oci.image_manifests as _mock_image_manifests
 }
 
 test_required_tasks_met if {
 	attestations := _attestations_with_tasks(_slsav02_expected_required_tasks, [])
 	assertions.assert_empty(tasks.deny) with data["pipeline-required-tasks"] as _required_pipeline_tasks
 		with data.trusted_tasks as _trusted_tasks
 		with input.attestations as attestations
+		with ec.oci.image_manifests as _mock_image_manifests
 
 	slsav1_attestations := [tekton_test.slsav1_attestation(_slsav1_expected_required_tasks)]
 	assertions.assert_empty(tasks.deny) with data["pipeline-required-tasks"] as _required_pipeline_tasks
@@ -102,6 +105,7 @@ test_required_tasks_met_no_label if {
 		with data["pipeline-required-tasks"] as {}
 		with data.trusted_tasks as _trusted_tasks
 		with input.attestations as attestations
+		with ec.oci.image_manifests as _mock_image_manifests
 
 	attestations_no_label := _attestations_with_tasks_no_label(_slsav02_expected_required_tasks, [])
 	assertions.assert_empty(tasks.deny) with data["required-tasks"] as _time_based_required_tasks
@@ -155,6 +159,7 @@ test_required_tasks_not_met if {
 	) with data["pipeline-required-tasks"] as _required_pipeline_tasks
 		with data.trusted_tasks as _trusted_tasks
 		with input.attestations as attestations
+		with ec.oci.image_manifests as _mock_image_manifests
 
 	slsav1_filtered_tasks := [task |
 		some task in _slsav1_expected_required_tasks
@@ -225,9 +230,11 @@ test_extra_tasks_ignored if {
 	assertions.assert_empty(tasks.deny) with data["pipeline-required-tasks"] as _required_pipeline_tasks
 		with data.trusted_tasks as _trusted_tasks
 		with input.attestations as attestations
+		with ec.oci.image_manifests as _mock_image_manifests
 	assertions.assert_empty(tasks.warn) with data["pipeline-required-tasks"] as _required_pipeline_tasks
 		with data.trusted_tasks as _trusted_tasks
 		with input.attestations as attestations
+		with ec.oci.image_manifests as _mock_image_manifests
 
 	slsav1_attestations := [tekton_test.slsav1_attestation_full(
 		array.concat(