Usage of /usr/bin/policy-tester:
  -enable-oci11
    	enable experimental OCI 1.1 referrers API for attestation discovery
  -image string
    	image to compare against policy
  -log-level string
    	configure the tool's log level (debug, info, warn, error) (default "info")
  -policy string
    	path to ClusterImagePolicy or URL to fetch from (http/https)
  -resource string
    	path to a kubernetes resource to use with includeSpec, includeObjectMeta
  -trustroot string
    	path to a kubernetes TrustRoot resource to use with the ClusterImagePolicy
  -version
    	return the policy-controller tester version