Same images being updated by kyverno for both init and main container

[farru1998]

Hey folks!, just observed a weird behaviour
I have a pod that has one main container as the application container and one init container which grants ownership to a specific directory.

I have a kyverno policy to use only verified images:

Cluster Policy

kind: ClusterPolicy
metadata:
  labels:
    argocd.argoproj.io/instance: kyverno-identity-green
  name: check-images
spec:
  failurePolicy: Fail
  rules:
    - context:
        - apiCall:
            jmesPath: base64_decode( data."tls.crt" )
            urlPath: >-
              /api/v1/namespaces/kyverno-notation-aws/secrets/kyverno-notation-aws-identity-green-svc.kyverno-notation-aws.svc.tls-pair
          name: tlscerts
        - apiCall:
            data:
              - key: images
                value: '{{images}}'
              - key: imageReferences
                value:
                  - xxxx.dkr.ecr.ap-southeast-1.amazonaws.com*
              - key: trustPolicy
                value: tp-test
            method: POST
            service:
              caBundle: '{{ tlscerts }}'
              url: >-
                https://kyverno-notation-aws-identity-green-svc.kyverno-notation-aws/checkimages
          name: response
      exclude:
        any:
          - resources:
              selector:
                matchExpressions:
                  - key: app
                    operator: In
                    values:
                      - identity-account-poc-service
      match:
        any:
          - resources:
              kinds:
                - Pod
              namespaces:
                - test
              operations:
                - CREATE
                - UPDATE
      mutate:
        foreach:
          - list: response.results
            patchesJson6902: |-
              - path: {{ element.path }}
                op: {{ element.op }}
                value: {{ element.value }}
      name: dynamic-rule
  schemaValidation: false
  validationFailureAction: Audit
  webhookTimeoutSeconds: 30

Init Image = grant-owner
Main Image = gateway

What is happening now is somehow the kyverno is sending the same image of init and main container grant-owner for both the init and main container as a result the new pod is not using the gateway image for main application instead it's using grant-owner.
The above scenario only happens less frequently.

Sharing logs of kyverno-notation for reference

2024-09-25T08:49:41.093Z	INFO	verifier/client.go:226	
Sending response {    "
verified": true,    
"results": [      {       
 "op": "replace",        "path": "/spec/containers/0/image",        
"value": "xxxxxx.dkr.ecr.ap-southeast-1.amazonaws.com/grant-owner @sha256:c815ee5...."     
 },     
 {        
"op": "replace",        "path": "/spec/initContainers/0/image",        
"value": "xxxxx.dkr.ecr.ap-southeast-1.amazonaws.com/grant-owner @sha256:c815ee5...."      
}    
]  }