https://github.com/github/artifact-attestations-helm-charts/blob/8379457dc0638a1614eeba3ce8fde9bfa5079910/charts/trust-policies/templates/clusterimagepolicy-exempt.yaml
From the CRD:
name
Name is the name for this authority. Used by the CIP Policy validator to be
able to reference matching signature or attestation verifications. If not
specified, the name will be authority-
This leads to the Policy Controller ArgoCD application being constantly out-of-sync, since there is always a diff between the manifest (without the name field) and the actual resource (with the name field).