diff --git a/pkg/policy/rego.go b/pkg/policy/rego.go
index 942e630..c6851b0 100644
--- a/pkg/policy/rego.go
+++ b/pkg/policy/rego.go
@@ -29,7 +29,7 @@ type regoEvaluator struct {
 func NewRegoEvaluator(debug bool) PolicyEvaluator {
 	return &regoEvaluator{
 		debug: debug,
-		query: "data.attest.digest",
+		query: "data.attest.allow",
 	}
 }