pod: python-component-mdtowg-on-3254a1f205658359c2b823be7f360cf1-pod | init container: prepare
2025/12/25 14:31:09 Entrypoint initialization

 pod: python-component-mdtowg-on-3254a1f205658359c2b823be7f360cf1-pod | init container: place-scripts
2025/12/25 14:31:10 Decoded script /tekton/scripts/script-0-lsllc
2025/12/25 14:31:10 Decoded script /tekton/scripts/script-1-82s8p

 pod: python-component-mdtowg-on-3254a1f205658359c2b823be7f360cf1-pod | init container: working-dir-initializer

pod: python-component-mdtowg-on-3254a1f205658359c2b823be7f360cf1-pod | container step-sast-shell-check: 
+ source /utils.sh
++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache
++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index
+ trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT
+ [[ -z '' ]]
+ PROJECT_NAME=python-component-mdtowg
+ echo 'INFO: The PROJECT_NAME used is: python-component-mdtowg'
+ ca_bundle=/mnt/trusted-ca/ca-bundle.crt
INFO: The PROJECT_NAME used is: python-component-mdtowg
+ '[' -f /mnt/trusted-ca/ca-bundle.crt ']'
+ echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt'
+ cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
+ update-ca-trust
++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck
+ PACKAGE_VERSION=ShellCheck-0.10.0-3.el9
+ OUTPUT_FILE=shellcheck-results.json
+ SOURCE_CODE_DIR=/workspace/workspace/source
+ declare -a ALL_TARGETS
+ IFS=,
+ read -ra TARGET_ARRAY
+ for d in "${TARGET_ARRAY[@]}"
+ potential_path=/workspace/workspace/source/.
++ realpath -m /workspace/workspace/source/.
+ resolved_path=/workspace/workspace/source
+ [[ /workspace/workspace/source == \/\w\o\r\k\s\p\a\c\e\/\w\o\r\k\s\p\a\c\e\/\s\o\u\r\c\e* ]]
+ ALL_TARGETS+=("$resolved_path")
+ '[' -z '' ']'
+ '[' -r /sys/fs/cgroup/cpu.max ']'
+ read -r quota period
+ '[' 800000 '!=' max ']'
+ '[' -n 100000 ']'
+ '[' 100000 -gt 0 ']'
+ export SC_JOBS=8
+ SC_JOBS=8
INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh
+ echo 'INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh'
+ /usr/share/csmock/scripts/run-shellcheck.sh /workspace/workspace/source
Looking for shell scripts................ done
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/applypatch-msg.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/commit-msg.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/post-update.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/prepare-commit-msg.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-applypatch.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-commit.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-merge-commit.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-push.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-rebase.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-receive.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/push-to-checkout.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/sendemail-validate.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/update.sample
+ CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}")
+ [[ true == \t\r\u\e ]]
+ CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|'
+ CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|'
+ CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$'
+ CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER")
+ csgrep --mode=json --strip-path-prefix=/workspace/workspace/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-100.json ./shellcheck-results/sc-102.json ./shellcheck-results/sc-121.json ./shellcheck-results/sc-133.json ./shellcheck-results/sc-135.json ./shellcheck-results/sc-137.json ./shellcheck-results/sc-88.json ./shellcheck-results/sc-91.json ./shellcheck-results/sc-93.json ./shellcheck-results/sc-97.json
+ [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]]
+ KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git
+ PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives
+ KFP_DIR=known-false-positives
+ KFP_CLONED=0
+ mkdir known-false-positives
+ [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]]
+ echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... '
+ curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives
++ head -1
curl: (6) Could not resolve host: gitlab.cee.redhat.com
+ [[ 0 -eq 0 ]]
INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered
ShellCheck results have been saved to shellcheck-results.json
+ echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered'
+ echo 'ShellCheck results have been saved to shellcheck-results.json'
+ csgrep --mode=evtstat shellcheck-results.json
+ csgrep --mode=sarif shellcheck-results.json
+ note='Task sast-shell-check completed successfully.'
++ make_result_json -r SUCCESS -t 'Task sast-shell-check completed successfully.'
++ local RESULT=
++ local SUCCESSES=0
++ local FAILURES=0
++ local WARNINGS=0
++ local 'NOTE=For details, check Tekton task log.'
++ local NAMESPACE=default
++ local OUTPUT
++ local OPTIND opt
++ getopts :r:s:f:w:t:n: opt
++ case "${opt}" in
++ RESULT=SUCCESS
++ getopts :r:s:f:w:t:n: opt
++ case "${opt}" in
++ NOTE='Task sast-shell-check completed successfully.'
++ getopts :r:s:f:w:t:n: opt
++ shift 4
++ '[' -z SUCCESS ']'
++ case "${RESULT}" in
++++ date -u --iso-8601=seconds
+++ jq -rce --arg date 2025-12-25T14:31:16+00:00 --arg result SUCCESS --arg note 'Task sast-shell-check completed successfully.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{  result: $result,
        timestamp: $date,
        note: $note,
        namespace: $namespace,
        successes: $successes|tonumber,
        failures: $failures|tonumber,
        warnings: $warnings|tonumber
    }'
++ OUTPUT='{"result":"SUCCESS","timestamp":"2025-12-25T14:31:16+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}'
++ echo '{"result":"SUCCESS","timestamp":"2025-12-25T14:31:16+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}'
+ TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2025-12-25T14:31:16+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}'
+ echo '{"result":"SUCCESS","timestamp":"2025-12-25T14:31:16+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}'
+ tee /tekton/results/TEST_OUTPUT
{"result":"SUCCESS","timestamp":"2025-12-25T14:31:16+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}
+ handle_error /tekton/results/TEST_OUTPUT
+ exit_code=0
+ '[' 0 -ne 0 ']'
+ exit 0

pod: python-component-mdtowg-on-3254a1f205658359c2b823be7f360cf1-pod | container step-upload: 
Selecting auth
Using token for quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg
Attaching to quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c
Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c@sha256:aee8176a8d16548fa1313c2a37552ba6c50908b994cbdd85e3cc4cd9f0c30071 shellcheck-results.sarif:application/sarif+json
Preparing shellcheck-results.sarif
Exists    44136fa355b3 application/vnd.oci.empty.v1+json
Exists    3b606a9dd3a1 shellcheck-results.sarif
Uploading e60f779b7e21 application/vnd.oci.image.manifest.v1+json
Uploaded  e60f779b7e21 application/vnd.oci.image.manifest.v1+json
Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c@sha256:aee8176a8d16548fa1313c2a37552ba6c50908b994cbdd85e3cc4cd9f0c30071
Digest: sha256:e60f779b7e21deea736811eaca75e5239348584c0d11c2da8133ea5ed2c77435
No excluded-findings.json exists. Skipping upload.

 pod: python-component-mdtowg-on-4fd7f36df96d96567db61ae45c45e723-pod | init container: prepare
2025/12/25 14:27:17 Entrypoint initialization

 pod: python-component-mdtowg-on-4fd7f36df96d96567db61ae45c45e723-pod | init container: place-scripts
2025/12/25 14:27:19 Decoded script /tekton/scripts/script-0-lpksx
2025/12/25 14:27:19 Decoded script /tekton/scripts/script-1-tg4dc

pod: python-component-mdtowg-on-4fd7f36df96d96567db61ae45c45e723-pod | container step-clone: 
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
{"level":"info","ts":1766672841.1766515,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"}
{"level":"info","ts":1766672841.728129,"caller":"git/git.go:218","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/sample-multi-component @ 6c126114adc53a6ab27d40c01051b17240e65e2c (grafted, HEAD) in path /workspace/output/source"}
{"level":"info","ts":1766672841.7282262,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"}
{"level":"info","ts":1766672841.7691536,"caller":"git/git.go:267","msg":"Successfully initialized and updated submodules in path /workspace/output/source"}
Merge option disabled. Using checked-out revision 6c126114adc53a6ab27d40c01051b17240e65e2c directly.

pod: python-component-mdtowg-on-4fd7f36df96d96567db61ae45c45e723-pod | container step-symlink-check: 
Running symlink check

 pod: python-component-mdtowg-on-a5cb896321914ceae40a09b955942bae-pod | init container: prepare
2025/12/25 14:29:49 Entrypoint initialization

 pod: python-component-mdtowg-on-a5cb896321914ceae40a09b955942bae-pod | init container: place-scripts
2025/12/25 14:30:05 Decoded script /tekton/scripts/script-0-4vzmd
2025/12/25 14:30:05 Decoded script /tekton/scripts/script-1-5fph2
2025/12/25 14:30:05 Decoded script /tekton/scripts/script-2-g82br

pod: python-component-mdtowg-on-a5cb896321914ceae40a09b955942bae-pod | container step-build: 
[2025-12-25T14:30:13,872520200+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
fe526cb5f4b0fcd963f74d8a8fdefaa082fca9982cd4d746b68a5c7cb4ee5e01
Skipping image index generation. Returning results for quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg@sha256:aee8176a8d16548fa1313c2a37552ba6c50908b994cbdd85e3cc4cd9f0c30071.

pod: python-component-mdtowg-on-a5cb896321914ceae40a09b955942bae-pod | container step-create-sbom: 
The manifest_data.json file does not exist. Skipping the SBOM creation...

pod: python-component-mdtowg-on-a5cb896321914ceae40a09b955942bae-pod | container step-upload-sbom: 
[2025-12-25T14:30:18,215827038+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
The index.spdx.json file does not exists. Skipping the SBOM upload...

 pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | init container: prepare
2025/12/25 14:27:43 Entrypoint initialization

 pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | init container: place-scripts
2025/12/25 14:27:46 Decoded script /tekton/scripts/script-0-qm2c7
2025/12/25 14:27:46 Decoded script /tekton/scripts/script-1-9m5f2
2025/12/25 14:27:46 Decoded script /tekton/scripts/script-2-ntxxs
2025/12/25 14:27:46 Decoded script /tekton/scripts/script-3-djqgx
2025/12/25 14:27:46 Decoded script /tekton/scripts/script-4-mcpgl

 pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | init container: working-dir-initializer

pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | container step-build: 
[2025-12-25T14:28:13,132673922+00:00] Validate context path
[2025-12-25T14:28:13,138143822+00:00] Update CA trust
[2025-12-25T14:28:13,139998816+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2025-12-25T14:28:17,995761371+00:00] Prepare Dockerfile
Checking if /var/workdir/cachi2/output/bom.json exists.
Could not find prefetched sbom. No content_sets found for ICM
[2025-12-25T14:28:18,061992341+00:00] Prepare system (architecture: x86_64)
[2025-12-25T14:28:22,473557782+00:00] Setup prefetched
Trying to pull registry.access.redhat.com/ubi9/python-39:1-117.1684741281...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:8a2e9815396eaa57b0dfe27b2dfc442417f06aa70974c358f198980b533c7942
Copying blob sha256:5465449a2ea5d8a7e05fa498c8ba35f0ce7714b0ad37e716961fca17dfa1ef13
Copying blob sha256:085efe85e9dfb0b3d5d2392e4b78660a3091bf1ded336315117a627fbdd0567d
Copying blob sha256:a07d808ddf4404b3885fef6100142a973cc667b2c3c4abcf4db96508795b1efb
Copying config sha256:45c8f23c11bb64f238236aaf5cbe05595778e1d4fb6c06109c6fcc0a6b57a45b
Writing manifest to image destination
Storing signatures
[2025-12-25T14:28:37,070118860+00:00] Unsetting proxy
{
  "architecture": "x86_64",
  "build-date": "2025-12-25T14:28:22Z",
  "com.redhat.component": "python-39-container",
  "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI",
  "description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.",
  "distribution-scope": "public",
  "io.buildah.version": "1.41.4",
  "io.buildpacks.stack.id": "com.redhat.stacks.ubi9-python-39",
  "io.k8s.description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.",
  "io.k8s.display-name": "Python 3.9",
  "io.openshift.expose-services": "8080:http",
  "io.openshift.s2i.scripts-url": "image:///usr/libexec/s2i",
  "io.openshift.tags": "builder,python,python39,python-39,rh-python39",
  "io.s2i.scripts-url": "image:///usr/libexec/s2i",
  "maintainer": "SoftwareCollections.org <sclorg@redhat.com>",
  "name": "ubi9/python-39",
  "release": "117.1684741281",
  "summary": "Platform for building and running Python 3.9 applications",
  "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi9/python-39/images/1-117.1684741281",
  "usage": "s2i build https://github.com/sclorg/s2i-python-container.git --context-dir=3.9/test/setup-test-app/ ubi9/python-39 python-sample-app",
  "vcs-ref": "6c126114adc53a6ab27d40c01051b17240e65e2c",
  "vcs-type": "git",
  "vendor": "Red Hat, Inc.",
  "version": "1",
  "org.opencontainers.image.revision": "6c126114adc53a6ab27d40c01051b17240e65e2c",
  "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/sample-multi-component",
  "quay.expires-after": "5d",
  "org.opencontainers.image.created": "2025-12-25T14:28:22Z"
}
[2025-12-25T14:28:37,137499017+00:00] Register sub-man
Adding the entitlement to the build
[2025-12-25T14:28:37,143048669+00:00] Add secrets
[2025-12-25T14:28:37,163957175+00:00] Run buildah build
[2025-12-25T14:28:37,166448954+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=6c126114adc53a6ab27d40c01051b17240e65e2c --label org.opencontainers.image.revision=6c126114adc53a6ab27d40c01051b17240e65e2c --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --label quay.expires-after=5d --label build-date=2025-12-25T14:28:22Z --label org.opencontainers.image.created=2025-12-25T14:28:22Z --annotation org.opencontainers.image.revision=6c126114adc53a6ab27d40c01051b17240e65e2c --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --annotation org.opencontainers.image.created=2025-12-25T14:28:22Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.Ss8DaX -t quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c . 
STEP 1/10: FROM registry.access.redhat.com/ubi9/python-39:1-117.1684741281
STEP 2/10: EXPOSE 8081/tcp
STEP 3/10: ENV FLASK_PORT=8081
STEP 4/10: WORKDIR /projects
STEP 5/10: COPY . .
STEP 6/10: RUN   if [ -f requirements.txt ];     then pip install -r requirements.txt;   elif [ `ls -1q *.txt | wc -l` == 1 ];     then pip install -r *.txt;   fi
Collecting Flask==2.3.3
  Downloading flask-2.3.3-py3-none-any.whl (96 kB)
Collecting Jinja2>=3.1.2
  Downloading jinja2-3.1.6-py3-none-any.whl (134 kB)
Collecting importlib-metadata>=3.6.0
  Downloading importlib_metadata-8.7.1-py3-none-any.whl (27 kB)
Collecting blinker>=1.6.2
  Downloading blinker-1.9.0-py3-none-any.whl (8.5 kB)
Collecting Werkzeug>=2.3.7
  Downloading werkzeug-3.1.4-py3-none-any.whl (224 kB)
Collecting itsdangerous>=2.1.2
  Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB)
Collecting click>=8.1.3
  Downloading click-8.1.8-py3-none-any.whl (98 kB)
Collecting zipp>=3.20
  Downloading zipp-3.23.0-py3-none-any.whl (10 kB)
Collecting MarkupSafe>=2.0
  Downloading markupsafe-3.0.3-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (20 kB)
Installing collected packages: zipp, MarkupSafe, Werkzeug, Jinja2, itsdangerous, importlib-metadata, click, blinker, Flask
Successfully installed Flask-2.3.3 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.4 blinker-1.9.0 click-8.1.8 importlib-metadata-8.7.1 itsdangerous-2.2.0 zipp-3.23.0
WARNING: You are using pip version 21.3.1; however, version 25.3 is available.
You should consider upgrading via the '/opt/app-root/bin/python3.9 -m pip install --upgrade pip' command.
STEP 7/10: CMD [ "python", "./app.py" ]
STEP 8/10: COPY labels.json /usr/share/buildinfo/labels.json
STEP 9/10: COPY labels.json /root/buildinfo/labels.json
STEP 10/10: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="6c126114adc53a6ab27d40c01051b17240e65e2c" "org.opencontainers.image.revision"="6c126114adc53a6ab27d40c01051b17240e65e2c" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/sample-multi-component" "quay.expires-after"="5d" "build-date"="2025-12-25T14:28:22Z" "org.opencontainers.image.created"="2025-12-25T14:28:22Z"
COMMIT quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c
--> 46bbff0d2c26
Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c
46bbff0d2c26609c32b5b3f19f9bb458bf1be529bda54f968f68a8f73003a970
[2025-12-25T14:28:42,371724836+00:00] Unsetting proxy
[2025-12-25T14:28:42,374109823+00:00] Add metadata
Recording base image digests used
registry.access.redhat.com/ubi9/python-39:1-117.1684741281 registry.access.redhat.com/ubi9/python-39:1-117.1684741281@sha256:40a58935b9c22664927b22bf256f53a3d744ddb7316f3af18061099e199526ee
Getting image source signatures
Copying blob sha256:2379a708d224e560e88c302f3e57634c754ae9c3203d3c003dad76d3553afd71
Copying blob sha256:d661a108c347030c3ef626a0e0020e084fba1e1023193824f5395fa90ef40bde
Copying blob sha256:629980bfa23ec05ce5acc61ed2866ddf8713f40bb2a61f0850395082f1457220
Copying blob sha256:d93d3cc0bc0c5ed9655bcdcf31183ed0b570076c0e6a13e0d7cb907d0b877b00
Copying blob sha256:bc8a0003b3470be53e5cf295daf38c287d3f20ab90e8f5c2b6f17406b158d323
Copying config sha256:46bbff0d2c26609c32b5b3f19f9bb458bf1be529bda54f968f68a8f73003a970
Writing manifest to image destination
[2025-12-25T14:28:47,369488358+00:00] End build

pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | container step-push: 
[2025-12-25T14:28:48,006614836+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2025-12-25T14:28:51,481786692+00:00] Convert image
[2025-12-25T14:28:51,483970484+00:00] Push image with unique tag
Pushing to quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:python-component-mdtowg-on-pull-request-gnqct-build-container
Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c docker://quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:python-component-mdtowg-on-pull-request-gnqct-build-container
[2025-12-25T14:29:06,454098249+00:00] Push image with git revision
Pushing to quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c
Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c docker://quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c
sha256:aee8176a8d16548fa1313c2a37552ba6c50908b994cbdd85e3cc4cd9f0c30071quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c
[2025-12-25T14:29:08,074559805+00:00] End push

pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | container step-sbom-syft-generate: 
[2025-12-25T14:29:08,998075954+00:00] Generate SBOM
Running syft on the image
Running syft on the source code
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
[2025-12-25T14:29:28,245884287+00:00] End sbom-syft-generate

pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | container step-prepare-sboms: 
[2025-12-25T14:29:29,104612270+00:00] Prepare SBOM
[2025-12-25T14:29:29,111897712+00:00] Generate SBOM with mobster
Skipping SBOM validation
2025-12-25 14:29:32,182 [INFO] mobster.log: Logging level set to 20
2025-12-25 14:29:32,675 [INFO] mobster.oci: Fetching manifest for registry.access.redhat.com/ubi9/python-39@sha256:40a58935b9c22664927b22bf256f53a3d744ddb7316f3af18061099e199526ee
2025-12-25 14:29:38,187 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM.
2025-12-25 14:29:38,187 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully.
2025-12-25 14:29:38,190 [INFO] mobster.log: Contextual workflow completed in 5.63s
2025-12-25 14:29:38,344 [INFO] mobster.main: Exiting with code 0.
[2025-12-25T14:29:38,416178754+00:00] End prepare-sboms

pod: python-component-mdtowg-on-d0723816fed9abb75ef4056c1d9e64db-pod | container step-upload-sbom: 
[2025-12-25T14:29:38,985212728+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg
Pushing sbom to registry
Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c@sha256:aee8176a8d16548fa1313c2a37552ba6c50908b994cbdd85e3cc4cd9f0c30071
quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg@sha256:0476d546db300ce963861f77f0a1d6748cebcf397b704f2293b516de507dfc03
[2025-12-25T14:29:42,524238198+00:00] End upload-sbom

 pod: python-component-mdtowg-on-e130186800d20da12e4eaf516e30bb37-pod | init container: prepare
2025/12/25 14:31:21 Entrypoint initialization

 pod: python-component-mdtowg-on-e130186800d20da12e4eaf516e30bb37-pod | init container: place-scripts
2025/12/25 14:31:22 Decoded script /tekton/scripts/script-0-qqpx5

 pod: python-component-mdtowg-on-e130186800d20da12e4eaf516e30bb37-pod | init container: working-dir-initializer

pod: python-component-mdtowg-on-e130186800d20da12e4eaf516e30bb37-pod | container step-push: 
[2025-12-25T14:31:25,116719508+00:00] Validate context path
Selecting auth for quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c
Using token for quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg
Pushing Dockerfile to registry
Executing: oras push --no-tty --format json --registry-config /tmp/tmp.7wYOsgVgIs --artifact-type application/vnd.konflux.dockerfile quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:sha256-aee8176a8d16548fa1313c2a37552ba6c50908b994cbdd85e3cc4cd9f0c30071.dockerfile Dockerfile

 pod: python-component-mdtowg-on-pull-request-gnqct-apply-tags-pod | init container: prepare
2025/12/25 14:31:09 Entrypoint initialization

 pod: python-component-mdtowg-on-pull-request-gnqct-apply-tags-pod | init container: place-scripts
2025/12/25 14:31:10 Decoded script /tekton/scripts/script-0-27vmv
2025/12/25 14:31:10 Decoded script /tekton/scripts/script-1-bfbbx

pod: python-component-mdtowg-on-pull-request-gnqct-apply-tags-pod | container step-apply-additional-tags-from-parameter: 
No additional tags parameter specified

pod: python-component-mdtowg-on-pull-request-gnqct-apply-tags-pod | container step-apply-additional-tags-from-image-label: 
No additional tags specified in the image labels

 pod: python-component-mdtowg-on-pull-request-gnqct-init-pod | init container: prepare
2025/12/25 14:27:09 Entrypoint initialization

 pod: python-component-mdtowg-on-pull-request-gnqct-init-pod | init container: place-scripts
2025/12/25 14:27:10 Decoded script /tekton/scripts/script-0-qzmrg

pod: python-component-mdtowg-on-pull-request-gnqct-init-pod | container step-init: 
Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-vbqh/python-component-mdtowg:on-pr-6c126114adc53a6ab27d40c01051b17240e65e2c

Determine if Image Already Exists
Fetching cluster-config from konflux-info namespace...
Warning: Failed to fetch cluster-config ConfigMap. Proceeding with defaults.
Cache proxy disabled (cluster-enabled: true, task-enable: false)
Setting HTTP_PROXY to 
Setting NO_PROXY to