[2026-08-13T08:26:30,097600973+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-sdcf/fj-multi-component-child-suum
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-sdcf/fj-multi-component-child-suum:617d2045b023b9c3874784751384ee4f2df6f1d3@sha256:52af206d4c2f2462afafb703da3c11615a0d68991ba70b9c6f385628d8e5ac4c
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-sdcf/fj-multi-component-child-suum@sha256:52af206d4c2f2462afafb703da3c11615a0d68991ba70b9c6f385628d8e5ac4c] to [quay.io/redhat-appstudio-qe/build-e2e-sdcf/fj-multi-component-child-suum:sha256-52af206d4c2f2462afafb703da3c11615a0d68991ba70b9c6f385628d8e5ac4c.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/build-e2e-sdcf/fj-multi-component-child-suum@sha256:d2d966103b2bb87d44ff1ef60fc02a9e7c16f1189b642423fe2cbbbb27ba00d8
[2026-08-13T08:26:53,067804224+00:00] End upload-sbom