[2026-08-13T08:21:45,865924951+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-yjiw/fj-test-custom-default-yvxxpm
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-yjiw/fj-test-custom-default-yvxxpm:on-pr-2f5b237f399a1da39af4d15fc7049242c0a4948b@sha256:40b1caf1c154eb3d230cbcefc4aef9d9536a148702b8443d9f44344749d48711
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-yjiw/fj-test-custom-default-yvxxpm@sha256:40b1caf1c154eb3d230cbcefc4aef9d9536a148702b8443d9f44344749d48711] to [quay.io/redhat-appstudio-qe/build-e2e-yjiw/fj-test-custom-default-yvxxpm:sha256-40b1caf1c154eb3d230cbcefc4aef9d9536a148702b8443d9f44344749d48711.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/build-e2e-yjiw/fj-test-custom-default-yvxxpm@sha256:8cebc41c3f51c4723cecdb27dadba79aef7e523545fe562685c734c8b36b3f5f
[2026-08-13T08:22:08,630228926+00:00] End upload-sbom