[2026-10-12T06:25:06,228473825+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-ggur/fj-multi-component-child-znel
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-ggur/fj-multi-component-child-znel:on-pr-75d9a3bddba2e1f8b2c307fe2e58efd3a898a38b@sha256:050f94f66866f43252a9f1d67302f3958af42c50d46e4632b7f5520d27a578e8
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-ggur/fj-multi-component-child-znel@sha256:050f94f66866f43252a9f1d67302f3958af42c50d46e4632b7f5520d27a578e8] to [quay.io/redhat-appstudio-qe/build-e2e-ggur/fj-multi-component-child-znel:sha256-050f94f66866f43252a9f1d67302f3958af42c50d46e4632b7f5520d27a578e8.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/build-e2e-ggur/fj-multi-component-child-znel@sha256:013399684f3d0da5b2bcc06447f982886109f8c907ccb3eb697dda0d43b3797d
[2026-10-12T06:25:42,288948304+00:00] End upload-sbom