pod: gh-test-custom-branch-npektj-on-pull-request-87b9n-init-pod | init container: prepare 2025/12/17 01:47:51 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-pull-request-87b9n-init-pod | init container: place-scripts 2025/12/17 01:47:56 Decoded script /tekton/scripts/script-0-sg2sw pod: gh-test-custom-branch-npektj-on-pull-request-87b9n-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:on-pr-5bc0a3153f259486b65be5a4b378658ccdad7896 Determine if Image Already Exists Fetching cluster-config from konflux-info namespace... Warning: Failed to fetch cluster-config ConfigMap. Proceeding with defaults. Cache proxy disabled (cluster-enabled: true, task-enable: false) Setting HTTP_PROXY to Setting NO_PROXY to pod: gh-test-custom-branch-npektj-on-pull-request-frf9n-init-pod | init container: prepare 2025/12/17 01:55:30 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-pull-request-frf9n-init-pod | init container: place-scripts 2025/12/17 01:55:30 Decoded script /tekton/scripts/script-0-xn4hj pod: gh-test-custom-branch-npektj-on-pull-request-frf9n-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:on-pr-beca952b5e50ebf29c5ae51074d671d64be9759b Determine if Image Already Exists Fetching cluster-config from konflux-info namespace... Warning: Failed to fetch cluster-config ConfigMap. Proceeding with defaults. Cache proxy disabled (cluster-enabled: true, task-enable: false) Setting HTTP_PROXY to Setting NO_PROXY to pod: gh-test-custom-branch-npektj-on-push-cn2b4-apply-tags-pod | init container: prepare 2025/12/17 02:02:00 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-apply-tags-pod | init container: place-scripts 2025/12/17 02:02:02 Decoded script /tekton/scripts/script-0-vwt65 2025/12/17 02:02:02 Decoded script /tekton/scripts/script-1-5qh4z pod: gh-test-custom-branch-npektj-on-push-cn2b4-apply-tags-pod | container step-apply-additional-tags-from-parameter: No additional tags parameter specified pod: gh-test-custom-branch-npektj-on-push-cn2b4-apply-tags-pod | container step-apply-additional-tags-from-image-label: Applying tag test-tag1 Getting image source signatures Copying blob sha256:73a070c1a581a49918b598ac9449504a544f5337ce0fe1b2dfa5b21b0131b137 Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3 Copying blob sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251 Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b Copying config sha256:fa71c66794c0c218e44ce7aac81c354fd2c5634c361a55686a0b09dc11609cee Writing manifest to image destination Applying tag test-tag2 Getting image source signatures Copying blob sha256:73a070c1a581a49918b598ac9449504a544f5337ce0fe1b2dfa5b21b0131b137 Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b Copying blob sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251 Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3 Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying config sha256:fa71c66794c0c218e44ce7aac81c354fd2c5634c361a55686a0b09dc11609cee Writing manifest to image destination pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | init container: prepare 2025/12/17 02:00:35 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | init container: place-scripts 2025/12/17 02:00:35 Decoded script /tekton/scripts/script-0-8kq4d 2025/12/17 02:00:35 Decoded script /tekton/scripts/script-1-xxx42 2025/12/17 02:00:35 Decoded script /tekton/scripts/script-2-scqvf 2025/12/17 02:00:35 Decoded script /tekton/scripts/script-3-rk6xm 2025/12/17 02:00:35 Decoded script /tekton/scripts/script-4-zf7gp pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | init container: working-dir-initializer pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | container step-build: [2025-12-17T02:00:39,771286456+00:00] Validate context path [2025-12-17T02:00:39,775100377+00:00] Update CA trust [2025-12-17T02:00:39,776170692+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-12-17T02:00:41,774941499+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2025-12-17T02:00:41,781948936+00:00] Prepare system (architecture: x86_64) [2025-12-17T02:00:41,852670305+00:00] Setup prefetched Trying to pull quay.io/jitesoft/nginx:latest... Getting image source signatures Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3 Copying blob sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251 Copying config sha256:e24dabc8eb375e0b081983c3d496693b7fc65a5d9d9cffdd08e6a4c5bec5b7a2 Writing manifest to image destination [2025-12-17T02:00:45,551527905+00:00] Unsetting proxy { "com.jitesoft.app.alpine.version": "3.22.2", "com.jitesoft.app.nginx.version": "1.29.4", "com.jitesoft.build.arch": "amd64", "com.jitesoft.build.platform": "linux/amd64", "com.jitesoft.project.registry.uri": "registry.gitlab.com/jitesoft/dockerfiles/nginx", "com.jitesoft.project.repo.issues": "https://gitlab.com/jitesoft/dockerfiles/nginx/issues", "com.jitesoft.project.repo.type": "git", "com.jitesoft.project.repo.uri": "https://gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.alternative-locations": "oci://index.docker.io/jitesoft/nginx,oci://ghcr.io/jitesoft/nginx,oci://registry.gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.logo-url": "https://jitesoft.com/favicon-96x96.png", "io.artifacthub.package.readme-url": "https://gitlab.com/jitesoft/dockerfiles/nginx/-/raw/master/README.md", "maintainer": "Johannes Tegnér ", "maintainer.org": "Jitesoft", "maintainer.org.uri": "https://jitesoft.com", "org.opencontainers.image.created": "2025-12-17T02:00:41Z", "org.opencontainers.image.description": "Nginx on Alpine linux", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-hello-world", "org.opencontainers.image.vendor": "Jitesoft", "org.opencontainers.image.version": "1.29.4", "architecture": "x86_64", "vcs-type": "git", "vcs-ref": "60563c8a14570e6c1b01790843d889c8c6886c1c", "org.opencontainers.image.revision": "60563c8a14570e6c1b01790843d889c8c6886c1c", "build-date": "2025-12-17T02:00:41Z", "io.buildah.version": "1.41.4", "konflux.additional-tags": "test-tag1, test-tag2" } [2025-12-17T02:00:45,590628686+00:00] Register sub-man Adding the entitlement to the build [2025-12-17T02:00:45,593823998+00:00] Add secrets [2025-12-17T02:00:45,609306406+00:00] Run buildah build [2025-12-17T02:00:45,610325304+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=60563c8a14570e6c1b01790843d889c8c6886c1c --label org.opencontainers.image.revision=60563c8a14570e6c1b01790843d889c8c6886c1c --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world --label build-date=2025-12-17T02:00:41Z --label org.opencontainers.image.created=2025-12-17T02:00:41Z --annotation org.opencontainers.image.revision=60563c8a14570e6c1b01790843d889c8c6886c1c --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world --annotation org.opencontainers.image.created=2025-12-17T02:00:41Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.MREJHt -t quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c . STEP 1/6: FROM quay.io/jitesoft/nginx:latest STEP 2/6: ENV PORT="8080" STEP 3/6: LABEL konflux.additional-tags="test-tag1, test-tag2" STEP 4/6: COPY labels.json /usr/share/buildinfo/labels.json STEP 5/6: COPY labels.json /root/buildinfo/labels.json STEP 6/6: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="60563c8a14570e6c1b01790843d889c8c6886c1c" "org.opencontainers.image.revision"="60563c8a14570e6c1b01790843d889c8c6886c1c" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-hello-world" "build-date"="2025-12-17T02:00:41Z" "org.opencontainers.image.created"="2025-12-17T02:00:41Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c time="2025-12-17T02:00:45Z" level=warning msg="HEALTHCHECK is not supported for OCI image format and will be ignored. Must use `docker` format" --> fa71c66794c0 Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c fa71c66794c0c218e44ce7aac81c354fd2c5634c361a55686a0b09dc11609cee [2025-12-17T02:00:46,132301092+00:00] Unsetting proxy [2025-12-17T02:00:46,133479903+00:00] Add metadata Recording base image digests used quay.io/jitesoft/nginx:latest quay.io/jitesoft/nginx:latest@sha256:55e0a6080d67575d30ce5a0205d9ac61e98c10422c5f834b486c239912d154aa Getting image source signatures Copying blob sha256:a35c653f5b0fecb7ab21eec1a4a73ecb7a82443cff615a36662641805a5279b0 Copying blob sha256:683da8936dc2e3176f2b8fc355341c803e903d0d4eebb4ced7291814ee0cb737 Copying blob sha256:256f393e029fa2063d8c93720da36a74a032bed3355a2bc3e313ad12f8bde9d1 Copying blob sha256:f8e7ccd03afcc9d0564cf87f00b053027fa490a67b32d7088092f33362e5c501 Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying config sha256:fa71c66794c0c218e44ce7aac81c354fd2c5634c361a55686a0b09dc11609cee Writing manifest to image destination [2025-12-17T02:00:46,530018938+00:00] End build pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | container step-push: [2025-12-17T02:00:46,898412119+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-12-17T02:00:49,091552794+00:00] Convert image [2025-12-17T02:00:49,092667849+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:gh-test-custom-branch-npektj-on-push-cn2b4-build-container Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c docker://quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:gh-test-custom-branch-npektj-on-push-cn2b4-build-container [2025-12-17T02:00:55,914354549+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c docker://quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248cquay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c [2025-12-17T02:00:57,689411944+00:00] End push pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | container step-sbom-syft-generate: [2025-12-17T02:00:58,019032985+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2025-12-17T02:01:00,520940491+00:00] End sbom-syft-generate pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | container step-prepare-sboms: [2025-12-17T02:01:01,142101668+00:00] Prepare SBOM [2025-12-17T02:01:01,145990517+00:00] Generate SBOM with mobster Skipping SBOM validation 2025-12-17 02:01:07,224 [INFO] mobster.log: Logging level set to 20 2025-12-17 02:01:07,257 [INFO] mobster.oci: Fetching manifest for quay.io/jitesoft/nginx@sha256:55e0a6080d67575d30ce5a0205d9ac61e98c10422c5f834b486c239912d154aa 2025-12-17 02:01:11,707 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2025-12-17 02:01:11,707 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2025-12-17 02:01:11,707 [INFO] mobster.log: Contextual workflow completed in 4.45s 2025-12-17 02:01:11,716 [INFO] mobster.main: Exiting with code 0. [2025-12-17T02:01:11,778651442+00:00] End prepare-sboms pod: gh-test-custom-branch-npektj-on-push-cn2b4-build-container-pod | container step-upload-sbom: [2025-12-17T02:01:12,262596062+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj Pushing sbom to registry Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj@sha256:10b5e44502b5024deb546deef613e4c8fab619ce46ece1da241abdf1dc316fcc [2025-12-17T02:01:15,704112533+00:00] End upload-sbom pod: gh-test-custom-branch-npektj-on-push-cn2b4-clair-scan-pod | init container: prepare 2025/12/17 02:01:51 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-clair-scan-pod | init container: place-scripts 2025/12/17 02:01:53 Decoded script /tekton/scripts/script-0-jdz54 2025/12/17 02:01:53 Decoded script /tekton/scripts/script-1-wpkhh 2025/12/17 02:01:53 Decoded script /tekton/scripts/script-2-62jw8 2025/12/17 02:01:53 Decoded script /tekton/scripts/script-3-tlfq6 pod: gh-test-custom-branch-npektj-on-push-cn2b4-clair-scan-pod | container step-get-image-manifests: Inspecting raw image manifest quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c. pod: gh-test-custom-branch-npektj-on-push-cn2b4-clair-scan-pod | container step-get-vulnerabilities: Running clair-action on amd64 image manifest... 2025-12-17T02:02:06Z INF matchers created component=libvuln/New matchers=[{"docs":"https://pkg.go.dev/github.com/quay/claircore/aws","name":"aws-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/gobin","name":"gobin"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/python","name":"python"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/ubuntu","name":"ubuntu-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel","name":"rhel"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/debian","name":"debian-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/oracle","name":"oracle"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/ruby","name":"ruby-gem"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/java","name":"java-maven"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/photon","name":"photon"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel/rhcc","name":"rhel-container-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/suse","name":"suse"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/alpine","name":"alpine-matcher"}] 2025-12-17T02:02:06Z INF libvuln initialized component=libvuln/New 2025-12-17T02:02:09Z INF registered configured scanners component=libindex/New 2025-12-17T02:02:09Z INF NewLayerScanner: constructing a new layer-scanner component=indexer.NewLayerScanner 2025-12-17T02:02:09Z INF index request start component=libindex/Libindex.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c 2025-12-17T02:02:09Z INF starting scan component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c 2025-12-17T02:02:09Z INF manifest to be scanned component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=CheckManifest 2025-12-17T02:02:09Z INF layers fetch start component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=FetchLayers 2025-12-17T02:02:10Z INF layers fetch success component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=FetchLayers 2025-12-17T02:02:10Z INF layers fetch done component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=FetchLayers 2025-12-17T02:02:10Z INF layers scan start component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=ScanLayers 2025-12-17T02:02:10Z INF layers scan done component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=ScanLayers 2025-12-17T02:02:10Z INF starting index manifest component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=IndexManifest 2025-12-17T02:02:10Z INF finishing scan component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=IndexFinished 2025-12-17T02:02:10Z INF manifest successfully scanned component=indexer/controller/Controller.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c state=IndexFinished 2025-12-17T02:02:10Z INF index request done component=libindex/Libindex.Index manifest=sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c { "manifest_hash": "sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c", "packages": { "+W64BhiEkIJA+MjMyo18wQ==": { "id": "+W64BhiEkIJA+MjMyo18wQ==", "name": "libdav1d", "version": "1.5.1-r0", "kind": "binary", "source": { "id": "", "name": "dav1d", "version": "1.5.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "0JY3SGhTqQjzUeDslLQHhA==": { "id": "0JY3SGhTqQjzUeDslLQHhA==", "name": "alpine-release", "version": "3.22.2-r0", "kind": "binary", "source": { "id": "", "name": "alpine-base", "version": "3.22.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "0Z9PyP1QQE3RUG/m0sJlWg==": { "id": "0Z9PyP1QQE3RUG/m0sJlWg==", "name": "libpng", "version": "1.6.53-r0", "kind": "binary", "source": { "id": "", "name": "libpng", "version": "1.6.53-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "1JHlDN09RHJl/n6/syZiWA==": { "id": "1JHlDN09RHJl/n6/syZiWA==", "name": "geoip", "version": "1.6.12-r6", "kind": "binary", "source": { "id": "", "name": "geoip", "version": "1.6.12-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "3CJXIrqkLy7LSZIC0Tvaeg==": { "id": "3CJXIrqkLy7LSZIC0Tvaeg==", "name": "libyuv", "version": "0.0.1887.20251502-r1", "kind": "binary", "source": { "id": "", "name": "libyuv", "version": "0.0.1887.20251502-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "3sBN651DB8W0iH7aFznZCg==": { "id": "3sBN651DB8W0iH7aFznZCg==", "name": "libxdmcp", "version": "1.1.5-r1", "kind": "binary", "source": { "id": "", "name": "libxdmcp", "version": "1.1.5-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "4BS4GwloVgpzJeTKVsjysA==": { "id": "4BS4GwloVgpzJeTKVsjysA==", "name": "zlib", "version": "1.3.1-r2", "kind": "binary", "source": { "id": "", "name": "zlib", "version": "1.3.1-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "4MH5yRodas7mD7SnwxU/rg==": { "id": "4MH5yRodas7mD7SnwxU/rg==", "name": "ca-certificates-bundle", "version": "20250911-r0", "kind": "binary", "source": { "id": "", "name": "ca-certificates", "version": "20250911-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "5kK0TPtN1N4t5Zo2OXZ1aQ==": { "id": "5kK0TPtN1N4t5Zo2OXZ1aQ==", "name": "alpine-baselayout", "version": "3.7.0-r0", "kind": "binary", "source": { "id": "", "name": "alpine-baselayout", "version": "3.7.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "5x1ZY2a3uHOEvliX+OVtug==": { "id": "5x1ZY2a3uHOEvliX+OVtug==", "name": "libmd", "version": "1.1.0-r0", "kind": "binary", "source": { "id": "", "name": "libmd", "version": "1.1.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6RYuNKo8esC4LicqIlu7ew==": { "id": "6RYuNKo8esC4LicqIlu7ew==", "name": "apk-tools", "version": "2.14.9-r3", "kind": "binary", "source": { "id": "", "name": "apk-tools", "version": "2.14.9-r3", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6lTLCltLqryTaSTclKgihA==": { "id": "6lTLCltLqryTaSTclKgihA==", "name": "pcre", "version": "8.45-r4", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.45-r4", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "8Zxuxb7cfZynOy/x6kkpSg==": { "id": "8Zxuxb7cfZynOy/x6kkpSg==", "name": "libcrypto3", "version": "3.5.4-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.4-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "8sBmkUMK4gT0wEXAObUD1w==": { "id": "8sBmkUMK4gT0wEXAObUD1w==", "name": "musl-utils", "version": "1.2.5-r10", "kind": "binary", "source": { "id": "", "name": "musl", "version": "1.2.5-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "9/ReU6RQ5IsuEOPAN7SDew==": { "id": "9/ReU6RQ5IsuEOPAN7SDew==", "name": "alpine-baselayout-data", "version": "3.7.0-r0", "kind": "binary", "source": { "id": "", "name": "alpine-baselayout", "version": "3.7.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "9sXDXt2HMrPE6BwItL52OQ==": { "id": "9sXDXt2HMrPE6BwItL52OQ==", "name": "libbsd", "version": "0.12.2-r0", "kind": "binary", "source": { "id": "", "name": "libbsd", "version": "0.12.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AbyA5OH1Kjwc+ffl6y2WFw==": { "id": "AbyA5OH1Kjwc+ffl6y2WFw==", "name": "libgd", "version": "2.3.3-r10", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.3-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AdhvXsue2sTbURKW4+5W2A==": { "id": "AdhvXsue2sTbURKW4+5W2A==", "name": "libice", "version": "1.1.2-r0", "kind": "binary", "source": { "id": "", "name": "libice", "version": "1.1.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "C7cSC2LfU2HhtZHWjJV7jw==": { "id": "C7cSC2LfU2HhtZHWjJV7jw==", "name": "musl", "version": "1.2.5-r10", "kind": "binary", "source": { "id": "", "name": "musl", "version": "1.2.5-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "CqQy74l49bQkS9VjeGAxrQ==": { "id": "CqQy74l49bQkS9VjeGAxrQ==", "name": "aom-libs", "version": "3.12.1-r0", "kind": "binary", "source": { "id": "", "name": "aom", "version": "3.12.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "DX+hHYZ4Y9SavpCGrcc3Zg==": { "id": "DX+hHYZ4Y9SavpCGrcc3Zg==", "name": "libstdc++", "version": "14.2.0-r6", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "14.2.0-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "FwKg6L5pgd6iX3xGWQLASA==": { "id": "FwKg6L5pgd6iX3xGWQLASA==", "name": "libxext", "version": "1.3.6-r2", "kind": "binary", "source": { "id": "", "name": "libxext", "version": "1.3.6-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "G6p88X9rOFeLIxcfqONi/A==": { "id": "G6p88X9rOFeLIxcfqONi/A==", "name": "xz-libs", "version": "5.8.1-r0", "kind": "binary", "source": { "id": "", "name": "xz", "version": "5.8.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "GJnXxKHScND/ZbStBkKPRA==": { "id": "GJnXxKHScND/ZbStBkKPRA==", "name": "gd", "version": "2.3.3-r10", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.3-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Gjo4GjcjWTs47gF+4pnjPw==": { "id": "Gjo4GjcjWTs47gF+4pnjPw==", "name": "tiff", "version": "4.7.1-r0", "kind": "binary", "source": { "id": "", "name": "tiff", "version": "4.7.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "IrInbFQt1Bjo0BOPdFgUgQ==": { "id": "IrInbFQt1Bjo0BOPdFgUgQ==", "name": "busybox", "version": "1.37.0-r19", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r19", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "LhzvTdrf+0rfQxqUBuIrtA==": { "id": "LhzvTdrf+0rfQxqUBuIrtA==", "name": "libavif", "version": "1.3.0-r0", "kind": "binary", "source": { "id": "", "name": "libavif", "version": "1.3.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "NYv5d6XZqZgs/Fs2skNBAA==": { "id": "NYv5d6XZqZgs/Fs2skNBAA==", "name": "libxau", "version": "1.0.12-r0", "kind": "binary", "source": { "id": "", "name": "libxau", "version": "1.0.12-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "QpJT/JwhZFSHCxJIATPsLA==": { "id": "QpJT/JwhZFSHCxJIATPsLA==", "name": "libjpeg-turbo", "version": "3.1.0-r0", "kind": "binary", "source": { "id": "", "name": "libjpeg-turbo", "version": "3.1.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "RRSAwLj4wU93YSyRZ16dFQ==": { "id": "RRSAwLj4wU93YSyRZ16dFQ==", "name": "libgcc", "version": "14.2.0-r6", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "14.2.0-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "TWyLweIJIazHQe0Jp8ILGA==": { "id": "TWyLweIJIazHQe0Jp8ILGA==", "name": "libxcb", "version": "1.17.0-r0", "kind": "binary", "source": { "id": "", "name": "libxcb", "version": "1.17.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "V4nbf41YvJN3nHT1LMFdRQ==": { "id": "V4nbf41YvJN3nHT1LMFdRQ==", "name": "libxslt", "version": "1.1.43-r3", "kind": "binary", "source": { "id": "", "name": "libxslt", "version": "1.1.43-r3", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "VW3lpYmD9XI3m8beHKye6w==": { "id": "VW3lpYmD9XI3m8beHKye6w==", "name": "ca-certificates", "version": "20250911-r0", "kind": "binary", "source": { "id": "", "name": "ca-certificates", "version": "20250911-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Y5xVaKThvoJ+Wm0kWuE3gg==": { "id": "Y5xVaKThvoJ+Wm0kWuE3gg==", "name": "libxpm", "version": "3.5.17-r0", "kind": "binary", "source": { "id": "", "name": "libxpm", "version": "3.5.17-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "YC0EdP2UddRYErNxUFieLg==": { "id": "YC0EdP2UddRYErNxUFieLg==", "name": "alpine-keys", "version": "2.5-r0", "kind": "binary", "source": { "id": "", "name": "alpine-keys", "version": "2.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "YFFh/FkSvBY4tltWm3rFTg==": { "id": "YFFh/FkSvBY4tltWm3rFTg==", "name": "libsharpyuv", "version": "1.5.0-r0", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.5.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Z7dAE7lDg83XBkSX+s5fAQ==": { "id": "Z7dAE7lDg83XBkSX+s5fAQ==", "name": "openssl", "version": "3.5.4-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.4-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Z8KAvY0+R6d2T1S2DhcVPg==": { "id": "Z8KAvY0+R6d2T1S2DhcVPg==", "name": "busybox-binsh", "version": "1.37.0-r19", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r19", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "hn6SxVA1vxeb+7Pqe7KBmA==": { "id": "hn6SxVA1vxeb+7Pqe7KBmA==", "name": "libxt", "version": "1.3.1-r0", "kind": "binary", "source": { "id": "", "name": "libxt", "version": "1.3.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "i5oWa7Jv2oPmNBePvZT4mw==": { "id": "i5oWa7Jv2oPmNBePvZT4mw==", "name": "libsm", "version": "1.2.5-r0", "kind": "binary", "source": { "id": "", "name": "libsm", "version": "1.2.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "j7FbHtz8UjsuQUQTXAlAuQ==": { "id": "j7FbHtz8UjsuQUQTXAlAuQ==", "name": "libwebp", "version": "1.5.0-r0", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.5.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "jxceWm3UWHnJFIA6CYh95Q==": { "id": "jxceWm3UWHnJFIA6CYh95Q==", "name": "scanelf", "version": "1.3.8-r1", "kind": "binary", "source": { "id": "", "name": "pax-utils", "version": "1.3.8-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "kZyrKCczgcnHvSsehoPwgA==": { "id": "kZyrKCczgcnHvSsehoPwgA==", "name": "libssl3", "version": "3.5.4-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.4-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "l5E6v0UPNLccuSDXp2eWYQ==": { "id": "l5E6v0UPNLccuSDXp2eWYQ==", "name": "ssl_client", "version": "1.37.0-r19", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r19", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "lVuw7kGI/WysgthsdUbxdg==": { "id": "lVuw7kGI/WysgthsdUbxdg==", "name": "libxml2", "version": "2.13.9-r0", "kind": "binary", "source": { "id": "", "name": "libxml2", "version": "2.13.9-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "nEZXVvC3MQJO0LRuRBrJOg==": { "id": "nEZXVvC3MQJO0LRuRBrJOg==", "name": "freetype", "version": "2.13.3-r0", "kind": "binary", "source": { "id": "", "name": "freetype", "version": "2.13.3-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "oADZaRvMn2QmK974o3Dr8g==": { "id": "oADZaRvMn2QmK974o3Dr8g==", "name": "libapk2", "version": "2.14.9-r3", "kind": "binary", "source": { "id": "", "name": "apk-tools", "version": "2.14.9-r3", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "sS1ctHO6R4kdxVzepx392g==": { "id": "sS1ctHO6R4kdxVzepx392g==", "name": "brotli-libs", "version": "1.1.0-r2", "kind": "binary", "source": { "id": "", "name": "brotli", "version": "1.1.0-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "sgypVKinsD2YIEbQZ2NqQA==": { "id": "sgypVKinsD2YIEbQZ2NqQA==", "name": "libuuid", "version": "2.41-r9", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.41-r9", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "ssss5C1R3lXph1KM06sMlg==": { "id": "ssss5C1R3lXph1KM06sMlg==", "name": "libbz2", "version": "1.0.8-r6", "kind": "binary", "source": { "id": "", "name": "bzip2", "version": "1.0.8-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "t6hvIz+qj3s2D4ae/lhA0g==": { "id": "t6hvIz+qj3s2D4ae/lhA0g==", "name": "fontconfig", "version": "2.15.0-r3", "kind": "binary", "source": { "id": "", "name": "fontconfig", "version": "2.15.0-r3", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "up7VbLPdrFL6cAVadndiOg==": { "id": "up7VbLPdrFL6cAVadndiOg==", "name": ".runtime-deps", "version": "20251210.201837", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "noarch", "cpe": "" }, "wC6omGYKWC5jNuYxjf9IlQ==": { "id": "wC6omGYKWC5jNuYxjf9IlQ==", "name": "perl", "version": "5.40.3-r0", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.40.3-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "yRXp3Y5w0OFr7ALlkdtY7Q==": { "id": "yRXp3Y5w0OFr7ALlkdtY7Q==", "name": "libx11", "version": "1.8.11-r0", "kind": "binary", "source": { "id": "", "name": "libx11", "version": "1.8.11-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "yfxJTJA1uWN33/bDk1QG6Q==": { "id": "yfxJTJA1uWN33/bDk1QG6Q==", "name": "libexpat", "version": "2.7.3-r0", "kind": "binary", "source": { "id": "", "name": "expat", "version": "2.7.3-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "zdPxUerFSGJqfP4XUXZIIg==": { "id": "zdPxUerFSGJqfP4XUXZIIg==", "name": "zstd-libs", "version": "1.5.7-r0", "kind": "binary", "source": { "id": "", "name": "zstd", "version": "1.5.7-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" } }, "distributions": { "a812ef77-12cb-4dcb-aa32-b4cf172a9466": { "id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "did": "alpine", "name": "Alpine Linux", "version": "3.22", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.22" } }, "repository": {}, "environments": { "+W64BhiEkIJA+MjMyo18wQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "0JY3SGhTqQjzUeDslLQHhA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "0Z9PyP1QQE3RUG/m0sJlWg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "1JHlDN09RHJl/n6/syZiWA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "3CJXIrqkLy7LSZIC0Tvaeg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "3sBN651DB8W0iH7aFznZCg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "4BS4GwloVgpzJeTKVsjysA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "4MH5yRodas7mD7SnwxU/rg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "5kK0TPtN1N4t5Zo2OXZ1aQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "5x1ZY2a3uHOEvliX+OVtug==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "6RYuNKo8esC4LicqIlu7ew==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "6lTLCltLqryTaSTclKgihA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "8Zxuxb7cfZynOy/x6kkpSg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "8sBmkUMK4gT0wEXAObUD1w==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "9/ReU6RQ5IsuEOPAN7SDew==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "9sXDXt2HMrPE6BwItL52OQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "AbyA5OH1Kjwc+ffl6y2WFw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "AdhvXsue2sTbURKW4+5W2A==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "C7cSC2LfU2HhtZHWjJV7jw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "CqQy74l49bQkS9VjeGAxrQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "DX+hHYZ4Y9SavpCGrcc3Zg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "FwKg6L5pgd6iX3xGWQLASA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "G6p88X9rOFeLIxcfqONi/A==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "GJnXxKHScND/ZbStBkKPRA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "Gjo4GjcjWTs47gF+4pnjPw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "IrInbFQt1Bjo0BOPdFgUgQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "LhzvTdrf+0rfQxqUBuIrtA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "NYv5d6XZqZgs/Fs2skNBAA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "QpJT/JwhZFSHCxJIATPsLA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "RRSAwLj4wU93YSyRZ16dFQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "TWyLweIJIazHQe0Jp8ILGA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "V4nbf41YvJN3nHT1LMFdRQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "VW3lpYmD9XI3m8beHKye6w==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "Y5xVaKThvoJ+Wm0kWuE3gg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "YC0EdP2UddRYErNxUFieLg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "YFFh/FkSvBY4tltWm3rFTg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "Z7dAE7lDg83XBkSX+s5fAQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "Z8KAvY0+R6d2T1S2DhcVPg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "hn6SxVA1vxeb+7Pqe7KBmA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "i5oWa7Jv2oPmNBePvZT4mw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "j7FbHtz8UjsuQUQTXAlAuQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "jxceWm3UWHnJFIA6CYh95Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "kZyrKCczgcnHvSsehoPwgA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "l5E6v0UPNLccuSDXp2eWYQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "lVuw7kGI/WysgthsdUbxdg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "nEZXVvC3MQJO0LRuRBrJOg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "oADZaRvMn2QmK974o3Dr8g==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "sS1ctHO6R4kdxVzepx392g==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "sgypVKinsD2YIEbQZ2NqQA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "ssss5C1R3lXph1KM06sMlg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "t6hvIz+qj3s2D4ae/lhA0g==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "up7VbLPdrFL6cAVadndiOg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "wC6omGYKWC5jNuYxjf9IlQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "yRXp3Y5w0OFr7ALlkdtY7Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "yfxJTJA1uWN33/bDk1QG6Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ], "zdPxUerFSGJqfP4XUXZIIg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251", "distribution_id": "a812ef77-12cb-4dcb-aa32-b4cf172a9466", "repository_ids": null } ] }, "vulnerabilities": { "BcIN9DQxNZqbLPyFnKkl3A==": { "id": "BcIN9DQxNZqbLPyFnKkl3A==", "updater": "alpine-main-v3.22-updater", "name": "CVE-2024-58251", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2024-58251", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "busybox", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.22", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.22" }, "repository": { "cpe": "" }, "fixed_in_version": "1.37.0-r20" }, "kefUC9QXP0kXTtnD+t6AoQ==": { "id": "kefUC9QXP0kXTtnD+t6AoQ==", "updater": "alpine-main-v3.22-updater", "name": "CVE-2025-46394", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2025-46394", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "busybox", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.22", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.22" }, "repository": { "cpe": "" }, "fixed_in_version": "1.37.0-r20" } }, "package_vulnerabilities": { "IrInbFQt1Bjo0BOPdFgUgQ==": [ "kefUC9QXP0kXTtnD+t6AoQ==", "BcIN9DQxNZqbLPyFnKkl3A==" ], "Z8KAvY0+R6d2T1S2DhcVPg==": [ "kefUC9QXP0kXTtnD+t6AoQ==", "BcIN9DQxNZqbLPyFnKkl3A==" ], "l5E6v0UPNLccuSDXp2eWYQ==": [ "kefUC9QXP0kXTtnD+t6AoQ==", "BcIN9DQxNZqbLPyFnKkl3A==" ] }, "enrichments": {} } pod: gh-test-custom-branch-npektj-on-push-cn2b4-clair-scan-pod | container step-oci-attach-report: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj Attaching clair-report-amd64.json to quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c Executing: oras attach --no-tty --format go-template={{.digest}} --registry-config /home/oras/auth.json --artifact-type application/vnd.redhat.clair-report+json quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c clair-report-amd64.json:application/vnd.redhat.clair-report+json pod: gh-test-custom-branch-npektj-on-push-cn2b4-clair-scan-pod | container step-conftest-vulnerabilities: pod: gh-test-custom-branch-npektj-on-push-cn2b4-clamav-scan-pod | init container: prepare 2025/12/17 02:01:55 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-clamav-scan-pod | init container: place-scripts 2025/12/17 02:01:59 Decoded script /tekton/scripts/script-0-7l72t 2025/12/17 02:01:59 Decoded script /tekton/scripts/script-1-4vvjp pod: gh-test-custom-branch-npektj-on-push-cn2b4-clamav-scan-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Extracting image(s). Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 2.042 sec (0 m 2 s) Start Date: 2025:12:17 02:02:24 End Date: 2025:12:17 02:02:26 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27847/Thu Dec 11 09:25:06 2025 Database version: 27847 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1765936946","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1765936946","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1765936946","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c", "digests": ["sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c"]}} pod: gh-test-custom-branch-npektj-on-push-cn2b4-clamav-scan-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj Attaching to quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading aa401ffdca55 clamscan-result-amd64.log Uploading 2a97d9923e32 clamscan-ec-test-amd64.json Uploaded aa401ffdca55 clamscan-result-amd64.log Uploaded 2a97d9923e32 clamscan-ec-test-amd64.json Uploading 8b82cd38902b application/vnd.oci.image.manifest.v1+json Uploaded 8b82cd38902b application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c Digest: sha256:8b82cd38902b30d65a030cfcecc6ef1a0525f7c62dbc4e61eaabb8789e127337 pod: gh-test-custom-branch-npektj-on-push-cn2b4-clone-repository-pod | init container: prepare 2025/12/17 02:00:21 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-clone-repository-pod | init container: place-scripts 2025/12/17 02:00:22 Decoded script /tekton/scripts/script-0-bs4gx 2025/12/17 02:00:22 Decoded script /tekton/scripts/script-1-4zczm pod: gh-test-custom-branch-npektj-on-push-cn2b4-clone-repository-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1765936825.5745823,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1765936826.556926,"caller":"git/git.go:218","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/devfile-sample-hello-world @ 60563c8a14570e6c1b01790843d889c8c6886c1c (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1765936826.5569704,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1765936826.580536,"caller":"git/git.go:267","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision 60563c8a14570e6c1b01790843d889c8c6886c1c directly. pod: gh-test-custom-branch-npektj-on-push-cn2b4-clone-repository-pod | container step-symlink-check: Running symlink check pod: gh-test-custom-branch-npektj-on-push-cn2b4-init-pod | init container: prepare 2025/12/17 01:59:33 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-init-pod | init container: place-scripts 2025/12/17 01:59:37 Decoded script /tekton/scripts/script-0-jjcg7 pod: gh-test-custom-branch-npektj-on-push-cn2b4-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c Determine if Image Already Exists Fetching cluster-config from konflux-info namespace... Warning: Failed to fetch cluster-config ConfigMap. Proceeding with defaults. Cache proxy disabled (cluster-enabled: true, task-enable: false) Setting HTTP_PROXY to Setting NO_PROXY to pod: gh-test-custom-branch-npektj-on-push-cn2b4-push-dockerfile-pod | init container: prepare 2025/12/17 02:02:00 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-push-dockerfile-pod | init container: place-scripts 2025/12/17 02:02:02 Decoded script /tekton/scripts/script-0-4ndbj pod: gh-test-custom-branch-npektj-on-push-cn2b4-push-dockerfile-pod | init container: working-dir-initializer pod: gh-test-custom-branch-npektj-on-push-cn2b4-push-dockerfile-pod | container step-push: [2025-12-17T02:02:19,297512838+00:00] Validate context path Selecting auth for quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c Using token for quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj Pushing Dockerfile to registry Executing: oras push --no-tty --format json --registry-config /tmp/tmp.B95KDs7TXu --artifact-type application/vnd.konflux.dockerfile quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:sha256-48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c.dockerfile Dockerfile pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-shell-check-pod | init container: prepare 2025/12/17 02:01:57 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-shell-check-pod | init container: place-scripts 2025/12/17 02:02:00 Decoded script /tekton/scripts/script-0-s95tn 2025/12/17 02:02:00 Decoded script /tekton/scripts/script-1-p6g65 pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-shell-check-pod | init container: working-dir-initializer pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-shell-check-pod | container step-sast-shell-check: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=gh-test-custom-branch-npektj INFO: The PROJECT_NAME used is: gh-test-custom-branch-npektj INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + echo 'INFO: The PROJECT_NAME used is: gh-test-custom-branch-npektj' + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust ++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck + PACKAGE_VERSION=ShellCheck-0.10.0-3.el9 + OUTPUT_FILE=shellcheck-results.json + SOURCE_CODE_DIR=/workspace/workspace/source + declare -a ALL_TARGETS + IFS=, + read -ra TARGET_ARRAY + for d in "${TARGET_ARRAY[@]}" + potential_path=/workspace/workspace/source/. ++ realpath -m /workspace/workspace/source/. + resolved_path=/workspace/workspace/source + [[ /workspace/workspace/source == \/\w\o\r\k\s\p\a\c\e\/\w\o\r\k\s\p\a\c\e\/\s\o\u\r\c\e* ]] + ALL_TARGETS+=("$resolved_path") + '[' -z '' ']' + '[' -r /sys/fs/cgroup/cpu.max ']' + read -r quota period + '[' 800000 '!=' max ']' + '[' -n 100000 ']' + '[' 100000 -gt 0 ']' + export SC_JOBS=8 + SC_JOBS=8 + echo 'INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh' + /usr/share/csmock/scripts/run-shellcheck.sh /workspace/workspace/source INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh Looking for shell scripts................ done + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/applypatch-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/post-update.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/prepare-commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-applypatch.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-merge-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-push.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-rebase.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-receive.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/push-to-checkout.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/sendemail-validate.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/update.sample + CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}") + [[ true == \t\r\u\e ]] + CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|' + CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|' + CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$' + CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER") + csgrep --mode=json --strip-path-prefix=/workspace/workspace/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-102.json ./shellcheck-results/sc-121.json ./shellcheck-results/sc-134.json ./shellcheck-results/sc-135.json ./shellcheck-results/sc-137.json ./shellcheck-results/sc-88.json ./shellcheck-results/sc-91.json ./shellcheck-results/sc-92.json ./shellcheck-results/sc-94.json ./shellcheck-results/sc-98.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered ShellCheck results have been saved to shellcheck-results.json + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' + echo 'ShellCheck results have been saved to shellcheck-results.json' + csgrep --mode=evtstat shellcheck-results.json + csgrep --mode=sarif shellcheck-results.json + note='Task sast-shell-check completed successfully.' ++ make_result_json -r SUCCESS -t 'Task sast-shell-check completed successfully.' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task sast-shell-check completed successfully.' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2025-12-17T02:02:21+00:00 --arg result SUCCESS --arg note 'Task sast-shell-check completed successfully.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2025-12-17T02:02:21+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2025-12-17T02:02:21+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2025-12-17T02:02:21+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' + echo '{"result":"SUCCESS","timestamp":"2025-12-17T02:02:21+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2025-12-17T02:02:21+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-shell-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj Attaching to quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c shellcheck-results.sarif:application/sarif+json Preparing shellcheck-results.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Exists 3b606a9dd3a1 shellcheck-results.sarif Uploading 6e00c4cfc471 application/vnd.oci.image.manifest.v1+json Uploaded 6e00c4cfc471 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-phtk/gh-test-custom-branch-npektj:60563c8a14570e6c1b01790843d889c8c6886c1c@sha256:48236ae0a78e364f97177801fb5aa67e8da283d77053a58dff5ba7ddcba6248c Digest: sha256:6e00c4cfc471c3fa9cc5320ff0a0b621ccffc79be88c6e56e05f74d028341c86 No excluded-findings.json exists. Skipping upload. pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-snyk-check-pod | init container: prepare 2025/12/17 02:01:52 Entrypoint initialization pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-snyk-check-pod | init container: place-scripts 2025/12/17 02:01:54 Decoded script /tekton/scripts/script-0-zfwtg 2025/12/17 02:01:54 Decoded script /tekton/scripts/script-1-2q9bc pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-snyk-check-pod | init container: working-dir-initializer pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-snyk-check-pod | container step-sast-snyk-check: INFO: The PROJECT_NAME used is: gh-test-custom-branch-npektj INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' {"result":"SKIPPED","timestamp":"2025-12-17T02:02:08+00:00","note":"Task sast-snyk-check skipped: If you wish to use the Snyk code SAST task, please create a secret name snyk-secret with the key 'snyk_token' containing the Snyk token by following the steps given [here](https://konflux-ci.dev/docs/testing/build/snyk/)","namespace":"default","successes":0,"failures":0,"warnings":0} pod: gh-test-custom-branch-npektj-on-push-cn2b4-sast-snyk-check-pod | container step-upload: No sast_snyk_check_out.sarif exists. Skipping upload. No excluded-findings.json exists. Skipping upload.