[2026-08-21T12:45:06,118692535+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-ukqn/gl-test-custom-branch-gdbwkq
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-ukqn/gl-test-custom-branch-gdbwkq:f30e105d7e9b4ce03a88797681197e0d44ff479e@sha256:ce36b8095adfb352535b49d6f79b4b825bdb0912269e1d60f34362563d9f6521
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-ukqn/gl-test-custom-branch-gdbwkq@sha256:ce36b8095adfb352535b49d6f79b4b825bdb0912269e1d60f34362563d9f6521] to [quay.io/redhat-appstudio-qe/build-e2e-ukqn/gl-test-custom-branch-gdbwkq:sha256-ce36b8095adfb352535b49d6f79b4b825bdb0912269e1d60f34362563d9f6521.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/build-e2e-ukqn/gl-test-custom-branch-gdbwkq@sha256:1346fac05701bbb9e8e9e2c80a6ff14f246c4a9e7462861223c515cadb6f9886
[2026-08-21T12:45:30,133957137+00:00] End upload-sbom