[2026-07-09T13:31:58,968271987+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-ikdl/gl-test-custom-branch-hrkmmg
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-ikdl/gl-test-custom-branch-hrkmmg:b3c8d01576800d6419c584e8cad86bc9098a6610@sha256:2363ceff5bfe7ac014e9cca261456ee92d7cbf600b76a3618700f892347f392b
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-ikdl/gl-test-custom-branch-hrkmmg@sha256:2363ceff5bfe7ac014e9cca261456ee92d7cbf600b76a3618700f892347f392b] to [quay.io/redhat-appstudio-qe/build-e2e-ikdl/gl-test-custom-branch-hrkmmg:sha256-2363ceff5bfe7ac014e9cca261456ee92d7cbf600b76a3618700f892347f392b.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/build-e2e-ikdl/gl-test-custom-branch-hrkmmg@sha256:2d699183aba8851ca6c73746ac16066ee67eee5e70175f18394d994f50bec053
[2026-07-09T13:32:16,471906127+00:00] End upload-sbom