[2026-07-08T15:39:02,189109439+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-equb/gl-test-custom-branch-bhsrrd
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-equb/gl-test-custom-branch-bhsrrd:36860001c1afc9f41221757b5e7377d7d9cb5efc@sha256:205ae58480a397a3d8fede9610af699f182850de397dd7acf57d669479871c45
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-equb/gl-test-custom-branch-bhsrrd@sha256:205ae58480a397a3d8fede9610af699f182850de397dd7acf57d669479871c45] to [quay.io/redhat-appstudio-qe/build-e2e-equb/gl-test-custom-branch-bhsrrd:sha256-205ae58480a397a3d8fede9610af699f182850de397dd7acf57d669479871c45.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/build-e2e-equb/gl-test-custom-branch-bhsrrd@sha256:b6a4860be111f0f7467e5459c3b15372c06ca8200b8abceeefb37ccef927a21e
[2026-07-08T15:39:26,967030330+00:00] End upload-sbom