pod: python-component-gwbxak-on-1166196f64d4b85d7c626e995e9b3e62-pod | init container: prepare 2025/11/04 10:01:39 Entrypoint initialization pod: python-component-gwbxak-on-1166196f64d4b85d7c626e995e9b3e62-pod | init container: place-scripts 2025/11/04 10:01:42 Decoded script /tekton/scripts/script-0-7swlz 2025/11/04 10:01:42 Decoded script /tekton/scripts/script-1-mnfw4 2025/11/04 10:01:42 Decoded script /tekton/scripts/script-2-52zxn pod: python-component-gwbxak-on-1166196f64d4b85d7c626e995e9b3e62-pod | container step-build: 3cfbe6e05231c31135f99e150f62fce53dac9d948c5aea6d0595c26cafe4ca21 Skipping image index generation. Returning results for quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak@sha256:5b6b442dbb2bfdce77fac03447178d1a3f22220a641a9ff9ca089f306982c63f. pod: python-component-gwbxak-on-1166196f64d4b85d7c626e995e9b3e62-pod | container step-create-sbom: The manifest_data.json file does not exist. Skipping the SBOM creation... pod: python-component-gwbxak-on-1166196f64d4b85d7c626e995e9b3e62-pod | container step-upload-sbom: The index.spdx.json file does not exists. Skipping the SBOM upload... pod: python-component-gwbxak-on-13c0b6b52bc4fbf98021fd91774d67f1-pod | init container: prepare 2025/11/04 10:02:13 Entrypoint initialization pod: python-component-gwbxak-on-13c0b6b52bc4fbf98021fd91774d67f1-pod | init container: place-scripts 2025/11/04 10:02:16 Decoded script /tekton/scripts/script-0-824gg 2025/11/04 10:02:16 Decoded script /tekton/scripts/script-1-tggnx pod: python-component-gwbxak-on-13c0b6b52bc4fbf98021fd91774d67f1-pod | init container: working-dir-initializer pod: python-component-gwbxak-on-13c0b6b52bc4fbf98021fd91774d67f1-pod | container step-sast-shell-check: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index The PROJECT_NAME used is: python-component-gwbxak INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=python-component-gwbxak + echo 'The PROJECT_NAME used is: python-component-gwbxak' + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust ++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck + PACKAGE_VERSION=ShellCheck-0.10.0-3.el9 + OUTPUT_FILE=shellcheck-results.json + SOURCE_CODE_DIR=/workspace/workspace/source + declare -a ALL_TARGETS + IFS=, + for d in $TARGET_DIRS + potential_path=/workspace/workspace/source/. ++ realpath -m /workspace/workspace/source/. + resolved_path=/workspace/workspace/source + [[ /workspace/workspace/source == \/\w\o\r\k\s\p\a\c\e\/\w\o\r\k\s\p\a\c\e\/\s\o\u\r\c\e* ]] + ALL_TARGETS+=("$resolved_path") + /usr/share/csmock/scripts/run-shellcheck.sh /workspace/workspace/source Looking for shell scripts................ done + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/applypatch-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/post-update.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/prepare-commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-applypatch.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-merge-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-push.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-rebase.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-receive.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/push-to-checkout.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/sendemail-validate.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/update.sample + CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}") + [[ true == \t\r\u\e ]] + CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|' + CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|' + CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$' + CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER") + csgrep --mode=json --strip-path-prefix=/workspace/workspace/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-103.json ./shellcheck-results/sc-106.json ./shellcheck-results/sc-109.json ./shellcheck-results/sc-111.json ./shellcheck-results/sc-116.json ./shellcheck-results/sc-125.json ./shellcheck-results/sc-92.json ./shellcheck-results/sc-95.json ./shellcheck-results/sc-96.json ./shellcheck-results/sc-98.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + echo -n 'Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com Probing https://gitlab.cee.redhat.com/osh/known-false-positives... Setting KFP_GIT_URL to empty string KFP_GIT_URL is not set. Skipping false positive filtering. ShellCheck results have been saved to shellcheck-results.json + echo 'Setting KFP_GIT_URL to empty string' + KFP_GIT_URL= + '[' -n '' ']' + echo 'KFP_GIT_URL is not set. Skipping false positive filtering.' + echo 'ShellCheck results have been saved to shellcheck-results.json' + csgrep --mode=evtstat shellcheck-results.json + csgrep --mode=sarif shellcheck-results.json + note='Task sast-shell-check completed successfully.' ++ make_result_json -r SUCCESS -t 'Task sast-shell-check completed successfully.' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task sast-shell-check completed successfully.' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2025-11-04T10:02:24+00:00 --arg result SUCCESS --arg note 'Task sast-shell-check completed successfully.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2025-11-04T10:02:24+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2025-11-04T10:02:24+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2025-11-04T10:02:24+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT + echo '{"result":"SUCCESS","timestamp":"2025-11-04T10:02:24+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0}' {"result":"SUCCESS","timestamp":"2025-11-04T10:02:24+00:00","note":"Task sast-shell-check completed successfully.","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: python-component-gwbxak-on-13c0b6b52bc4fbf98021fd91774d67f1-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak Attaching to quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-c3a85d32232ee0f86c40d7a2d809864a7aa7f910 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-c3a85d32232ee0f86c40d7a2d809864a7aa7f910@sha256:5b6b442dbb2bfdce77fac03447178d1a3f22220a641a9ff9ca089f306982c63f shellcheck-results.sarif:application/sarif+json Uploading c39190043f94 shellcheck-results.sarif Uploaded c39190043f94 shellcheck-results.sarif Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-c3a85d32232ee0f86c40d7a2d809864a7aa7f910@sha256:5b6b442dbb2bfdce77fac03447178d1a3f22220a641a9ff9ca089f306982c63f Digest: sha256:eaccc3db14bdfe074792abfb1ced3eabdf60a3850a5f182e226d39a7cff0f7d4 No excluded-findings.json exists. Skipping upload. pod: python-component-gwbxak-on-569936204b8ae3352a6712bee3e21373-pod | init container: prepare 2025/11/04 10:01:57 Entrypoint initialization pod: python-component-gwbxak-on-569936204b8ae3352a6712bee3e21373-pod | init container: place-scripts 2025/11/04 10:02:10 Decoded script /tekton/scripts/script-0-wvzrs 2025/11/04 10:02:10 Decoded script /tekton/scripts/script-1-gl8m8 pod: python-component-gwbxak-on-569936204b8ae3352a6712bee3e21373-pod | init container: working-dir-initializer pod: python-component-gwbxak-on-569936204b8ae3352a6712bee3e21373-pod | container step-sast-snyk-check: The PROJECT_NAME used is: python-component-gwbxak INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' {"result":"SKIPPED","timestamp":"2025-11-04T10:02:21+00:00","note":"Task sast-snyk-check skipped: If you wish to use the Snyk code SAST task, please create a secret name snyk-secret with the key 'snyk_token' containing the Snyk token by following the steps given [here](https://konflux-ci.dev/docs/testing/build/snyk/)","namespace":"default","successes":0,"failures":0,"warnings":0} pod: python-component-gwbxak-on-569936204b8ae3352a6712bee3e21373-pod | container step-upload: No sast_snyk_check_out.sarif exists. Skipping upload. No excluded-findings.json exists. Skipping upload. pod: python-component-gwbxak-on-887d4b2149a134fbae8fd5a05074914b-pod | init container: prepare 2025/11/04 09:59:30 Entrypoint initialization pod: python-component-gwbxak-on-887d4b2149a134fbae8fd5a05074914b-pod | init container: place-scripts 2025/11/04 09:59:31 Decoded script /tekton/scripts/script-0-262dd 2025/11/04 09:59:31 Decoded script /tekton/scripts/script-1-rpbfv pod: python-component-gwbxak-on-887d4b2149a134fbae8fd5a05074914b-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1762250374.3880246,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1762250374.95441,"caller":"git/git.go:218","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/sample-multi-component @ c3a85d32232ee0f86c40d7a2d809864a7aa7f910 (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1762250374.954462,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1762250374.9866128,"caller":"git/git.go:267","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision c3a85d32232ee0f86c40d7a2d809864a7aa7f910 directly. pod: python-component-gwbxak-on-887d4b2149a134fbae8fd5a05074914b-pod | container step-symlink-check: Running symlink check pod: python-component-gwbxak-on-9241d01287bce58fb5dec663ea1426e8-pod | init container: prepare 2025/11/04 10:01:58 Entrypoint initialization pod: python-component-gwbxak-on-9241d01287bce58fb5dec663ea1426e8-pod | init container: place-scripts