pod: python-component-gwbxak-on-ade1ac200468586ca6db72860587e3cf-pod | init container: prepare 2025/11/04 09:54:02 Entrypoint initialization pod: python-component-gwbxak-on-ade1ac200468586ca6db72860587e3cf-pod | init container: place-scripts 2025/11/04 09:54:04 Decoded script /tekton/scripts/script-0-nvzn6 2025/11/04 09:54:04 Decoded script /tekton/scripts/script-1-7vjmc pod: python-component-gwbxak-on-ade1ac200468586ca6db72860587e3cf-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1762250051.8497386,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1762250052.3866591,"caller":"git/git.go:218","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/sample-multi-component @ cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1762250052.386694,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1762250052.4195852,"caller":"git/git.go:267","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad directly. pod: python-component-gwbxak-on-ade1ac200468586ca6db72860587e3cf-pod | container step-symlink-check: Running symlink check pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | init container: prepare 2025/11/04 09:55:17 Entrypoint initialization pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | init container: place-scripts 2025/11/04 09:55:22 Decoded script /tekton/scripts/script-0-cfml4 2025/11/04 09:55:22 Decoded script /tekton/scripts/script-1-jgmf4 2025/11/04 09:55:22 Decoded script /tekton/scripts/script-2-92h9l 2025/11/04 09:55:22 Decoded script /tekton/scripts/script-3-lnh9w 2025/11/04 09:55:22 Decoded script /tekton/scripts/script-4-vwzdn pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | init container: working-dir-initializer pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | container step-build: [2025-11-04T09:56:44,298695054+00:00] Validate context path [2025-11-04T09:56:44,303555141+00:00] Update CA trust [2025-11-04T09:56:44,305226354+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-11-04T09:56:47,411376117+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2025-11-04T09:56:47,516983481+00:00] Prepare system (architecture: x86_64) [2025-11-04T09:56:53,349016273+00:00] Setup prefetched Trying to pull registry.access.redhat.com/ubi9/python-39:1-117.1684741281... Getting image source signatures Checking if image destination supports signatures Copying blob sha256:8a2e9815396eaa57b0dfe27b2dfc442417f06aa70974c358f198980b533c7942 Copying blob sha256:5465449a2ea5d8a7e05fa498c8ba35f0ce7714b0ad37e716961fca17dfa1ef13 Copying blob sha256:085efe85e9dfb0b3d5d2392e4b78660a3091bf1ded336315117a627fbdd0567d Copying blob sha256:a07d808ddf4404b3885fef6100142a973cc667b2c3c4abcf4db96508795b1efb Copying config sha256:45c8f23c11bb64f238236aaf5cbe05595778e1d4fb6c06109c6fcc0a6b57a45b Writing manifest to image destination Storing signatures [2025-11-04T09:57:09,588410071+00:00] Unsetting proxy { "architecture": "x86_64", "build-date": "2025-11-04T09:56:53Z", "com.redhat.component": "python-39-container", "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI", "description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.", "distribution-scope": "public", "io.buildah.version": "1.41.4", "io.buildpacks.stack.id": "com.redhat.stacks.ubi9-python-39", "io.k8s.description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.", "io.k8s.display-name": "Python 3.9", "io.openshift.expose-services": "8080:http", "io.openshift.s2i.scripts-url": "image:///usr/libexec/s2i", "io.openshift.tags": "builder,python,python39,python-39,rh-python39", "io.s2i.scripts-url": "image:///usr/libexec/s2i", "maintainer": "SoftwareCollections.org ", "name": "ubi9/python-39", "release": "117.1684741281", "summary": "Platform for building and running Python 3.9 applications", "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi9/python-39/images/1-117.1684741281", "usage": "s2i build https://github.com/sclorg/s2i-python-container.git --context-dir=3.9/test/setup-test-app/ ubi9/python-39 python-sample-app", "vcs-ref": "cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad", "vcs-type": "git", "vendor": "Red Hat, Inc.", "version": "1", "org.opencontainers.image.revision": "cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/sample-multi-component", "quay.expires-after": "5d" } [2025-11-04T09:57:09,644271278+00:00] Register sub-man Adding the entitlement to the build [2025-11-04T09:57:09,648993469+00:00] Add secrets [2025-11-04T09:57:09,714992790+00:00] Run buildah build [2025-11-04T09:57:09,716834244+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad --label org.opencontainers.image.revision=cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --label quay.expires-after=5d --label build-date=2025-11-04T09:56:53Z --annotation org.opencontainers.image.revision=cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.sH6vJF -t quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad . STEP 1/10: FROM registry.access.redhat.com/ubi9/python-39:1-117.1684741281 STEP 2/10: EXPOSE 8081/tcp STEP 3/10: ENV FLASK_PORT=8081 STEP 4/10: WORKDIR /projects STEP 5/10: COPY . . STEP 6/10: RUN if [ -f requirements.txt ]; then pip install -r requirements.txt; elif [ `ls -1q *.txt | wc -l` == 1 ]; then pip install -r *.txt; fi Collecting Flask==2.3.3 Downloading flask-2.3.3-py3-none-any.whl (96 kB) Collecting itsdangerous>=2.1.2 Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB) Collecting click>=8.1.3 Downloading click-8.1.8-py3-none-any.whl (98 kB) Collecting Werkzeug>=2.3.7 Downloading werkzeug-3.1.3-py3-none-any.whl (224 kB) Collecting blinker>=1.6.2 Downloading blinker-1.9.0-py3-none-any.whl (8.5 kB) Collecting importlib-metadata>=3.6.0 Downloading importlib_metadata-8.7.0-py3-none-any.whl (27 kB) Collecting Jinja2>=3.1.2 Downloading jinja2-3.1.6-py3-none-any.whl (134 kB) Collecting zipp>=3.20 Downloading zipp-3.23.0-py3-none-any.whl (10 kB) Collecting MarkupSafe>=2.0 Downloading markupsafe-3.0.3-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (20 kB) Installing collected packages: zipp, MarkupSafe, Werkzeug, Jinja2, itsdangerous, importlib-metadata, click, blinker, Flask Successfully installed Flask-2.3.3 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.3 blinker-1.9.0 click-8.1.8 importlib-metadata-8.7.0 itsdangerous-2.2.0 zipp-3.23.0 WARNING: You are using pip version 21.3.1; however, version 25.3 is available. You should consider upgrading via the '/opt/app-root/bin/python3.9 -m pip install --upgrade pip' command. STEP 7/10: CMD [ "python", "./app.py" ] STEP 8/10: COPY labels.json /usr/share/buildinfo/labels.json STEP 9/10: COPY labels.json /root/buildinfo/labels.json STEP 10/10: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad" "org.opencontainers.image.revision"="cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/sample-multi-component" "quay.expires-after"="5d" "build-date"="2025-11-04T09:56:53Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | container step-push: Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad docker://quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:python-component-gwbxak-on-pull-request-tg6lb-build-container [2025-11-04T09:57:26,703512959+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-11-04T09:57:29,618313530+00:00] Convert image [2025-11-04T09:57:29,619643291+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:python-component-gwbxak-on-pull-request-tg6lb-build-container [2025-11-04T09:57:44,883199476+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad docker://quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad sha256:9d75d914383c37b800017ecf5419eb187435237fc2295259c28815b15a690415quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad [2025-11-04T09:57:47,998603041+00:00] End push pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | container step-sbom-syft-generate: [2025-11-04T09:57:48,361506906+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2025-11-04T09:58:05,878415068+00:00] End sbom-syft-generate pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | container step-prepare-sboms: [2025-11-04T09:58:06,144168424+00:00] Prepare SBOM [2025-11-04T09:58:06,149032353+00:00] Generate SBOM with mobster 2025-11-04 09:58:12,336 [INFO] mobster.log: Logging level set to 20 2025-11-04 09:58:13,617 [INFO] mobster.main: Exiting with code 0. [2025-11-04T09:58:13,726271881+00:00] End prepare-sboms pod: python-component-gwbxak-on-cab223cfbe977c87e23e6eabe40bef8d-pod | container step-upload-sbom: [2025-11-04T09:58:14,448852674+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak Pushing sbom to registry Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad@sha256:9d75d914383c37b800017ecf5419eb187435237fc2295259c28815b15a690415 quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak@sha256:4e2e485edf7dd851e85e4af9f64acba8c7c7ca40f1c6dec950a249c77a094483 [2025-11-04T09:58:20,108165596+00:00] End upload-sbom pod: python-component-gwbxak-on-pull-request-tg6lb-init-pod | init container: prepare 2025/11/04 09:53:39 Entrypoint initialization pod: python-component-gwbxak-on-pull-request-tg6lb-init-pod | init container: place-scripts 2025/11/04 09:53:45 Decoded script /tekton/scripts/script-0-2r55s pod: python-component-gwbxak-on-pull-request-tg6lb-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-xxjb/python-component-gwbxak:on-pr-cf1621fdcf971d5e4b735e4fd2d7be6ef30c8bad Determine if Image Already Exists