pod: python-component-duyxmw-on-0f9bdcf5be23cfcf62293434e682bda1-pod | init container: prepare 2025/12/19 02:17:39 Entrypoint initialization pod: python-component-duyxmw-on-0f9bdcf5be23cfcf62293434e682bda1-pod | init container: place-scripts 2025/12/19 02:17:40 Decoded script /tekton/scripts/script-0-ltqkp 2025/12/19 02:17:40 Decoded script /tekton/scripts/script-1-tszx8 2025/12/19 02:17:40 Decoded script /tekton/scripts/script-2-dvzhn pod: python-component-duyxmw-on-0f9bdcf5be23cfcf62293434e682bda1-pod | container step-build: [2025-12-19T02:17:43,374237388+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' 12cf6cdca19ad87860305e994cfd9e86ad08dc38a4797b034c04bbf0faf30433 Skipping image index generation. Returning results for quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw@sha256:4b3a5c05dd5ba72990cfff1599e59e0dca070e012f4669f20d36970ed6c29184. pod: python-component-duyxmw-on-0f9bdcf5be23cfcf62293434e682bda1-pod | container step-create-sbom: The manifest_data.json file does not exist. Skipping the SBOM creation... pod: python-component-duyxmw-on-0f9bdcf5be23cfcf62293434e682bda1-pod | container step-upload-sbom: [2025-12-19T02:17:46,671929930+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' The index.spdx.json file does not exists. Skipping the SBOM upload... pod: python-component-duyxmw-on-3a28d7ff76cb876d1a1ce89293e04675-pod | init container: prepare 2025/12/19 02:15:27 Entrypoint initialization pod: python-component-duyxmw-on-3a28d7ff76cb876d1a1ce89293e04675-pod | init container: place-scripts 2025/12/19 02:15:29 Decoded script /tekton/scripts/script-0-7d9mt 2025/12/19 02:15:29 Decoded script /tekton/scripts/script-1-4b7j7 pod: python-component-duyxmw-on-3a28d7ff76cb876d1a1ce89293e04675-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1766110532.1534183,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1766110533.383738,"caller":"git/git.go:218","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/sample-multi-component @ 3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1766110533.3837945,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1766110533.4192789,"caller":"git/git.go:267","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision 3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 directly. pod: python-component-duyxmw-on-3a28d7ff76cb876d1a1ce89293e04675-pod | container step-symlink-check: Running symlink check pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | init container: prepare 2025/12/19 02:15:42 Entrypoint initialization pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | init container: place-scripts 2025/12/19 02:15:43 Decoded script /tekton/scripts/script-0-wjxgw 2025/12/19 02:15:43 Decoded script /tekton/scripts/script-1-qfst7 2025/12/19 02:15:43 Decoded script /tekton/scripts/script-2-4z4d4 2025/12/19 02:15:43 Decoded script /tekton/scripts/script-3-l4s9v 2025/12/19 02:15:43 Decoded script /tekton/scripts/script-4-97j8g pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | init container: working-dir-initializer pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | container step-build: [2025-12-19T02:15:48,359478488+00:00] Validate context path [2025-12-19T02:15:48,365124166+00:00] Update CA trust [2025-12-19T02:15:48,366764664+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-12-19T02:15:51,176620678+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2025-12-19T02:15:51,186451267+00:00] Prepare system (architecture: x86_64) [2025-12-19T02:15:51,280764752+00:00] Setup prefetched Trying to pull registry.access.redhat.com/ubi9/python-39:1-117.1684741281... Getting image source signatures Checking if image destination supports signatures Copying blob sha256:8a2e9815396eaa57b0dfe27b2dfc442417f06aa70974c358f198980b533c7942 Copying blob sha256:085efe85e9dfb0b3d5d2392e4b78660a3091bf1ded336315117a627fbdd0567d Copying blob sha256:a07d808ddf4404b3885fef6100142a973cc667b2c3c4abcf4db96508795b1efb Copying blob sha256:5465449a2ea5d8a7e05fa498c8ba35f0ce7714b0ad37e716961fca17dfa1ef13 Copying config sha256:45c8f23c11bb64f238236aaf5cbe05595778e1d4fb6c06109c6fcc0a6b57a45b Writing manifest to image destination Storing signatures [2025-12-19T02:16:18,544182906+00:00] Unsetting proxy { "architecture": "x86_64", "build-date": "2025-12-19T02:15:51Z", "com.redhat.component": "python-39-container", "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI", "description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.", "distribution-scope": "public", "io.buildah.version": "1.41.4", "io.buildpacks.stack.id": "com.redhat.stacks.ubi9-python-39", "io.k8s.description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.", "io.k8s.display-name": "Python 3.9", "io.openshift.expose-services": "8080:http", "io.openshift.s2i.scripts-url": "image:///usr/libexec/s2i", "io.openshift.tags": "builder,python,python39,python-39,rh-python39", "io.s2i.scripts-url": "image:///usr/libexec/s2i", "maintainer": "SoftwareCollections.org ", "name": "ubi9/python-39", "release": "117.1684741281", "summary": "Platform for building and running Python 3.9 applications", "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi9/python-39/images/1-117.1684741281", "usage": "s2i build https://github.com/sclorg/s2i-python-container.git --context-dir=3.9/test/setup-test-app/ ubi9/python-39 python-sample-app", "vcs-ref": "3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466", "vcs-type": "git", "vendor": "Red Hat, Inc.", "version": "1", "org.opencontainers.image.revision": "3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/sample-multi-component", "quay.expires-after": "5d", "org.opencontainers.image.created": "2025-12-19T02:15:51Z" } [2025-12-19T02:16:18,603518699+00:00] Register sub-man Adding the entitlement to the build [2025-12-19T02:16:18,608319013+00:00] Add secrets [2025-12-19T02:16:18,658022538+00:00] Run buildah build [2025-12-19T02:16:18,659989177+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 --label org.opencontainers.image.revision=3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --label quay.expires-after=5d --label build-date=2025-12-19T02:15:51Z --label org.opencontainers.image.created=2025-12-19T02:15:51Z --annotation org.opencontainers.image.revision=3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --annotation org.opencontainers.image.created=2025-12-19T02:15:51Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.dBukqj -t quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 . STEP 1/10: FROM registry.access.redhat.com/ubi9/python-39:1-117.1684741281 STEP 2/10: EXPOSE 8081/tcp STEP 3/10: ENV FLASK_PORT=8081 STEP 4/10: WORKDIR /projects STEP 5/10: COPY . . STEP 6/10: RUN if [ -f requirements.txt ]; then pip install -r requirements.txt; elif [ `ls -1q *.txt | wc -l` == 1 ]; then pip install -r *.txt; fi Collecting Flask==2.3.3 Downloading flask-2.3.3-py3-none-any.whl (96 kB) Collecting Jinja2>=3.1.2 Downloading jinja2-3.1.6-py3-none-any.whl (134 kB) Collecting importlib-metadata>=3.6.0 Downloading importlib_metadata-8.7.0-py3-none-any.whl (27 kB) Collecting click>=8.1.3 Downloading click-8.1.8-py3-none-any.whl (98 kB) Collecting Werkzeug>=2.3.7 Downloading werkzeug-3.1.4-py3-none-any.whl (224 kB) Collecting blinker>=1.6.2 Downloading blinker-1.9.0-py3-none-any.whl (8.5 kB) Collecting itsdangerous>=2.1.2 Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB) Collecting zipp>=3.20 Downloading zipp-3.23.0-py3-none-any.whl (10 kB) Collecting MarkupSafe>=2.0 Downloading markupsafe-3.0.3-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (20 kB) Installing collected packages: zipp, MarkupSafe, Werkzeug, Jinja2, itsdangerous, importlib-metadata, click, blinker, Flask Successfully installed Flask-2.3.3 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.4 blinker-1.9.0 click-8.1.8 importlib-metadata-8.7.0 itsdangerous-2.2.0 zipp-3.23.0 WARNING: You are using pip version 21.3.1; however, version 25.3 is available. You should consider upgrading via the '/opt/app-root/bin/python3.9 -m pip install --upgrade pip' command. STEP 7/10: CMD [ "python", "./app.py" ] STEP 8/10: COPY labels.json /usr/share/buildinfo/labels.json STEP 9/10: COPY labels.json /root/buildinfo/labels.json STEP 10/10: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466" "org.opencontainers.image.revision"="3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/sample-multi-component" "quay.expires-after"="5d" "build-date"="2025-12-19T02:15:51Z" "org.opencontainers.image.created"="2025-12-19T02:15:51Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 --> 5dea595f0364 Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 5dea595f03643f626a93bd8aec2114b117b88eab0b6755cf20f8448964977417 [2025-12-19T02:16:28,421855831+00:00] Unsetting proxy [2025-12-19T02:16:28,423880212+00:00] Add metadata Recording base image digests used registry.access.redhat.com/ubi9/python-39:1-117.1684741281 registry.access.redhat.com/ubi9/python-39:1-117.1684741281@sha256:40a58935b9c22664927b22bf256f53a3d744ddb7316f3af18061099e199526ee Getting image source signatures Copying blob sha256:5a0eb33936f611f644a97d10a99dbb262c0a999392af54d5c49157a4298d65a7 Copying blob sha256:bc8a0003b3470be53e5cf295daf38c287d3f20ab90e8f5c2b6f17406b158d323 Copying blob sha256:d661a108c347030c3ef626a0e0020e084fba1e1023193824f5395fa90ef40bde Copying blob sha256:629980bfa23ec05ce5acc61ed2866ddf8713f40bb2a61f0850395082f1457220 Copying blob sha256:d93d3cc0bc0c5ed9655bcdcf31183ed0b570076c0e6a13e0d7cb907d0b877b00 Copying config sha256:5dea595f03643f626a93bd8aec2114b117b88eab0b6755cf20f8448964977417 Writing manifest to image destination [2025-12-19T02:16:37,733744298+00:00] End build pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | container step-push: [2025-12-19T02:16:38,551856821+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-12-19T02:16:44,369067563+00:00] Convert image [2025-12-19T02:16:44,370649501+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:python-component-duyxmw-on-pull-request-m67sx-build-container Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 docker://quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:python-component-duyxmw-on-pull-request-m67sx-build-container [2025-12-19T02:17:02,989420739+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 docker://quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 sha256:4b3a5c05dd5ba72990cfff1599e59e0dca070e012f4669f20d36970ed6c29184quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466 [2025-12-19T02:17:05,448741795+00:00] End push pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | container step-sbom-syft-generate: [2025-12-19T02:17:05,755601871+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2025-12-19T02:17:22,274216723+00:00] End sbom-syft-generate pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | container step-prepare-sboms: [2025-12-19T02:17:22,945957529+00:00] Prepare SBOM [2025-12-19T02:17:22,952362642+00:00] Generate SBOM with mobster Skipping SBOM validation 2025-12-19 02:17:25,507 [INFO] mobster.log: Logging level set to 20 2025-12-19 02:17:25,917 [INFO] mobster.oci: Fetching manifest for registry.access.redhat.com/ubi9/python-39@sha256:40a58935b9c22664927b22bf256f53a3d744ddb7316f3af18061099e199526ee 2025-12-19 02:17:31,208 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2025-12-19 02:17:31,208 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2025-12-19 02:17:31,211 [INFO] mobster.log: Contextual workflow completed in 5.39s 2025-12-19 02:17:31,341 [INFO] mobster.main: Exiting with code 0. [2025-12-19T02:17:31,411887402+00:00] End prepare-sboms pod: python-component-duyxmw-on-9fbd9ba4b2fd1f08b6ba4c1ae9e195da-pod | container step-upload-sbom: [2025-12-19T02:17:32,097862529+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw Pushing sbom to registry Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw:on-pr-3062c8c32a098b7ff3cdbfb5c445ccc1c27d4466@sha256:4b3a5c05dd5ba72990cfff1599e59e0dca070e012f4669f20d36970ed6c29184 quay.io/redhat-appstudio-qe/build-e2e-uper/python-component-duyxmw@sha256:5ea6a863d361f754e55c6bf1f12636bc174c1d9a352f12198258d4cd3e8b525b [2025-12-19T02:17:35,557835869+00:00] End upload-sbom pod: python-component-duyxmw-on-a84842c908b2ab916f1fb8d1c0dd54a0-pod | init container: prepare 2025/12/19 02:17:53 Entrypoint initialization pod: python-component-duyxmw-on-a84842c908b2ab916f1fb8d1c0dd54a0-pod | init container: place-scripts 2025/12/19 02:17:56 Decoded script /tekton/scripts/script-0-bwxsk 2025/12/19 02:17:56 Decoded script /tekton/scripts/script-1-6tdk4 2025/12/19 02:17:56 Decoded script /tekton/scripts/script-2-btt4v 2025/12/19 02:17:56 Decoded script /tekton/scripts/script-3-292sm pod: python-component-duyxmw-on-a84842c908b2ab916f1fb8d1c0dd54a0-pod | container step-introspect: