pod: python-component-crxyrh-on-4fc56d2276c236dfe8f55e6567b2b921-pod | init container: prepare 2025/11/06 18:29:04 Entrypoint initialization pod: python-component-crxyrh-on-4fc56d2276c236dfe8f55e6567b2b921-pod | init container: place-scripts 2025/11/06 18:29:10 Decoded script /tekton/scripts/script-0-vh8d6 2025/11/06 18:29:10 Decoded script /tekton/scripts/script-1-lp8km pod: python-component-crxyrh-on-4fc56d2276c236dfe8f55e6567b2b921-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1762453756.2654238,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1762453757.9383552,"caller":"git/git.go:218","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/sample-multi-component @ 7fddd64c1773f7cbaad651ba7b3eae9e646808fd (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1762453757.93843,"caller":"git/git.go:384","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1762453757.9817536,"caller":"git/git.go:267","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision 7fddd64c1773f7cbaad651ba7b3eae9e646808fd directly. pod: python-component-crxyrh-on-4fc56d2276c236dfe8f55e6567b2b921-pod | container step-symlink-check: Running symlink check pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | init container: prepare 2025/11/06 18:29:37 Entrypoint initialization pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | init container: place-scripts 2025/11/06 18:29:38 Decoded script /tekton/scripts/script-0-fn2mf 2025/11/06 18:29:38 Decoded script /tekton/scripts/script-1-l4mvq 2025/11/06 18:29:38 Decoded script /tekton/scripts/script-2-dn9v8 2025/11/06 18:29:38 Decoded script /tekton/scripts/script-3-6lwn7 2025/11/06 18:29:38 Decoded script /tekton/scripts/script-4-7dpx7 pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | init container: working-dir-initializer pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | container step-build: [2025-11-06T18:29:42,727984176+00:00] Validate context path [2025-11-06T18:29:42,734315721+00:00] Update CA trust [2025-11-06T18:29:42,736310369+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-11-06T18:29:46,579325658+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2025-11-06T18:29:46,591874992+00:00] Prepare system (architecture: x86_64) [2025-11-06T18:29:46,903334335+00:00] Setup prefetched Trying to pull registry.access.redhat.com/ubi9/python-39:1-117.1684741281... Getting image source signatures Checking if image destination supports signatures Copying blob sha256:8a2e9815396eaa57b0dfe27b2dfc442417f06aa70974c358f198980b533c7942 Copying blob sha256:5465449a2ea5d8a7e05fa498c8ba35f0ce7714b0ad37e716961fca17dfa1ef13 Copying blob sha256:085efe85e9dfb0b3d5d2392e4b78660a3091bf1ded336315117a627fbdd0567d Copying blob sha256:a07d808ddf4404b3885fef6100142a973cc667b2c3c4abcf4db96508795b1efb Copying config sha256:45c8f23c11bb64f238236aaf5cbe05595778e1d4fb6c06109c6fcc0a6b57a45b Writing manifest to image destination Storing signatures [2025-11-06T18:30:09,922734471+00:00] Unsetting proxy { "architecture": "x86_64", "build-date": "2025-11-06T18:29:46Z", "com.redhat.component": "python-39-container", "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI", "description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.", "distribution-scope": "public", "io.buildah.version": "1.41.4", "io.buildpacks.stack.id": "com.redhat.stacks.ubi9-python-39", "io.k8s.description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.", "io.k8s.display-name": "Python 3.9", "io.openshift.expose-services": "8080:http", "io.openshift.s2i.scripts-url": "image:///usr/libexec/s2i", "io.openshift.tags": "builder,python,python39,python-39,rh-python39", "io.s2i.scripts-url": "image:///usr/libexec/s2i", "maintainer": "SoftwareCollections.org ", "name": "ubi9/python-39", "release": "117.1684741281", "summary": "Platform for building and running Python 3.9 applications", "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi9/python-39/images/1-117.1684741281", "usage": "s2i build https://github.com/sclorg/s2i-python-container.git --context-dir=3.9/test/setup-test-app/ ubi9/python-39 python-sample-app", "vcs-ref": "7fddd64c1773f7cbaad651ba7b3eae9e646808fd", "vcs-type": "git", "vendor": "Red Hat, Inc.", "version": "1", "org.opencontainers.image.revision": "7fddd64c1773f7cbaad651ba7b3eae9e646808fd", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/sample-multi-component", "quay.expires-after": "5d" } [2025-11-06T18:30:09,999056586+00:00] Register sub-man Adding the entitlement to the build [2025-11-06T18:30:10,005416543+00:00] Add secrets [2025-11-06T18:30:10,027947898+00:00] Run buildah build [2025-11-06T18:30:10,030094876+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=7fddd64c1773f7cbaad651ba7b3eae9e646808fd --label org.opencontainers.image.revision=7fddd64c1773f7cbaad651ba7b3eae9e646808fd --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --label quay.expires-after=5d --label build-date=2025-11-06T18:29:46Z --annotation org.opencontainers.image.revision=7fddd64c1773f7cbaad651ba7b3eae9e646808fd --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/sample-multi-component --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.K20SQL -t quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd . STEP 1/10: FROM registry.access.redhat.com/ubi9/python-39:1-117.1684741281 STEP 2/10: EXPOSE 8081/tcp STEP 3/10: ENV FLASK_PORT=8081 STEP 4/10: WORKDIR /projects STEP 5/10: COPY . . STEP 6/10: RUN if [ -f requirements.txt ]; then pip install -r requirements.txt; elif [ `ls -1q *.txt | wc -l` == 1 ]; then pip install -r *.txt; fi Collecting Flask==2.3.3 Downloading flask-2.3.3-py3-none-any.whl (96 kB) Collecting Werkzeug>=2.3.7 Downloading werkzeug-3.1.3-py3-none-any.whl (224 kB) Collecting importlib-metadata>=3.6.0 Downloading importlib_metadata-8.7.0-py3-none-any.whl (27 kB) Collecting itsdangerous>=2.1.2 Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB) Collecting Jinja2>=3.1.2 Downloading jinja2-3.1.6-py3-none-any.whl (134 kB) Collecting click>=8.1.3 Downloading click-8.1.8-py3-none-any.whl (98 kB) Collecting blinker>=1.6.2 Downloading blinker-1.9.0-py3-none-any.whl (8.5 kB) Collecting zipp>=3.20 Downloading zipp-3.23.0-py3-none-any.whl (10 kB) Collecting MarkupSafe>=2.0 Downloading markupsafe-3.0.3-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (20 kB) Installing collected packages: zipp, MarkupSafe, Werkzeug, Jinja2, itsdangerous, importlib-metadata, click, blinker, Flask Successfully installed Flask-2.3.3 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.3 blinker-1.9.0 click-8.1.8 importlib-metadata-8.7.0 itsdangerous-2.2.0 zipp-3.23.0 WARNING: You are using pip version 21.3.1; however, version 25.3 is available. You should consider upgrading via the '/opt/app-root/bin/python3.9 -m pip install --upgrade pip' command. STEP 7/10: CMD [ "python", "./app.py" ] STEP 8/10: COPY labels.json /usr/share/buildinfo/labels.json STEP 9/10: COPY labels.json /root/buildinfo/labels.json STEP 10/10: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="7fddd64c1773f7cbaad651ba7b3eae9e646808fd" "org.opencontainers.image.revision"="7fddd64c1773f7cbaad651ba7b3eae9e646808fd" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/sample-multi-component" "quay.expires-after"="5d" "build-date"="2025-11-06T18:29:46Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd --> 01be453f24a8 Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd 01be453f24a863ac977e6ec480b53283cd252518035fcc40b48dbf90bc1dfd5d [2025-11-06T18:30:16,314601858+00:00] Unsetting proxy [2025-11-06T18:30:16,317025562+00:00] Add metadata Recording base image digests used registry.access.redhat.com/ubi9/python-39:1-117.1684741281 registry.access.redhat.com/ubi9/python-39:1-117.1684741281@sha256:40a58935b9c22664927b22bf256f53a3d744ddb7316f3af18061099e199526ee Getting image source signatures Copying blob sha256:005b8bffe80ae44451eeb6ae9ac4c7d048bc6383b525756bd26ebf0c872513f6 Copying blob sha256:d93d3cc0bc0c5ed9655bcdcf31183ed0b570076c0e6a13e0d7cb907d0b877b00 Copying blob sha256:d661a108c347030c3ef626a0e0020e084fba1e1023193824f5395fa90ef40bde Copying blob sha256:bc8a0003b3470be53e5cf295daf38c287d3f20ab90e8f5c2b6f17406b158d323 Copying blob sha256:629980bfa23ec05ce5acc61ed2866ddf8713f40bb2a61f0850395082f1457220 Copying config sha256:01be453f24a863ac977e6ec480b53283cd252518035fcc40b48dbf90bc1dfd5d Writing manifest to image destination [2025-11-06T18:30:26,791276517+00:00] End build pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | container step-push: [2025-11-06T18:30:26,930062835+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-11-06T18:30:32,200874584+00:00] Convert image [2025-11-06T18:30:32,202926036+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:python-component-crxyrh-on-pull-request-p8t92-build-container Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd docker://quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:python-component-crxyrh-on-pull-request-p8t92-build-container [2025-11-06T18:30:52,845424227+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd docker://quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd sha256:fc198811c5cc3f32661adf6e0c3a42aeabc367ba3188668e51b4fe190308ff08quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd [2025-11-06T18:30:54,986029475+00:00] End push pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | container step-sbom-syft-generate: [2025-11-06T18:30:55,132054761+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2025-11-06T18:31:18,667189941+00:00] End sbom-syft-generate pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | container step-prepare-sboms: [2025-11-06T18:31:19,345669362+00:00] Prepare SBOM [2025-11-06T18:31:19,353442572+00:00] Generate SBOM with mobster pod: python-component-crxyrh-on-725a583623181a024d47202b44fc02b5-pod | container step-upload-sbom: [2025-11-06T18:31:24,512456904+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh Pushing sbom to registry Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd@sha256:fc198811c5cc3f32661adf6e0c3a42aeabc367ba3188668e51b4fe190308ff08 quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh@sha256:a170f3bfbdada09c14f881932121208a4584b73fb80cc6a8714f72fd5f251b38 [2025-11-06T18:31:28,342277900+00:00] End upload-sbom pod: python-component-crxyrh-on-pull-request-p8t92-init-pod | init container: prepare 2025/11/06 18:27:14 Entrypoint initialization pod: python-component-crxyrh-on-pull-request-p8t92-init-pod | init container: place-scripts 2025/11/06 18:27:22 Decoded script /tekton/scripts/script-0-m7fkc pod: python-component-crxyrh-on-pull-request-p8t92-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-ocsw/python-component-crxyrh:on-pr-7fddd64c1773f7cbaad651ba7b3eae9e646808fd Determine if Image Already Exists