pod: gh-test-custom-branch-kfkedp-on-pull-request-4b6nq-init-pod | init container: prepare
2025/10/16 16:34:19 Entrypoint initialization

 pod: gh-test-custom-branch-kfkedp-on-pull-request-4b6nq-init-pod | init container: place-scripts
2025/10/16 16:34:25 Decoded script /tekton/scripts/script-0-45bxj

pod: gh-test-custom-branch-kfkedp-on-pull-request-4b6nq-init-pod | container step-init: 
Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:on-pr-a6a035c86ed1617cd3e849e559413876f26d2f00

Determine if Image Already Exists

 pod: gh-test-custom-branch-kfkedp-on-pull-request-t6v8h-init-pod | init container: prepare
2025/10/16 16:39:14 Entrypoint initialization

 pod: gh-test-custom-branch-kfkedp-on-pull-request-t6v8h-init-pod | init container: place-scripts
2025/10/16 16:39:14 Decoded script /tekton/scripts/script-0-9ls4v

pod: gh-test-custom-branch-kfkedp-on-pull-request-t6v8h-init-pod | container step-init: 
Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:on-pr-f74f312c51b66cccd6ef68080b4ea57a8921fe4f

Determine if Image Already Exists

 pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-apply-tags-pod | init container: prepare
2025/10/16 16:44:56 Entrypoint initialization

 pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-apply-tags-pod | init container: place-scripts
2025/10/16 16:44:58 Decoded script /tekton/scripts/script-0-kps6l
2025/10/16 16:44:58 Decoded script /tekton/scripts/script-1-f7r77

pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-apply-tags-pod | container step-apply-additional-tags-from-parameter: 
No additional tags parameter specified

pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-apply-tags-pod | container step-apply-additional-tags-from-image-label: 
Applying tag test-tag1
Getting image source signatures
Copying blob sha256:b42752057ab196e7866a999d8db12f3c94a7aab88735ab8afb8a59d377c963a3
Copying blob sha256:cf4ba836528490bb3adbc7bccc51c4f51193fd8d703e408d6285e33242c2cb27
Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3
Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b
Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
Copying config sha256:ecf29bceb048c38b2e5229a4c970a8e01703da8d4f2f44e3041d29d9c8211be7
Writing manifest to image destination
Applying tag test-tag2
Getting image source signatures
Copying blob sha256:b42752057ab196e7866a999d8db12f3c94a7aab88735ab8afb8a59d377c963a3
Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b
Copying blob sha256:cf4ba836528490bb3adbc7bccc51c4f51193fd8d703e408d6285e33242c2cb27
Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3
Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
Copying config sha256:ecf29bceb048c38b2e5229a4c970a8e01703da8d4f2f44e3041d29d9c8211be7
Writing manifest to image destination

 pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | init container: prepare
2025/10/16 16:42:43 Entrypoint initialization

 pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | init container: place-scripts
2025/10/16 16:42:46 Decoded script /tekton/scripts/script-0-7kwlx
2025/10/16 16:42:46 Decoded script /tekton/scripts/script-1-rppv8
2025/10/16 16:42:46 Decoded script /tekton/scripts/script-2-82269
2025/10/16 16:42:46 Decoded script /tekton/scripts/script-3-m288f
2025/10/16 16:42:46 Decoded script /tekton/scripts/script-4-9tnz2

 pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | init container: working-dir-initializer

pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | container step-build: 
[2025-10-16T16:42:54,057165573+00:00] Validate context path
[2025-10-16T16:42:54,060814403+00:00] Update CA trust
[2025-10-16T16:42:54,062020732+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2025-10-16T16:42:56,351931853+00:00] Prepare Dockerfile
Checking if /var/workdir/cachi2/output/bom.json exists.
Could not find prefetched sbom. No content_sets found for ICM
[2025-10-16T16:42:56,359274779+00:00] Prepare system (architecture: x86_64)
[2025-10-16T16:42:56,577482632+00:00] Setup prefetched
Trying to pull quay.io/jitesoft/nginx:latest...
Getting image source signatures
Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3
Copying blob sha256:cf4ba836528490bb3adbc7bccc51c4f51193fd8d703e408d6285e33242c2cb27
Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b
Copying config sha256:b65a13cb413ade37f56093fb2deb5911f2313f2fc4c3fab25d3ec25957ad7b86
Writing manifest to image destination
[2025-10-16T16:43:00,019419110+00:00] Unsetting proxy
{
  "com.jitesoft.app.alpine.version": "3.22.2",
  "com.jitesoft.app.nginx.version": "1.29.2",
  "com.jitesoft.build.arch": "amd64",
  "com.jitesoft.build.platform": "linux/amd64",
  "com.jitesoft.project.registry.uri": "registry.gitlab.com/jitesoft/dockerfiles/nginx",
  "com.jitesoft.project.repo.issues": "https://gitlab.com/jitesoft/dockerfiles/nginx/issues",
  "com.jitesoft.project.repo.type": "git",
  "com.jitesoft.project.repo.uri": "https://gitlab.com/jitesoft/dockerfiles/nginx",
  "io.artifacthub.package.alternative-locations": "oci://index.docker.io/jitesoft/nginx,oci://ghcr.io/jitesoft/nginx,oci://registry.gitlab.com/jitesoft/dockerfiles/nginx",
  "io.artifacthub.package.logo-url": "https://jitesoft.com/favicon-96x96.png",
  "io.artifacthub.package.readme-url": "https://gitlab.com/jitesoft/dockerfiles/nginx/-/raw/master/README.md",
  "maintainer": "Johannes Tegnér <johannes@jitesoft.com>",
  "maintainer.org": "Jitesoft",
  "maintainer.org.uri": "https://jitesoft.com",
  "org.opencontainers.image.created": "",
  "org.opencontainers.image.description": "Nginx on Alpine linux",
  "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-hello-world",
  "org.opencontainers.image.vendor": "Jitesoft",
  "org.opencontainers.image.version": "1.29.2",
  "architecture": "x86_64",
  "vcs-type": "git",
  "vcs-ref": "eb67054f434ec513104b9567283e943c0d930188",
  "org.opencontainers.image.revision": "eb67054f434ec513104b9567283e943c0d930188",
  "build-date": "2025-10-16T16:42:56Z",
  "io.buildah.version": "1.41.4",
  "konflux.additional-tags": "test-tag1, test-tag2"
}
[2025-10-16T16:43:00,073764084+00:00] Register sub-man
Adding the entitlement to the build
[2025-10-16T16:43:00,077570108+00:00] Add secrets
[2025-10-16T16:43:00,094504700+00:00] Run buildah build
[2025-10-16T16:43:00,095806079+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=eb67054f434ec513104b9567283e943c0d930188 --label org.opencontainers.image.revision=eb67054f434ec513104b9567283e943c0d930188 --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world --label build-date=2025-10-16T16:42:56Z --annotation org.opencontainers.image.revision=eb67054f434ec513104b9567283e943c0d930188 --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.PiR8E7 -t quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188 . 
STEP 1/5: FROM quay.io/jitesoft/nginx:latest
STEP 2/5: ENV PORT="8080"
STEP 3/5: LABEL konflux.additional-tags="test-tag1, test-tag2"
STEP 4/5: COPY labels.json /root/buildinfo/labels.json
STEP 5/5: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="eb67054f434ec513104b9567283e943c0d930188" "org.opencontainers.image.revision"="eb67054f434ec513104b9567283e943c0d930188" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-hello-world" "build-date"="2025-10-16T16:42:56Z"
COMMIT quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188
time="2025-10-16T16:43:00Z" level=warning msg="HEALTHCHECK is not supported for OCI image format and will be ignored. Must use `docker` format"
--> ecf29bceb048
Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188
ecf29bceb048c38b2e5229a4c970a8e01703da8d4f2f44e3041d29d9c8211be7
[2025-10-16T16:43:01,132747945+00:00] Unsetting proxy
[2025-10-16T16:43:01,134143742+00:00] Add metadata
Recording base image digests used
quay.io/jitesoft/nginx:latest quay.io/jitesoft/nginx:latest@sha256:53aaee92d207b6ddfe428c697514714cbef243711a599f408534665f6da0255c
Getting image source signatures
Copying blob sha256:daa22616431626e71df031cee203f5ac6f7c63ce0e68b4ae0e01cb0c5ffe05fd
Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
Copying blob sha256:f8e7ccd03afcc9d0564cf87f00b053027fa490a67b32d7088092f33362e5c501
Copying blob sha256:1ea51c3f683f33a7148c84d6900dee0d6b2746aec78d13c0d929b8f0ad53cb02
Copying blob sha256:256f393e029fa2063d8c93720da36a74a032bed3355a2bc3e313ad12f8bde9d1
Copying config sha256:ecf29bceb048c38b2e5229a4c970a8e01703da8d4f2f44e3041d29d9c8211be7
Writing manifest to image destination
[2025-10-16T16:43:01,586235284+00:00] End build

pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | container step-push: 
[2025-10-16T16:43:02,223339662+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2025-10-16T16:43:04,962811168+00:00] Convert image
[2025-10-16T16:43:04,964002938+00:00] Push image with unique tag
Pushing to quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container
Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188 docker://quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container
[2025-10-16T16:43:17,400606794+00:00] Push image with git revision
Pushing to quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188
Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188 docker://quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188
sha256:d18b4d49a98c132a2cb8065f7a1838783f3c1589c0ba1d8fc5002594462986e5quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188
[2025-10-16T16:43:19,099650443+00:00] End push

pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | container step-sbom-syft-generate: 
[2025-10-16T16:43:19,393888273+00:00] Generate SBOM
Running syft on the source directory
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
Running syft on the image
[2025-10-16T16:43:22,914987514+00:00] End sbom-syft-generate

pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | container step-prepare-sboms: 
[2025-10-16T16:43:23,577766282+00:00] Prepare SBOM
[2025-10-16T16:43:23,582418484+00:00] Generate SBOM with mobster
2025-10-16 16:43:24,974 [INFO] mobster.log: Logging level set to 20
2025-10-16 16:43:25,020 [INFO] mobster.oci: Fetching manifest for quay.io/jitesoft/nginx@sha256:53aaee92d207b6ddfe428c697514714cbef243711a599f408534665f6da0255c
2025-10-16 16:43:28,557 [INFO] mobster.cmd.generate.oci_image.contextual_parent_content: Contextual mechanism won't be used, there is no parent image SBOM.
2025-10-16 16:43:28,570 [WARNING] mobster.cmd.generate.oci_image: ValidationMessage(validation_message='Unrecognized license reference: LicenseRef-AND. license_expression must only use IDs from the license list or extracted licensing info, but is: LicenseRef-AND AND BSD-2-Clause AND LicenseRef-custom', context=ValidationContext(spdx_id=None, parent_id='SPDXRef-Package-apk-aom-libs-ea5260c6dbe8a3e7', element_type=<SpdxElementType.LICENSE_EXPRESSION: 1>, full_element=AND(LicenseSymbol('LicenseRef-AND', is_exception=False), LicenseSymbol('BSD-2-Clause', aliases=('BSD-2-Clause-NetBSD', 'BSD-2'), is_exception=False), LicenseSymbol('LicenseRef-custom', is_exception=False))))
2025-10-16 16:43:28,570 [WARNING] mobster.cmd.generate.oci_image: ValidationMessage(validation_message='Unrecognized license reference: LicenseRef-custom. license_expression must only use IDs from the license list or extracted licensing info, but is: LicenseRef-AND AND BSD-2-Clause AND LicenseRef-custom', context=ValidationContext(spdx_id=None, parent_id='SPDXRef-Package-apk-aom-libs-ea5260c6dbe8a3e7', element_type=<SpdxElementType.LICENSE_EXPRESSION: 1>, full_element=AND(LicenseSymbol('LicenseRef-AND', is_exception=False), LicenseSymbol('BSD-2-Clause', aliases=('BSD-2-Clause-NetBSD', 'BSD-2'), is_exception=False), LicenseSymbol('LicenseRef-custom', is_exception=False))))
2025-10-16 16:43:28,570 [WARNING] mobster.cmd.generate.oci_image: ValidationMessage(validation_message='Unrecognized license reference: LicenseRef-AND. license_expression must only use IDs from the license list or extracted licensing info, but is: LicenseRef-AND AND BSD-2-Clause AND BSD-3-Clause AND Beerware AND LicenseRef-Domain AND ISC AND LicenseRef-Public', context=ValidationContext(spdx_id=None, parent_id='SPDXRef-Package-apk-libmd-0387e6ced1ad6904', element_type=<SpdxElementType.LICENSE_EXPRESSION: 1>, full_element=AND(LicenseSymbol('LicenseRef-AND', is_exception=False), LicenseSymbol('BSD-2-Clause', aliases=('BSD-2-Clause-NetBSD', 'BSD-2'), is_exception=False), LicenseSymbol('BSD-3-Clause', aliases=('LicenseRef-scancode-libzip',), is_exception=False), LicenseSymbol('Beerware', is_exception=False), LicenseSymbol('LicenseRef-Domain', is_exception=False), LicenseSymbol('ISC', is_exception=False), LicenseSymbol('LicenseRef-Public', is_exception=False))))
2025-10-16 16:43:28,570 [WARNING] mobster.cmd.generate.oci_image: ValidationMessage(validation_message='Unrecognized license reference: LicenseRef-Domain. license_expression must only use IDs from the license list or extracted licensing info, but is: LicenseRef-AND AND BSD-2-Clause AND BSD-3-Clause AND Beerware AND LicenseRef-Domain AND ISC AND LicenseRef-Public', context=ValidationContext(spdx_id=None, parent_id='SPDXRef-Package-apk-libmd-0387e6ced1ad6904', element_type=<SpdxElementType.LICENSE_EXPRESSION: 1>, full_element=AND(LicenseSymbol('LicenseRef-AND', is_exception=False), LicenseSymbol('BSD-2-Clause', aliases=('BSD-2-Clause-NetBSD', 'BSD-2'), is_exception=False), LicenseSymbol('BSD-3-Clause', aliases=('LicenseRef-scancode-libzip',), is_exception=False), LicenseSymbol('Beerware', is_exception=False), LicenseSymbol('LicenseRef-Domain', is_exception=False), LicenseSymbol('ISC', is_exception=False), LicenseSymbol('LicenseRef-Public', is_exception=False))))
2025-10-16 16:43:28,570 [WARNING] mobster.cmd.generate.oci_image: ValidationMessage(validation_message='Unrecognized license reference: LicenseRef-Public. license_expression must only use IDs from the license list or extracted licensing info, but is: LicenseRef-AND AND BSD-2-Clause AND BSD-3-Clause AND Beerware AND LicenseRef-Domain AND ISC AND LicenseRef-Public', context=ValidationContext(spdx_id=None, parent_id='SPDXRef-Package-apk-libmd-0387e6ced1ad6904', element_type=<SpdxElementType.LICENSE_EXPRESSION: 1>, full_element=AND(LicenseSymbol('LicenseRef-AND', is_exception=False), LicenseSymbol('BSD-2-Clause', aliases=('BSD-2-Clause-NetBSD', 'BSD-2'), is_exception=False), LicenseSymbol('BSD-3-Clause', aliases=('LicenseRef-scancode-libzip',), is_exception=False), LicenseSymbol('Beerware', is_exception=False), LicenseSymbol('LicenseRef-Domain', is_exception=False), LicenseSymbol('ISC', is_exception=False), LicenseSymbol('LicenseRef-Public', is_exception=False))))
2025-10-16 16:43:28,570 [WARNING] mobster.cmd.generate.oci_image: ValidationMessage(validation_message='Unrecognized license reference: LicenseRef-AND. license_expression must only use IDs from the license list or extracted licensing info, but is: 0BSD AND LicenseRef-AND AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LicenseRef-Public-Domain', context=ValidationContext(spdx_id=None, parent_id='SPDXRef-Package-apk-xz-libs-bd7a047b03297e4b', element_type=<SpdxElementType.LICENSE_EXPRESSION: 1>, full_element=AND(LicenseSymbol('0BSD', is_exception=False), LicenseSymbol('LicenseRef-AND', is_exception=False), LicenseSymbol('GPL-2.0-or-later', aliases=('GPL-2.0+', 'GPL 2.0+'), is_exception=False), LicenseSymbol('LGPL-2.1-or-later', aliases=('LGPL-2.1+',), is_exception=False), LicenseSymbol('LicenseRef-Public-Domain', is_exception=False))))
2025-10-16 16:43:28,570 [WARNING] mobster.cmd.generate.oci_image: ValidationMessage(validation_message='Unrecognized license reference: LicenseRef-Public-Domain. license_expression must only use IDs from the license list or extracted licensing info, but is: 0BSD AND LicenseRef-AND AND GPL-2.0-or-later AND LGPL-2.1-or-later AND LicenseRef-Public-Domain', context=ValidationContext(spdx_id=None, parent_id='SPDXRef-Package-apk-xz-libs-bd7a047b03297e4b', element_type=<SpdxElementType.LICENSE_EXPRESSION: 1>, full_element=AND(LicenseSymbol('0BSD', is_exception=False), LicenseSymbol('LicenseRef-AND', is_exception=False), LicenseSymbol('GPL-2.0-or-later', aliases=('GPL-2.0+', 'GPL 2.0+'), is_exception=False), LicenseSymbol('LGPL-2.1-or-later', aliases=('LGPL-2.1+',), is_exception=False), LicenseSymbol('LicenseRef-Public-Domain', is_exception=False))))
2025-10-16 16:43:28,581 [INFO] mobster.main: Exiting with code 0.
[2025-10-16T16:43:28,691085557+00:00] End prepare-sboms

pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-build-container-pod | container step-upload-sbom: 
[2025-10-16T16:43:28,998148224+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp
Pushing sbom to registry
Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp:eb67054f434ec513104b9567283e943c0d930188@sha256:d18b4d49a98c132a2cb8065f7a1838783f3c1589c0ba1d8fc5002594462986e5
quay.io/redhat-appstudio-qe/build-e2e-byjy/gh-test-custom-branch-kfkedp@sha256:b443f7c28a02dee4c064e3781583317fbc8e759b0cfa373ed314b008f8c36931
[2025-10-16T16:43:32,807148364+00:00] End upload-sbom

 pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-clair-scan-pod | init container: prepare
2025/10/16 16:44:34 Entrypoint initialization

 pod: gh-test-custom-branch-kfkedp-on-push-jhc6z-clair-scan-pod | init container: place-scripts