[2026-01-23T17:59:22,423973198+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/group-wdao/go-component-lhsfco Pushing sbom to registry Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-wdao/go-component-lhsfco:on-pr-4a1bf785e34ee2f36da0f0343323588246d706c0@sha256:007cab517f174c85dab9d1c1447338c23f2bdf0ad868eedc4a07ff5df62f94c8 quay.io/redhat-appstudio-qe/group-wdao/go-component-lhsfco@sha256:18be109ada08d26d7c1863afa9d67d72fbc64d7ab82b088b21471b694a72cd36 [2026-01-23T17:59:24,791259517+00:00] End upload-sbom