> Enter [BeforeAll] HACBS pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:237 @ 05/12/26 10:36:40.137 "level"=0 "msg"="found credentials for image ref quay.io/redhat-appstudio-qe/test-images:pipeline-bundle-1778582202-tjby -> user: redhat-appstudio-qe+redhat_appstudio_quality" Created component for scenario sample-python-basic-oci: component: test-comp-fttg, repo: https://github.com/redhat-appstudio-qe/devfile-sample-python-basic, baseBranchName: base-jgxisj, pacBranchName: konflux-test-comp-fttg "level"=0 "msg"="found credentials for image ref quay.io/redhat-appstudio-qe/test-images:pipeline-bundle-1778582214-opcs -> user: redhat-appstudio-qe+redhat_appstudio_quality" Created component for scenario sample-python-basic-oci: component: test-comp-jerp, repo: https://github.com/redhat-appstudio-qe/devfile-sample-python-basic, baseBranchName: base-vxelfj, pacBranchName: konflux-test-comp-jerp "level"=0 "msg"="found credentials for image ref quay.io/redhat-appstudio-qe/test-images:pipeline-bundle-1778582227-dvpn -> user: redhat-appstudio-qe+redhat_appstudio_quality" Created component for scenario sample-python-basic-oci: component: test-comp-zsrs, repo: https://github.com/redhat-appstudio-qe/devfile-sample-python-basic, baseBranchName: base-tpdimd, pacBranchName: konflux-test-comp-zsrs Image repository for component test-symlink-comp-cnrr in namespace build-e2e-tgct do not have right state ('' != 'ready') yet but it has status { { } {<nil> } []}. Created component for scenario sample-python-basic-oci: component: test-symlink-comp-cnrr, repo: https://github.com/redhat-appstudio-qe/devfile-sample-python-basic, baseBranchName: base-xkxzzh, pacBranchName: konflux-test-symlink-comp-cnrr < Exit [BeforeAll] HACBS pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:237 @ 05/12/26 10:37:30.056 (49.919s) > Enter [It] triggers PipelineRun for symlink component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic with component name test-symlink-comp-cnrr - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:325 @ 05/12/26 10:37:30.057 PipelineRun has not been created yet for Component build-e2e-tgct/test-symlink-comp-cnrr < Exit [It] triggers PipelineRun for symlink component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic with component name test-symlink-comp-cnrr - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:325 @ 05/12/26 10:37:50.149 (20.093s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.149 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.15 (0s) > Enter [It] scenario sample-python-basic-oci triggers PipelineRun for component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:338 @ 05/12/26 10:37:50.15 < Exit [It] scenario sample-python-basic-oci triggers PipelineRun for component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:338 @ 05/12/26 10:37:50.216 (66ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.216 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.216 (0s) > Enter [It] scenario sample-python-basic-oci triggers PipelineRun for component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:338 @ 05/12/26 10:37:50.217 < Exit [It] scenario sample-python-basic-oci triggers PipelineRun for component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:338 @ 05/12/26 10:37:50.284 (67ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.284 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.284 (0s) > Enter [It] scenario sample-python-basic-oci triggers PipelineRun for component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:338 @ 05/12/26 10:37:50.285 < Exit [It] scenario sample-python-basic-oci triggers PipelineRun for component with source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:338 @ 05/12/26 10:37:50.353 (69ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.354 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:37:50.354 (0s) > Enter [It] should eventually finish successfully for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:356 @ 05/12/26 10:37:50.354 PipelineRun test-comp-fttg-on-pull-request-r2plc found for Component build-e2e-tgct/test-comp-fttg PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Running PipelineRun test-comp-fttg-on-pull-request-r2plc reason: PipelineRunStopping PipelineRun test-comp-fttg-on-pull-request-r2plc reason: PipelineRunStopping PipelineRun test-comp-fttg-on-pull-request-r2plc reason: PipelineRunStopping PipelineRun test-comp-fttg-on-pull-request-r2plc reason: PipelineRunStopping PipelineRun test-comp-fttg-on-pull-request-r2plc reason: PipelineRunStopping PipelineRun test-comp-fttg-on-pull-request-r2plc reason: PipelineRunStopping PipelineRun test-comp-fttg-on-pull-request-r2plc reason: Failed attempt 1/3: PipelineRun "test-comp-fttg-on-pull-request-r2plc" failed: pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | init container: prepare 2026/05/12 10:38:32 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | init container: place-scripts 2026/05/12 10:38:33 Decoded script /tekton/scripts/script-1-2nzwg 2026/05/12 10:38:33 Decoded script /tekton/scripts/script-2-lbppn 2026/05/12 10:38:33 Decoded script /tekton/scripts/script-3-zq5wt 2026/05/12 10:38:33 Decoded script /tekton/scripts/script-4-2dbkd 2026/05/12 10:38:33 Decoded script /tekton/scripts/script-5-4zmwv pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | container step-use-trusted-artifact: Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Executing: oras blob fetch --registry-config /tmp/use-oci.sh.4vQPZ3/auth-h0fULD.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a8aa55d1a25ec61d8844839208f7df74d62c4d5f5ab354e27176f120be5b2cb9 --output - Restored artifact quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a8aa55d1a25ec61d8844839208f7df74d62c4d5f5ab354e27176f120be5b2cb9 to /var/workdir/source WARN: artifact URI not provided, (given: =/var/workdir/cachi2) pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | container step-build: [2026-05-12T10:38:37,552942326+00:00] Validate context path [2026-05-12T10:38:37,556116679+00:00] Update CA trust [2026-05-12T10:38:37,557177011+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-05-12T10:38:41,488596931+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2026-05-12T10:38:41,494143184+00:00] Prepare system (architecture: x86_64) [2026-05-12T10:38:41,627333488+00:00] Setup prefetched Trying to pull quay.io/devfile/python:slim... Getting image source signatures Copying blob sha256:0f372def914e585a52a46de64d0ed00b960c02f5f81a307d673e73b404203d61 Copying blob sha256:2f9c09f7c02f4403f9ec5313e53e63eafe6cd43993457b810ce1b9642812daec Copying blob sha256:025c56f98b679f70b7a54241917e56da7b59ab9d2defecc6ebdb0bf2750484bb Copying blob sha256:778656c04542093db6d3b6e07bffbcf6ec4b24709276be7cdf177fcb3666663a Copying blob sha256:30fb943195a7f7cee90a9c67461c338d1d76a7004d2f94792b774ef71d875a02 Copying config sha256:04f51101c1b979fb8a45a5332bfa8ed2c60f613ea396c3edd40f3d91702b24ef Writing manifest to image destination [2026-05-12T10:39:06,796713932+00:00] Unsetting proxy { "architecture": "x86_64", "vcs-type": "git", "vcs-ref": "c4c935f8923d9a47d509406e03eeb97fdf41e7c4", "org.opencontainers.image.revision": "c4c935f8923d9a47d509406e03eeb97fdf41e7c4", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-python-basic", "quay.expires-after": "6h", "build-date": "2026-05-12T10:38:41Z", "org.opencontainers.image.created": "2026-05-12T10:38:41Z", "io.buildah.version": "1.42.2" } [2026-05-12T10:39:06,869132713+00:00] Register sub-man Adding the entitlement to the build [2026-05-12T10:39:06,872195024+00:00] Add secrets [2026-05-12T10:39:06,879204512+00:00] Run buildah build [2026-05-12T10:39:06,880221647+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=c4c935f8923d9a47d509406e03eeb97fdf41e7c4 --label org.opencontainers.image.revision=c4c935f8923d9a47d509406e03eeb97fdf41e7c4 --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --label quay.expires-after=6h --label build-date=2026-05-12T10:38:41Z --label org.opencontainers.image.created=2026-05-12T10:38:41Z --annotation org.opencontainers.image.revision=c4c935f8923d9a47d509406e03eeb97fdf41e7c4 --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --annotation org.opencontainers.image.created=2026-05-12T10:38:41Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.2qlR48 -t quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 . STEP 1/11: FROM quay.io/devfile/python:slim STEP 2/11: EXPOSE 8081/tcp STEP 3/11: ENV FLASK_PORT=8081 STEP 4/11: WORKDIR /projects STEP 5/11: COPY requirements.txt . STEP 6/11: RUN pip install -r requirements.txt Collecting Flask==2.1.0 Downloading Flask-2.1.0-py3-none-any.whl (95 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 95.2/95.2 kB 15.3 MB/s eta 0:00:00 Collecting Werkzeug>=2.0 Downloading werkzeug-3.1.8-py3-none-any.whl (226 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 226.5/226.5 kB 78.7 MB/s eta 0:00:00 Collecting Jinja2>=3.0 Downloading jinja2-3.1.6-py3-none-any.whl (134 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 134.9/134.9 kB 133.0 MB/s eta 0:00:00 Collecting itsdangerous>=2.0 Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB) Collecting click>=8.0 Downloading click-8.3.3-py3-none-any.whl (110 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 110.5/110.5 kB 122.2 MB/s eta 0:00:00 Collecting MarkupSafe>=2.0 Downloading markupsafe-3.0.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (22 kB) Installing collected packages: MarkupSafe, itsdangerous, click, Werkzeug, Jinja2, Flask Successfully installed Flask-2.1.0 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.8 click-8.3.3 itsdangerous-2.2.0 WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv [notice] A new release of pip available: 22.3.1 -> 26.1.1 [notice] To update, run: pip install --upgrade pip STEP 7/11: COPY . . STEP 8/11: CMD [ "python", "./app.py" ] STEP 9/11: COPY labels.json /usr/share/buildinfo/labels.json STEP 10/11: COPY labels.json /root/buildinfo/labels.json STEP 11/11: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="c4c935f8923d9a47d509406e03eeb97fdf41e7c4" "org.opencontainers.image.revision"="c4c935f8923d9a47d509406e03eeb97fdf41e7c4" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-python-basic" "quay.expires-after"="6h" "build-date"="2026-05-12T10:38:41Z" "org.opencontainers.image.created"="2026-05-12T10:38:41Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 --> 7c455bbc0355 Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 7c455bbc0355a2e2f98c9af3281a7f58032707cae89a67ad6602570fe01f9b6f [2026-05-12T10:39:13,210118373+00:00] Unsetting proxy [2026-05-12T10:39:13,211361982+00:00] Add metadata Recording base image digests used quay.io/devfile/python:slim quay.io/devfile/python:slim@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c Getting image source signatures Copying blob sha256:1fb8e55861a24a229dbd7125ef96fceacc4e19feb6f79ce75c2f6171630ca18d Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying config sha256:7c455bbc0355a2e2f98c9af3281a7f58032707cae89a67ad6602570fe01f9b6f Writing manifest to image destination [2026-05-12T10:39:19,115131616+00:00] End build pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | container step-push: [2026-05-12T10:39:19,853992262+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-05-12T10:39:40,958169731+00:00] Convert image [2026-05-12T10:39:40,959206981+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:test-comp-fttg-on-pull-request-r2plc-build-container [retry] executing: buildah push --format=oci --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:test-comp-fttg-on-pull-request-r2plc-build-container Getting image source signatures Copying blob sha256:1fb8e55861a24a229dbd7125ef96fceacc4e19feb6f79ce75c2f6171630ca18d Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying config sha256:7c455bbc0355a2e2f98c9af3281a7f58032707cae89a67ad6602570fe01f9b6f Writing manifest to image destination [2026-05-12T10:39:49,289272778+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 [retry] executing: buildah push --format=oci --retry 3 --tls-verify=true --digestfile /var/workdir/image-digest quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 Getting image source signatures Copying blob sha256:1fb8e55861a24a229dbd7125ef96fceacc4e19feb6f79ce75c2f6171630ca18d Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying config sha256:7c455bbc0355a2e2f98c9af3281a7f58032707cae89a67ad6602570fe01f9b6f Writing manifest to image destination sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 [retry] executing: kubectl get configmap cluster-config -n konflux-info -o json Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap) [2026-05-12T10:39:52,958205315+00:00] End push pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | container step-sbom-syft-generate: [2026-05-12T10:39:53,285677453+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2026-05-12T10:40:13,855890763+00:00] End sbom-syft-generate pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | container step-prepare-sboms: [2026-05-12T10:40:14,654697671+00:00] Prepare SBOM [2026-05-12T10:40:14,658428960+00:00] Generate SBOM with mobster Skipping SBOM validation 2026-05-12 10:40:29,259 [INFO] mobster.log: Logging level set to 20 2026-05-12 10:40:30,460 [INFO] mobster.oci: Fetching manifest for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c 2026-05-12 10:40:32,283 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:32,983 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:34,394 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:34,994 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:36,291 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:37,010 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:38,296 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:38,781 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:40:38,782 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2026-05-12 10:40:38,782 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2026-05-12 10:40:38,782 [INFO] mobster.log: Contextual workflow completed in 8.52s 2026-05-12 10:40:39,055 [INFO] mobster.main: Exiting with code 0. [2026-05-12T10:40:40,155898586+00:00] End prepare-sboms pod: test-comp-fttg-on-pull-request-r2plc-build-container-pod | container step-upload-sbom: [2026-05-12T10:40:40,927378282+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Pushing sbom to registry [retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'. Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6] to [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:sha256-a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6.sbom] with mediaType [text/spdx+json]. quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:0bc34b560e7aacd8998829920c5da5015f4c7fb23d50439f3ef2ff4840ca1a68 [2026-05-12T10:41:05,953327116+00:00] End upload-sbom pod: test-comp-fttg-on-pull-request-r2plc-build-image-index-pod | init container: prepare 2026/05/12 10:41:08 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-build-image-index-pod | init container: place-scripts 2026/05/12 10:41:09 Decoded script /tekton/scripts/script-0-pd52t 2026/05/12 10:41:09 Decoded script /tekton/scripts/script-1-fvz7q 2026/05/12 10:41:09 Decoded script /tekton/scripts/script-2-nh4hs pod: test-comp-fttg-on-pull-request-r2plc-build-image-index-pod | container step-build: [2026-05-12T10:41:38,990005086+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Running konflux-build-cli time="2026-05-12T10:41:40Z" level=info msg="[param] image: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4" time="2026-05-12T10:41:40Z" level=info msg="[param] images: [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6]" time="2026-05-12T10:41:40Z" level=info msg="[param] buildah-format: oci" time="2026-05-12T10:41:40Z" level=info msg="[param] always-build-index: false" time="2026-05-12T10:41:40Z" level=info msg="[param] additional-tags: [test-comp-fttg-on-pull-request-r2plc-build-image-index]" time="2026-05-12T10:41:40Z" level=info msg="[param] output-manifest-path: /index-build-data/manifest_data.json" time="2026-05-12T10:41:40Z" level=info msg="[param] result-path-image-digest: /tekton/results/IMAGE_DIGEST" time="2026-05-12T10:41:40Z" level=info msg="[param] result-path-image-url: /tekton/results/IMAGE_URL" time="2026-05-12T10:41:40Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF" time="2026-05-12T10:41:40Z" level=info msg="[param] result-path-images: /tekton/results/IMAGES" time="2026-05-12T10:41:40Z" level=info msg="Creating manifest list: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4" time="2026-05-12T10:41:41Z" level=info msg="buildah [stdout] 2285adea99ade4d9ecc2144586f6cf427d97efed42cc1c9e51fb8b2bdbf72ea1" logger=CliExecutor time="2026-05-12T10:41:41Z" level=info msg="Skipping image index generation. Returning results for single image." {"image_digest":"sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6","image_url":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4","image_ref":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6","images":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6"} pod: test-comp-fttg-on-pull-request-r2plc-build-image-index-pod | container step-create-sbom: The manifest_data.json file does not exist. Skipping the SBOM creation... pod: test-comp-fttg-on-pull-request-r2plc-build-image-index-pod | container step-upload-sbom: [2026-05-12T10:41:42,151525454+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' The index.spdx.json file does not exists. Skipping the SBOM upload... pod: test-comp-fttg-on-pull-request-r2plc-clamav-scan-pod | init container: prepare 2026/05/12 10:41:46 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-clamav-scan-pod | init container: place-scripts 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-0-pxpn4 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-1-4jzh8 pod: test-comp-fttg-on-pull-request-r2plc-clamav-scan-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Detecting artifact type for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6. Detected container image. Processing image manifests. Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 128.875 sec (2 m 8 s) Start Date: 2026:05:12 10:42:32 End Date: 2026:05:12 10:44:41 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27998/Tue May 12 06:24:57 2026 Database version: 27998 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1778582681","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1778582681","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1778582681","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4", "digests": ["sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6"]}} pod: test-comp-fttg-on-pull-request-r2plc-clamav-scan-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 [retry] executing: oras attach --no-tty --registry-config /home/taskuser/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Uploading 073627944042 clamscan-result-amd64.log Uploading 1bd97bc16a05 clamscan-ec-test-amd64.json Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploaded 073627944042 clamscan-result-amd64.log Uploaded 1bd97bc16a05 clamscan-ec-test-amd64.json Uploading 18b83cf8a8b2 application/vnd.oci.image.manifest.v1+json Uploaded 18b83cf8a8b2 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 Digest: sha256:18b83cf8a8b25766fae6fbb94a033a8fd68b6bb2431ecce8cee36f97c73f45fb pod: test-comp-fttg-on-pull-request-r2plc-clone-repository-pod | init container: prepare 2026/05/12 10:37:23 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-clone-repository-pod | init container: place-scripts 2026/05/12 10:37:24 Decoded script /tekton/scripts/script-0-wvkbz 2026/05/12 10:37:24 Decoded script /tekton/scripts/script-1-rhtwv pod: test-comp-fttg-on-pull-request-r2plc-clone-repository-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1778582255.1608517,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582255.3777926,"caller":"git/git.go:223","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/devfile-sample-python-basic @ c4c935f8923d9a47d509406e03eeb97fdf41e7c4 (grafted, HEAD) in path /var/workdir/source"} {"level":"info","ts":1778582255.3778346,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582255.4013197,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /var/workdir/source"} Merge option disabled. Using checked-out revision c4c935f8923d9a47d509406e03eeb97fdf41e7c4 directly. pod: test-comp-fttg-on-pull-request-r2plc-clone-repository-pod | container step-symlink-check: Running symlink check pod: test-comp-fttg-on-pull-request-r2plc-clone-repository-pod | container step-create-trusted-artifact: Prepared artifact from /var/workdir/source (sha256:a8aa55d1a25ec61d8844839208f7df74d62c4d5f5ab354e27176f120be5b2cb9) Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Executing: oras push --annotation=quay.expires-after=6h --registry-config /tmp/create-oci.sh.nOWdas/auth-0ZjPtG.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4.git SOURCE_ARTIFACT Uploading a8aa55d1a25e SOURCE_ARTIFACT Uploaded a8aa55d1a25e SOURCE_ARTIFACT Pushed [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4.git ArtifactType: application/vnd.unknown.artifact.v1 Digest: sha256:c465f57e6ade0dbf6331e62b43bfe42f4e90e11bac9c5c72a5cca1aa3632dfc6 Artifacts created pod: test-comp-fttg-on-pull-request-r2plc-init-pod | init container: prepare 2026/05/12 10:37:06 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-init-pod | container step-init: time="2026-05-12T10:37:21Z" level=info msg="[param] enable: false" time="2026-05-12T10:37:21Z" level=info msg="[param] default-http-proxy: squid.caching.svc.cluster.local:3128" time="2026-05-12T10:37:21Z" level=info msg="[param] default-no-proxy: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-05-12T10:37:21Z" level=info msg="[param] http-proxy-result-path: /tekton/results/http-proxy" time="2026-05-12T10:37:21Z" level=info msg="[param] no-proxy-result-path: /tekton/results/no-proxy" time="2026-05-12T10:37:21Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-05-12T10:37:21Z" level=info msg="Cache proxy is disabled via param" time="2026-05-12T10:37:21Z" level=info msg="[result] HTTP PROXY: " time="2026-05-12T10:37:21Z" level=info msg="[result] NO PROXY: " pod: test-comp-fttg-on-pull-request-r2plc-prefetch-dependencies-pod | init container: prepare 2026/05/12 10:37:40 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-prefetch-dependencies-pod | init container: place-scripts 2026/05/12 10:37:41 Decoded script /tekton/scripts/script-0-kmptt 2026/05/12 10:37:41 Decoded script /tekton/scripts/script-2-zwmdl pod: test-comp-fttg-on-pull-request-r2plc-prefetch-dependencies-pod | container step-skip-ta: pod: test-comp-fttg-on-pull-request-r2plc-prefetch-dependencies-pod | container step-use-trusted-artifact: WARN: found skip file in /var/workdir/source pod: test-comp-fttg-on-pull-request-r2plc-prefetch-dependencies-pod | container step-prefetch-dependencies: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using mounted service CA bundle: /mnt/service-ca/ca-bundle.crt '/mnt/service-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/service-ca.crt' time="2026-05-12T10:38:18Z" level=debug msg="Starting prefetch-dependencies" time="2026-05-12T10:38:18Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-05-12T10:38:18Z" level=info msg="Not using package registry proxy because allow-package-registry-proxy is not set to `true` on the cluster level" logger=PrefetchDependencies time="2026-05-12T10:38:18Z" level=info msg="[param] source-dir: /var/workdir/source" time="2026-05-12T10:38:18Z" level=info msg="[param] output-dir: /var/workdir/cachi2/output" time="2026-05-12T10:38:18Z" level=info msg="[param] sbom-format: spdx" time="2026-05-12T10:38:18Z" level=info msg="[param] mode: strict" time="2026-05-12T10:38:18Z" level=info msg="[param] output-dir-mount-point: /cachi2/output" time="2026-05-12T10:38:18Z" level=info msg="[param] env-files: [/var/workdir/cachi2/cachi2.env /var/workdir/cachi2/prefetch.env /var/workdir/cachi2/prefetch-env.json]" time="2026-05-12T10:38:18Z" level=info msg="[param] git-auth-directory: /workspace/git-basic-auth" time="2026-05-12T10:38:28Z" level=info msg="hermeto [stdout] hermeto 0.51.0" logger=CliExecutor time="2026-05-12T10:38:29Z" level=warning msg="No input provided; skipping prefetch-dependencies" logger=PrefetchDependencies time="2026-05-12T10:38:29Z" level=debug msg="Finished prefetch-dependencies" pod: test-comp-fttg-on-pull-request-r2plc-prefetch-dependencies-pod | container step-create-trusted-artifact: WARN: found skip file in /var/workdir/source WARN: found skip file in /var/workdir/cachi2 pod: test-comp-fttg-on-pull-request-r2plc-sast-shell-check-pod | init container: prepare 2026/05/12 10:41:46 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-sast-shell-check-pod | init container: place-scripts 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-1-wtnf5 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-2-wwgqk pod: test-comp-fttg-on-pull-request-r2plc-sast-shell-check-pod | container step-use-trusted-artifact: Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Executing: oras blob fetch --registry-config /tmp/use-oci.sh.xM7RNZ/auth-Lnj0Ty.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a8aa55d1a25ec61d8844839208f7df74d62c4d5f5ab354e27176f120be5b2cb9 --output - Restored artifact quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a8aa55d1a25ec61d8844839208f7df74d62c4d5f5ab354e27176f120be5b2cb9 to /var/workdir/source WARN: artifact URI not provided, (given: =/var/workdir/cachi2) pod: test-comp-fttg-on-pull-request-r2plc-sast-shell-check-pod | container step-sast-shell-check: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=test-comp-fttg + echo 'INFO: The PROJECT_NAME used is: test-comp-fttg' INFO: The PROJECT_NAME used is: test-comp-fttg + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust ++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck + PACKAGE_VERSION=ShellCheck-0.10.0-3.el9 + OUTPUT_FILE=shellcheck-results.json + SOURCE_CODE_DIR=/var/workdir/source + declare -a ALL_TARGETS + IFS=, + read -ra TARGET_ARRAY + for d in "${TARGET_ARRAY[@]}" + potential_path=/var/workdir/source/. ++ realpath -m /var/workdir/source/. + resolved_path=/var/workdir/source + [[ /var/workdir/source == \/\v\a\r\/\w\o\r\k\d\i\r\/\s\o\u\r\c\e* ]] + ALL_TARGETS+=("$resolved_path") + '[' -z '' ']' + '[' -r /sys/fs/cgroup/cpu.max ']' + read -r quota period + '[' 12800 '!=' max ']' + '[' -n 100000 ']' + '[' 100000 -gt 0 ']' + export SC_JOBS=1 + SC_JOBS=1 INFO: Setting SC_JOBS=1 based on cgroups v2 max for run-shellcheck.sh + echo 'INFO: Setting SC_JOBS=1 based on cgroups v2 max for run-shellcheck.sh' + /usr/share/csmock/scripts/run-shellcheck.sh /var/workdir/source Looking for shell scripts................ done + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/applypatch-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/post-update.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/prepare-commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-applypatch.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-merge-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-push.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-rebase.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-receive.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/push-to-checkout.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/sendemail-validate.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/update.sample + CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}") + [[ true == \t\r\u\e ]] + CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|' + CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|' + CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$' + CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER") + csgrep --mode=json --strip-path-prefix=/var/workdir/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-104.json ./shellcheck-results/sc-110.json ./shellcheck-results/sc-116.json ./shellcheck-results/sc-122.json ./shellcheck-results/sc-128.json ./shellcheck-results/sc-139.json ./shellcheck-results/sc-70.json ./shellcheck-results/sc-86.json ./shellcheck-results/sc-92.json ./shellcheck-results/sc-98.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered ShellCheck results have been saved to shellcheck-results.json + echo 'ShellCheck results have been saved to shellcheck-results.json' + csgrep --mode=evtstat shellcheck-results.json + csgrep --mode=sarif shellcheck-results.json + TEST_OUTPUT= + parse_test_output sast-shell-check-oci-ta-min sarif shellcheck-results.sarif + TEST_NAME=sast-shell-check-oci-ta-min + TEST_RESULT_FORMAT=sarif + TEST_RESULT_FILE=shellcheck-results.sarif + '[' -z sast-shell-check-oci-ta-min ']' + '[' -z sarif ']' + '[' -z shellcheck-results.sarif ']' + '[' '!' -f shellcheck-results.sarif ']' + '[' sarif = sarif ']' +++ jq -rce '(if (.runs[].results | length > 0) then "FAILURE" else "SUCCESS" end)' shellcheck-results.sarif +++ jq -rce '(.runs[].results | length)' shellcheck-results.sarif ++ make_result_json -r SUCCESS -f 0 ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ FAILURES=0 ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-05-12T10:42:03+00:00 --arg result SUCCESS --arg note 'For details, check Tekton task log.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ jq .failures + '[' 0 -gt 0 ']' + echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: test-comp-fttg-on-pull-request-r2plc-sast-shell-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 shellcheck-results.sarif:application/sarif+json Preparing shellcheck-results.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading da808faebf6f shellcheck-results.sarif Uploaded da808faebf6f shellcheck-results.sarif Uploading 29d9e22ed1d5 application/vnd.oci.image.manifest.v1+json Uploaded 29d9e22ed1d5 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 Digest: sha256:29d9e22ed1d569c8bfbfa08a70bfd98948c0876dd6fffa0b8e4a852f05a61af7 No excluded-findings.json exists. Skipping upload. pod: test-comp-fttg-on-pull-request-r2plc-sast-unicode-check-pod | init container: prepare 2026/05/12 10:41:46 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-sast-unicode-check-pod | init container: place-scripts 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-1-btkfg 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-2-7dvm4 pod: test-comp-fttg-on-pull-request-r2plc-sast-unicode-check-pod | container step-use-trusted-artifact: Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Executing: oras blob fetch --registry-config /tmp/use-oci.sh.hqD1xM/auth-arCZAv.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a8aa55d1a25ec61d8844839208f7df74d62c4d5f5ab354e27176f120be5b2cb9 --output - Restored artifact quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a8aa55d1a25ec61d8844839208f7df74d62c4d5f5ab354e27176f120be5b2cb9 to /var/workdir/source WARN: artifact URI not provided, (given: =/var/workdir/cachi2) pod: test-comp-fttg-on-pull-request-r2plc-sast-unicode-check-pod | container step-sast-unicode-check: + . /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=test-comp-fttg INFO: The PROJECT_NAME used is: test-comp-fttg + echo 'INFO: The PROJECT_NAME used is: test-comp-fttg' + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust + SCAN_PROP=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 + FUC_EXIT_CODE=0 + declare -a ALL_TARGETS + OLD_IFS=' ' + IFS=, + for d in $TARGET_DIRS + ALL_TARGETS+=("${SOURCE_CODE_DIR}/source/${d}") + IFS=' ' + LANG=en_US.utf8 + find_unicode_control.py -p bidi -v -d -t /var/workdir/source/. + [[ 0 -ne 0 ]] + sed -i raw_sast_unicode_check_out.txt -E -e 's|(.*:[0-9]+)(.*)|\1: warning:\2|' -e 's|^|Error: UNICONTROL_WARNING:\n|' + CSGERP_OPTS=(--mode=json --remove-duplicates --embed-context=3 --set-scan-prop="${SCAN_PROP}" --strip-path-prefix="${SOURCE_CODE_DIR}"/source/) + csgrep --mode=json --remove-duplicates --embed-context=3 --set-scan-prop=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 --strip-path-prefix=/var/workdir/source/ raw_sast_unicode_check_out.txt + csgrep --mode=evtstat processed_sast_unicode_check_out.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered + mv processed_sast_unicode_check_out.json sast_unicode_check_out.json + csgrep --mode=sarif sast_unicode_check_out.json + [[ 0 -eq 0 ]] + note='Task sast-unicode-check-oci-ta-min success: No finding was detected' ++ make_result_json -r SUCCESS -t 'Task sast-unicode-check-oci-ta-min success: No finding was detected' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task sast-unicode-check-oci-ta-min success: No finding was detected' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-05-12T10:41:52+00:00 --arg result SUCCESS --arg note 'Task sast-unicode-check-oci-ta-min success: No finding was detected' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:41:52+00:00","note":"Task sast-unicode-check-oci-ta-min success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:41:52+00:00","note":"Task sast-unicode-check-oci-ta-min success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + ERROR_OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:41:52+00:00","note":"Task sast-unicode-check-oci-ta-min success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:41:52+00:00","note":"Task sast-unicode-check-oci-ta-min success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-05-12T10:41:52+00:00","note":"Task sast-unicode-check-oci-ta-min success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: test-comp-fttg-on-pull-request-r2plc-sast-unicode-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 sast_unicode_check_out.sarif:application/sarif+json Preparing sast_unicode_check_out.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading 0e9806f310b4 sast_unicode_check_out.sarif Uploaded 0e9806f310b4 sast_unicode_check_out.sarif Uploading 3c67dc44542b application/vnd.oci.image.manifest.v1+json Uploaded 3c67dc44542b application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 Digest: sha256:3c67dc44542b620443d69973261269612788336924fb5ee74c4df6132e1f6f0a No excluded-findings.json exists. Skipping upload. pod: test-comp-fttg-on-pull-request-r2plc-tpa-scan-pod | init container: prepare 2026/05/12 10:41:46 Entrypoint initialization pod: test-comp-fttg-on-pull-request-r2plc-tpa-scan-pod | init container: place-scripts 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-0-mhf26 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-1-rmrvx 2026/05/12 10:41:47 Decoded script /tekton/scripts/script-2-t8trv pod: test-comp-fttg-on-pull-request-r2plc-tpa-scan-pod | container step-get-vulnerabilities: Inspecting raw image manifest quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6. Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation <image uri>'. Found SBOM of media type: text/spdx+json Running TPA scan on amd64 image manifest... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 268k 0 0 100 268k 0 220k 0:00:01 0:00:01 --:--:-- 220k 100 268k 0 0 100 268k 0 121k 0:00:02 0:00:02 --:--:-- 121k 100 268k 0 0 100 268k 0 85378 0:00:03 0:00:03 --:--:-- 85378 100 268k 0 0 100 268k 0 67352 0:00:04 0:00:04 --:--:-- 67352{ "scanned" : { "total" : 130, "direct" : 45, "transitive" : 85 }, "providers" : { "rhtpa" : { "status" : { "ok" : true, "name" : "rhtpa", "code" : 200, "message" : "OK", "warnings" : { } }, "sources" : { "osv-github" : { "summary" : { "direct" : 3, "transitive" : 1, "total" : 4, "dependencies" : 3, "critical" : 0, "high" : 3, "medium" : 1, "low" : 0, "remediations" : 0, "recommendations" : 5, "unscanned" : 0 }, "dependencies" : [ { "ref" : "pkg:pypi/setuptools@65.5.0", "issues" : [ { "id" : "CVE-2024-6345", "source" : "osv-github", "cvssScore" : 8.8, "severity" : "HIGH", "cves" : [ "CVE-2024-6345" ], "unique" : false }, { "id" : "CVE-2022-40897", "source" : "osv-github", "cvssScore" : 7.5, "severity" : "HIGH", "cves" : [ "CVE-2022-40897" ], "unique" : false } ], "transitive" : [ { "ref" : "pkg:pypi/pip@22.3.1", "issues" : [ { "id" : "CVE-2023-5752", "source" : "osv-github", "cvssScore" : 5.5, "severity" : "MEDIUM", "cves" : [ "CVE-2023-5752" ], "unique" : false } ], "highestVulnerability" : { "id" : "CVE-2023-5752", "source" : "osv-github", "cvssScore" : 5.5, "severity" : "MEDIUM", "cves" : [ "CVE-2023-5752" ], "unique" : false } } ], "highestVulnerability" : { "id" : "CVE-2024-6345", "source" : "osv-github", "cvssScore" : 8.8, "severity" : "HIGH", "cves" : [ "CVE-2024-6345" ], "unique" : false } }, { "ref" : "pkg:pypi/flask@2.1.0", "issues" : [ { "id" : "CVE-2023-30861", "title" : "Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header", "source" : "osv-github", "cvssScore" : 7.5, "severity" : "HIGH", "cves" : [ "CVE-2023-30861" ], "unique" : false } ], "transitive" : [ ], "highestVulnerability" : { "id" : "CVE-2023-30861", "title" : "Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header", "source" : "osv-github", "cvssScore" : 7.5, "severity" : "HIGH", "cves" : [ "CVE-2023-30861" ], "unique" : false } }, { "ref" : "pkg:pypi/click@8.3.3", "recommendation" : "pkg:pypi/click@8.3.3?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/markupsafe@3.0.3", "recommendation" : "pkg:pypi/markupsafe@3.0.3?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/werkzeug@3.1.8", "recommendation" : "pkg:pypi/werkzeug@3.1.8?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/jinja2@3.1.6", "recommendation" : "pkg:pypi/jinja2@3.1.6?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" }, { "ref" : "pkg:pypi/itsdangerous@2.2.0", "recommendation" : "pkg:pypi/itsdangerous@2.2.0?repository_url=https%3A%2F%2Fpackages.redhat.com%2Ftrusted-libraries%2Fpython" } ] } } } }, "licenses" : [ { "status" : { "ok" : true, "name" : "deps.dev", "code" : 200, "message" : "OK", "warnings" : { } }, "summary" : { "total" : 9, "concluded" : 115, "permissive" : 7, "weakCopyleft" : 0, "strongCopyleft" : 0, "unknown" : 2, "deprecated" : 0, "osiApproved" : 7, "fsfLibre" : 7 }, "packages" : { "pkg:deb/debian/libaudit1@1%3A3.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/perl-base@5.32.1-4%2Bdeb11u2" : { "evidence" : [ ] }, "pkg:deb/debian/libnettle8@3.7.3-1" : { "evidence" : [ ] }, "pkg:deb/debian/sed@4.7-1" : { "evidence" : [ ] }, "pkg:deb/debian/libpcre2-8-0@10.36-2%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libgdbm6@1.19-2" : { "evidence" : [ ] }, "pkg:deb/debian/libp11-kit0@0.23.22-1" : { "evidence" : [ ] }, "pkg:deb/debian/ncurses-base@6.2%2B20201114-2" : { "evidence" : [ ] }, "pkg:deb/debian/debconf@1.5.77" : { "evidence" : [ ] }, "pkg:pypi/flask@2.1.0" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libbz2-1.0@1.0.8-4" : { "evidence" : [ ] }, "pkg:deb/debian/libkrb5support0@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/libsemanage1@3.1-1%2Bb2?arch=amd64&distro=debian-11&upstream=libsemanage%403.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/libreadline8@8.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/apt@2.2.4" : { "evidence" : [ ] }, "pkg:deb/debian/libgpg-error0@1.38-2" : { "evidence" : [ ] }, "pkg:deb/debian/coreutils@8.32-4%2Bb1" : { "evidence" : [ ] }, "pkg:deb/debian/gpgv@2.2.27-2%2Bdeb11u2" : { "evidence" : [ ] }, "pkg:deb/debian/libapt-pkg6.0@2.2.4" : { "evidence" : [ ] }, "pkg:deb/debian/zlib1g@1%3A1.2.11.dfsg-2%2Bdeb11u2?arch=amd64&distro=debian-11&upstream=zlib" : { "evidence" : [ ] }, "pkg:pypi/itsdangerous@2.2.0" : { "concluded" : { "identifiers" : [ { "id" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/liblz4-1@1.9.3-2" : { 100 290k 0 23057 100 268k 5652 67335 0:00:04 0:00:04 --:--:-- 72988 "evidence" : [ ] }, "pkg:deb/debian/diffutils@1%3A3.7-5" : { "evidence" : [ ] }, "pkg:deb/debian/grep@3.6-1" : { "evidence" : [ ] }, "pkg:deb/debian/libdb5.3@5.3.28%2Bdfsg1-0.8" : { "evidence" : [ ] }, "pkg:deb/debian/libunistring2@0.9.10-4" : { "evidence" : [ ] }, "pkg:deb/debian/sysvinit-utils@2.96-7%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/base-passwd@3.5.51" : { "evidence" : [ ] }, "pkg:pypi/pip@22.3.1" : { "concluded" : { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/hostname@3.23" : { "evidence" : [ ] }, "pkg:deb/debian/logsave@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/libpam0g@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libc6@2.31-13%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:deb/debian/libseccomp2@2.5.1-1%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libexpat1@2.2.10-2%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:deb/debian/liblzma5@5.2.5-2.1~deb11u1?arch=amd64&distro=debian-11&upstream=xz-utils" : { "evidence" : [ ] }, "pkg:deb/debian/netbase@6.3" : { "evidence" : [ ] }, "pkg:pypi/werkzeug@3.1.8" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libssl1.1@1.1.1n-0%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/openssl@1.1.1n-0%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/libcrypt1@1%3A4.4.18-4" : { "evidence" : [ ] }, "pkg:deb/debian/libsepol1@3.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/adduser@3.118" : { "evidence" : [ ] }, "pkg:deb/debian/libpam-modules-bin@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/ca-certificates@20210119" : { "evidence" : [ ] }, "pkg:deb/debian/libgnutls30@3.7.1-5%2Bdeb11u2" : { "evidence" : [ ] }, "pkg:deb/debian/libnsl2@1.3.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/readline-common@8.1-1" : { "evidence" : [ ] }, "pkg:pypi/markupsafe@3.0.3" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libattr1@1%3A2.4.48-6?arch=amd64&distro=debian-11&upstream=attr" : { "evidence" : [ ] }, "pkg:deb/debian/debian-archive-keyring@2021.1.1" : { "evidence" : [ ] }, "pkg:deb/debian/login@1%3A4.8.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/libc-bin@2.31-13%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:deb/debian/libncursesw6@6.2%2B20201114-2" : { "evidence" : [ ] }, "pkg:deb/debian/bash@5.1-2%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libblkid1@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libaudit-common@1%3A3.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/libstdc%2B%2B6@10.2.1-6" : { "evidence" : [ ] }, "pkg:deb/debian/base-files@11.1%2Bdeb11u5" : { "evidence" : [ ] }, "pkg:deb/debian/libcom-err2@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/libdebconfclient0@0.260" : { "evidence" : [ ] }, "pkg:deb/debian/dpkg@1.20.12" : { "evidence" : [ ] }, "pkg:deb/debian/mount@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libsmartcols1@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libpam-modules@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:pypi/wheel@0.38.4" : { "concluded" : { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libtirpc-common@1.3.1-1%2Bdeb11u1?arch=all&distro=debian-11&upstream=libtirpc" : { "evidence" : [ ] }, "pkg:deb/debian/libidn2-0@2.3.0-5" : { "evidence" : [ ] }, "pkg:deb/debian/libtirpc3@1.3.1-1%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libgssapi-krb5-2@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/e2fsprogs@1.46.2-2" : { "evidence" : [ ] }, "pkg:generic/python@3.11.1" : { "evidence" : [ ] }, "pkg:deb/debian/mawk@1.3.4.20200120-2" : { "evidence" : [ ] }, "pkg:pypi/click@8.3.3" : { "concluded" : { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "BSD-3-Clause", "name" : "BSD 3-Clause \"New\" or \"Revised\" License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libhogweed6@3.7.3-1" : { "evidence" : [ ] }, "pkg:deb/debian/libselinux1@3.1-3" : { "evidence" : [ ] }, "pkg:deb/debian/libkrb5-3@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/libss2@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/libzstd1@1.4.8%2Bdfsg-2.1" : { "evidence" : [ ] }, "pkg:deb/debian/libgcc-s1@10.2.1-6" : { "evidence" : [ ] }, "pkg:deb/debian/util-linux@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libsystemd0@247.3-7%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/gzip@1.10-4%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libext2fs2@1.46.2-2" : { "evidence" : [ ] }, "pkg:deb/debian/findutils@4.8.0-1" : { "evidence" : [ ] }, "pkg:deb/debian/libudev1@247.3-7%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/init-system-helpers@1.60" : { "evidence" : [ ] }, "pkg:deb/debian/dash@0.5.11%2Bgit20200708%2Bdd9ef66-5" : { "evidence" : [ ] }, "pkg:deb/debian/passwd@1%3A4.8.1-1" : { "evidence" : [ ] }, "pkg:pypi/jinja2@3.1.6" : { "concluded" : { "identifiers" : [ { "id" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN" } ], "expression" : "non-standard", "name" : "non-standard", "category" : "UNKNOWN", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/libsqlite3-0@3.34.1-3" : { "evidence" : [ ] }, "pkg:deb/debian/libgmp10@2%3A6.2.1%2Bdfsg-1%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libxxhash0@0.8.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/libpam-runtime@1.4.0-9%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libkeyutils1@1.6.1-2" : { "evidence" : [ ] }, "pkg:deb/debian/libk5crypto3@1.18.3-6%2Bdeb11u3" : { "evidence" : [ ] }, "pkg:deb/debian/lsb-base@11.1.0?arch=all&distro=debian-11&upstream=lsb" : { "evidence" : [ ] }, "pkg:deb/debian/libsemanage-common@3.1-1" : { "evidence" : [ ] }, "pkg:deb/debian/libtinfo6@6.2%2B20201114-2" : { "evidence" : [ ] }, "pkg:deb/debian/libtasn1-6@4.16.0-2" : { "evidence" : [ ] }, "pkg:deb/debian/tar@1.34%2Bdfsg-1" : { "evidence" : [ ] }, "pkg:deb/debian/tzdata@2021a-1%2Bdeb11u8" : { "evidence" : [ ] }, "pkg:oci/test-comp-fttg@sha256%3Aa6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6" : { "evidence" : [ ] }, "pkg:deb/debian/libcap-ng0@0.7.9-2.2%2Bb1?arch=amd64&distro=debian-11&upstream=libcap-ng%400.7.9-2.2" : { "evidence" : [ ] }, "pkg:deb/debian/gcc-10-base@10.2.1-6" : { "evidence" : [ ] }, "pkg:deb/debian/libgcrypt20@1.8.7-6" : { "evidence" : [ ] }, "pkg:deb/debian/libuuid1@2.36.1-8%2Bdeb11u1?arch=amd64&distro=debian-11&upstream=util-linux" : { "evidence" : [ ] }, "pkg:deb/debian/libmount1@2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libacl1@2.2.53-10" : { "evidence" : [ ] }, "pkg:deb/debian/libpcre3@2%3A8.39-13" : { "evidence" : [ ] }, "pkg:pypi/setuptools@65.5.0" : { "concluded" : { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" }, "evidence" : [ { "identifiers" : [ { "id" : "MIT", "name" : "MIT License", "isDeprecated" : false, "isOsiApproved" : true, "isFsfLibre" : true, "category" : "PERMISSIVE" } ], "expression" : "MIT", "name" : "MIT License", "category" : "PERMISSIVE", "source" : "deps.dev", "sourceUrl" : "https://api.deps.dev" } ] }, "pkg:deb/debian/debianutils@4.11.2" : { "evidence" : [ ] }, "pkg:deb/debian/bsdutils@1%3A2.36.1-8%2Bdeb11u1" : { "evidence" : [ ] }, "pkg:deb/debian/libffi7@3.3-6" : { "evidence" : [ ] }, "pkg:deb/debian/ncurses-bin@6.2%2B20201114-2" : { "evidence" : [ ] } } } ] } pod: test-comp-fttg-on-pull-request-r2plc-tpa-scan-pod | container step-oci-attach-report: Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg Attaching tpa-report-amd64.json to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 [retry] executing: oras attach --no-tty --format go-template=\{\{.digest\}\} --registry-config /tmp/auth/config.json --artifact-type application/vnd.redhat.tpa-report+json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg@sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6 tpa-report-amd64.json:application/vnd.redhat.tpa-report+json pod: test-comp-fttg-on-pull-request-r2plc-tpa-scan-pod | container step-conftest-vulnerabilities: [ { "filename": "/tekton/home/tpa-report-amd64.json", "namespace": "required_checks", "successes": 6, "warnings": [ { "msg": "Found 3 high vulnerabilities.", "metadata": { "details": { "description": "Source: osv-github. Affected dependencies: pkg:pypi/setuptools@65.5.0 [direct] (CVE-2024-6345, CVE-2022-40897), pkg:pypi/flask@2.1.0 [direct] (CVE-2023-30861)", "name": "rhtpa_high_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 3 } }, { "msg": "Found 1 medium vulnerability.", "metadata": { "details": { "description": "Source: osv-github. Affected dependencies: pkg:pypi/pip@22.3.1 [transitive via pkg:pypi/setuptools@65.5.0] (CVE-2023-5752)", "name": "rhtpa_medium_vulnerabilities", "url": "https://access.redhat.com/articles/red_hat_vulnerability_tutorial" }, "vulnerabilities_number": 1 } } ] } ] {"vulnerabilities":{"critical":0,"high":3,"medium":1,"low":0,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0}} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-fttg:on-pr-c4c935f8923d9a47d509406e03eeb97fdf41e7c4", "digests": ["sha256:a6c80538307ad0adeb57e532202bece9afddc4e7102f49eaed56d282dc3f03c6"]}} {"result":"SUCCESS","timestamp":"2026-05-12T10:42:19+00:00","note":"Task tpa-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by TPA.","namespace":"default","successes":0,"failures":0,"warnings":0} New PipelineRun test-comp-fttg-on-pull-request-d9t5z found after retrigger for component build-e2e-tgct/test-comp-fttg PipelineRun test-comp-fttg-on-pull-request-d9t5z found for Component build-e2e-tgct/test-comp-fttg PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Running PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Succeeded < Exit [It] should eventually finish successfully for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:356 @ 05/12/26 10:51:04.377 (13m14.023s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:04.377 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:04.377 (0s) > Enter [It] should push Dockerfile to registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:366 @ 05/12/26 10:51:04.378 [SKIPPED] Skipping DockerBuildOciTAMin build, which does not push Dockerfile to registry In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:369 @ 05/12/26 10:51:04.378 < Exit [It] should push Dockerfile to registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:366 @ 05/12/26 10:51:04.378 (0s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:04.378 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:04.378 (0s) > Enter [It] floating tags are created successfully - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:378 @ 05/12/26 10:51:04.378 [SKIPPED] floating tag validation is not needed for: https://github.com/redhat-appstudio-qe/devfile-sample-python-basic In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:380 @ 05/12/26 10:51:04.379 < Exit [It] floating tags are created successfully - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:378 @ 05/12/26 10:51:04.379 (0s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:04.379 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:04.379 (0s) > Enter [It] image manifest mediaType is correct - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:395 @ 05/12/26 10:51:04.379 < Exit [It] image manifest mediaType is correct - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:395 @ 05/12/26 10:51:05.066 (687ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.066 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.066 (0s) > Enter [It] check for source images if enabled in pipeline - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:420 @ 05/12/26 10:51:05.067 This is DockerBuildOciTAMin build, which does not require source container build. [SKIPPED] Skiping DockerBuildOciTAMin build test-comp-fttg-on-pull-request-d9t5z In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:433 @ 05/12/26 10:51:05.078 < Exit [It] check for source images if enabled in pipeline - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:420 @ 05/12/26 10:51:05.078 (12ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.079 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.079 (0s) > Enter [BeforeAll] when Pipeline Results are stored for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:477 @ 05/12/26 10:51:05.079 < Exit [BeforeAll] when Pipeline Results are stored for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:477 @ 05/12/26 10:51:05.097 (18ms) > Enter [It] should have Pipeline Records - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:498 @ 05/12/26 10:51:05.098 records for PipelineRun test-comp-fttg-on-pull-request-d9t5z: &{[{build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/411ef09a-6c9e-473d-a0e7-6dc401df0da5 0e0d1cda-7570-46ce-8989-ecb08f903c0d 0e0d1cda-7570-46ce-8989-ecb08f903c0d} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/f54263d4-2fdc-48fb-a1dd-25e47e962726 2dcb4209-f2c4-4f1a-b516-a866c8308836 2dcb4209-f2c4-4f1a-b516-a866c8308836} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/afc04602-111a-4bd3-9f12-7bdc7f49e04a 527ec848-68ab-4b47-af8f-a33e637c8c87 527ec848-68ab-4b47-af8f-a33e637c8c87} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/75cc13d9-b51c-4a03-ba90-5d7a40cb36dd 59a3cef3-75f6-4878-811e-1f8298789263 59a3cef3-75f6-4878-811e-1f8298789263} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/6bc2d55a-8a76-414a-ae4b-c9700ca2e7cf 7fd161f0-2292-4ea5-8744-7d58292f3fa8 7fd161f0-2292-4ea5-8744-7d58292f3fa8} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/9b35a461-481c-4837-a538-22c06031dde3 a70b5f14-9a42-4b26-8fdc-36d14f16e19a a70b5f14-9a42-4b26-8fdc-36d14f16e19a} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/bc22b7c0-699b-4cec-bf5f-5c35a3333620 b30e0417-8b4c-439b-80c2-925eeb5610d5 b30e0417-8b4c-439b-80c2-925eeb5610d5} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/f89a7a1e-9ba4-40fd-84f0-c56503fa6d45 c67c1c96-4729-4f1f-8f76-633bc1c245ab c67c1c96-4729-4f1f-8f76-633bc1c245ab} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/b41299f1-5ad5-42ed-af54-afe12179b2ae e4d355e2-e9a7-4666-8b6b-8b07767e5090 e4d355e2-e9a7-4666-8b6b-8b07767e5090} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/420bc4bf-eb71-48f5-8a16-22ba76260eb7 efe1965c-edd5-4a7b-8b26-902a8343d4f7 efe1965c-edd5-4a7b-8b26-902a8343d4f7} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/8959ff9d-6f40-4a4f-814b-1574590a630d fc7a27ad-28c5-4fbb-83fa-7e3d30f01364 fc7a27ad-28c5-4fbb-83fa-7e3d30f01364} {build-e2e-tgct/results/8959ff9d-6f40-4a4f-814b-1574590a630d/records/29641df1-2229-49fe-ae8b-697011d95b1e ffe7dbfc-dffc-4a17-bcba-f7d1be3db6eb ffe7dbfc-dffc-4a17-bcba-f7d1be3db6eb}]} < Exit [It] should have Pipeline Records - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:498 @ 05/12/26 10:51:05.21 (112ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.21 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.21 (0s) > Enter [It] should validate tekton taskrun test results for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:540 @ 05/12/26 10:51:05.211 < Exit [It] should validate tekton taskrun test results for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta-min - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:540 @ 05/12/26 10:51:05.236 (25ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.236 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:05.236 (0s) > Enter [BeforeAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:550 @ 05/12/26 10:51:05.237 < Exit [BeforeAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:550 @ 05/12/26 10:51:05.245 (8ms) > Enter [It] verify-enterprise-contract check should pass - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:567 @ 05/12/26 10:51:05.245 Creating Pipeline "verify-enterprise-contract-run-6dlkj" Waiting for pipeline "verify-enterprise-contract-run-6dlkj" to finish < Exit [It] verify-enterprise-contract check should pass - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:567 @ 05/12/26 10:51:32.965 (27.72s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:32.965 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:32.965 (0s) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:659 @ 05/12/26 10:51:32.966 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:661 @ 05/12/26 10:51:32.966 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:659 @ 05/12/26 10:51:32.966 (0s) > Enter [AfterAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:555 @ 05/12/26 10:51:32.966 < Exit [AfterAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:555 @ 05/12/26 10:51:33.004 (38ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:33.004 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:51:33.004 (0s) > Enter [BeforeAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:706 @ 05/12/26 10:51:33.005 PipelineRun test-comp-fttg-on-pull-request-d9t5z found for Component build-e2e-tgct/test-comp-fttg PipelineRun test-comp-fttg-on-pull-request-d9t5z reason: Succeeded < Exit [BeforeAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:706 @ 05/12/26 10:51:33.21 (205ms) > Enter [It] runs ec pipeline pipelines/enterprise-contract.yaml - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:741 @ 05/12/26 10:51:33.21 Creating Pipeline "ec-integration-test-scenario-run-7kcst" Waiting for pipeline "ec-integration-test-scenario-run-7kcst" to finish The PipelineRun ec-integration-test-scenario-run-7kcst in namespace build-e2e-tgct has status.conditions: v1.Conditions{apis.Condition{Type:"Succeeded", Status:"True", Severity:"", LastTransitionTime:apis.VolatileTime{Inner:time.Date(2026, time.May, 12, 10, 52, 5, 0, time.Local)}, Reason:"Succeeded", Message:"Tasks Completed: 2 (Failed: 0, Cancelled 0), Skipped: 0"}} EC PipelineRun ec-integration-test-scenario-run-7kcst has labels: map[build.appstudio.redhat.com/pipeline:enterprise-contract kueue.x-k8s.io/priority-class:konflux-default kueue.x-k8s.io/queue-name:pipelines-queue tekton.dev/pipeline:enterprise-contract] The TaskRun ec-integration-test-scenario-run-7kcst-verify of PipelineRun ec-integration-test-scenario-run-7kcst has status.conditions: v1.Conditions{apis.Condition{Type:"Succeeded", Status:"True", Severity:"", LastTransitionTime:apis.VolatileTime{Inner:time.Date(2026, time.May, 12, 10, 52, 5, 0, time.Local)}, Reason:"Succeeded", Message:"All Steps have completed executing"}} got step-summary log: { "timestamp": "1778583123", "namespace": "", "successes": 21, "failures": 0, "warnings": 0, "result": "SUCCESS" } < Exit [It] runs ec pipeline pipelines/enterprise-contract.yaml - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:741 @ 05/12/26 10:52:06.475 (33.264s) > Enter [AfterAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:726 @ 05/12/26 10:52:06.475 < Exit [AfterAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:726 @ 05/12/26 10:52:06.523 (48ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:52:06.523 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:52:06.523 (0s) > Enter [It] should eventually finish successfully for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:356 @ 05/12/26 10:52:06.524 PipelineRun test-comp-jerp-on-pull-request-nwqd7 found for Component build-e2e-tgct/test-comp-jerp PipelineRun test-comp-jerp-on-pull-request-nwqd7 reason: Failed attempt 1/3: PipelineRun "test-comp-jerp-on-pull-request-nwqd7" failed: pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | init container: prepare 2026/05/12 10:40:14 Entrypoint initialization pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | init container: place-scripts 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-0-wv5hp 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-1-h6jsp 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-2-lplkr 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-3-6mkj7 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-4-vhbt8 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-5-5j9fx pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | container step-introspect: Artifact type will be determined by introspection. Checking the media type of the OCI artifact... [retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 The media type of the OCI artifact is application/vnd.oci.image.manifest.v1+json. Looking for image labels that indicate this might be an operator bundle... [retry] executing: skopeo inspect --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 Found 0 matching labels. Expecting 3 or more to identify this image as an operator bundle. Introspection concludes that this artifact is of type "application". pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | container step-generate-container-auth: Selecting auth for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp Auth json written to "/auth/auth.json". pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | container step-set-skip-for-bundles: 2026/05/12 10:41:17 INFO Step was skipped due to when expressions were evaluated to false. pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | container step-app-check: time="2026-05-12T10:41:18Z" level=info msg="certification library version" version="1.17.2 <commit: eb87e5b2d67ad110a0afe8edfb16f445e0877c4e>" time="2026-05-12T10:41:18Z" level=info msg="running checks for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 for platform amd64" time="2026-05-12T10:41:18Z" level=info msg="target image" image="quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635" time="2026-05-12T10:41:22Z" level=error msg="could not get rpm list, continuing without it" error="could not find rpm db/packages: stat /tmp/preflight-1537655763/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1537655763/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1537655763/fs/var/lib/rpm/Packages: no such file or directory" time="2026-05-12T10:41:22Z" level=info msg="warning: licenses directory does not exist or all of its children are empty directories: error when checking for /licenses: stat /tmp/preflight-1537655763/fs/licenses: no such file or directory" check=HasLicense time="2026-05-12T10:41:22Z" level=info msg="check completed" check=HasLicense result=FAILED time="2026-05-12T10:41:22Z" level=info msg="check completed" check=HasUniqueTag result=PASSED time="2026-05-12T10:41:22Z" level=info msg="check completed" check=LayerCountAcceptable result=PASSED time="2026-05-12T10:41:22Z" level=info msg="check completed" check=HasNoProhibitedPackages err="unable to get a list of all packages in the image: could not get rpm list: could not find rpm db/packages: stat /tmp/preflight-1537655763/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1537655763/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1537655763/fs/var/lib/rpm/Packages: no such file or directory" result=ERROR time="2026-05-12T10:41:22Z" level=info msg="check completed" check=HasRequiredLabel result=FAILED time="2026-05-12T10:41:22Z" level=info msg="detected empty USER. Presumed to be running as root" check=RunAsNonRoot time="2026-05-12T10:41:22Z" level=info msg="USER value must be provided and be a non-root value for this check to pass" check=RunAsNonRoot time="2026-05-12T10:41:22Z" level=info msg="check completed" check=RunAsNonRoot result=FAILED time="2026-05-12T10:41:26Z" level=info msg="check completed" check=HasModifiedFiles result=PASSED time="2026-05-12T10:41:26Z" level=info msg="check completed" check=BasedOnUbi result=FAILED time="2026-05-12T10:41:26Z" level=info msg="This image's tag on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 will be paired with digest sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 once this image has been published in accordance with Red Hat Certification policy. You may then add or remove any supplemental tags through your Red Hat Connect portal as you see fit." { "image": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "passed": false, "test_library": { "name": "github.com/redhat-openshift-ecosystem/openshift-preflight", "version": "1.17.2", "commit": "eb87e5b2d67ad110a0afe8edfb16f445e0877c4e" }, "results": { "passed": [ { "name": "HasUniqueTag", "elapsed_time": 0, "description": "Checking if container has a tag other than 'latest', so that the image can be uniquely identified." }, { "name": "LayerCountAcceptable", "elapsed_time": 0, "description": "Checking if container has less than 40 layers. Too many layers within the container images can degrade container performance." }, { "name": "HasModifiedFiles", "elapsed_time": 3646, "description": "Checks that no files installed via RPM in the base Red Hat layer have been modified" } ], "failed": [ { "name": "HasLicense", "elapsed_time": 0, "description": "Checking if terms and conditions applicable to the software including open source licensing information are present. The license must be at /licenses", "help": "Check HasLicense encountered an error. Please review the preflight.log file for more information.", "suggestion": "Create a directory named /licenses and include all relevant licensing and/or terms and conditions as text file(s) in that directory.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "HasRequiredLabel", "elapsed_time": 0, "description": "Checking if the required labels (name, vendor, version, release, summary, description, maintainer) are present in the container metadata", "help": "Check HasRequiredLabel encountered an error. Please review the preflight.log file for more information.", "suggestion": "Add the following labels to your Dockerfile or Containerfile: name, vendor, version, release, summary, description, maintainer.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "RunAsNonRoot", "elapsed_time": 0, "description": "Checking if container runs as the root user because a container that does not specify a non-root user will fail the automatic certification, and will be subject to a manual review before the container can be approved for publication", "help": "Check RunAsNonRoot encountered an error. Please review the preflight.log file for more information.", "suggestion": "Indicate a specific USER in the dockerfile or containerfile", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "BasedOnUbi", "elapsed_time": 139, "description": "Checking if the container's base image is based upon the Red Hat Universal Base Image (UBI)", "help": "Check BasedOnUbi encountered an error. Please review the preflight.log file for more information.", "suggestion": "Change the FROM directive in your Dockerfile or Containerfile, for the latest list of images and details refer to: https://catalog.redhat.com/software/base-images", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" } ], "errors": [ { "name": "HasNoProhibitedPackages", "elapsed_time": 0, "description": "Checks to ensure that the image in use does not include prohibited packages, such as Red Hat Enterprise Linux (RHEL) kernel packages.", "help": "Check HasNoProhibitedPackages encountered an error. Please review the preflight.log file for more information." } ] } } time="2026-05-12T10:41:26Z" level=info msg="Preflight result: FAILED" pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | container step-app-set-outcome: {"result":"ERROR","timestamp":"1778582486","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":3,"failures":4,"warnings":0}[retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 pod: test-comp-jerp-on-pull-requ8a3030fd1a3ac1cb31df7ad7f720edfa-pod | container step-final-outcome: + [[ ! -f /mount/konflux.results.json ]] + tee /tekton/steps/step-final-outcome/results/test-output {"result":"ERROR","timestamp":"1778582486","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":3,"failures":4,"warnings":0} pod: test-comp-jerp-on-pull-request-nwqd7-apply-tags-pod | init container: prepare 2026/05/12 10:40:15 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-apply-tags-pod | container step-apply-additional-tags: time="2026-05-12T10:40:19Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635" time="2026-05-12T10:40:19Z" level=info msg="[param] digest: sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6" time="2026-05-12T10:40:19Z" level=info msg="[param] tags-from-image-label: konflux.additional-tags" time="2026-05-12T10:40:20Z" level=warning msg="No tags given in 'konflux.additional-tags' image label" {"tags":[]} pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | init container: prepare 2026/05/12 10:37:52 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | init container: place-scripts 2026/05/12 10:37:53 Decoded script /tekton/scripts/script-0-v9prm 2026/05/12 10:37:53 Decoded script /tekton/scripts/script-1-n27dg 2026/05/12 10:37:53 Decoded script /tekton/scripts/script-2-49fkh 2026/05/12 10:37:53 Decoded script /tekton/scripts/script-3-g9vzh 2026/05/12 10:37:53 Decoded script /tekton/scripts/script-4-kmrf2 pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | init container: working-dir-initializer pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | container step-build: [2026-05-12T10:38:30,992967022+00:00] Validate context path [2026-05-12T10:38:30,996255529+00:00] Update CA trust [2026-05-12T10:38:30,997313614+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-05-12T10:38:32,991297639+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2026-05-12T10:38:32,996710517+00:00] Prepare system (architecture: x86_64) [2026-05-12T10:38:33,029370760+00:00] Setup prefetched Trying to pull quay.io/devfile/python:slim... Getting image source signatures Copying blob sha256:0f372def914e585a52a46de64d0ed00b960c02f5f81a307d673e73b404203d61 Copying blob sha256:025c56f98b679f70b7a54241917e56da7b59ab9d2defecc6ebdb0bf2750484bb Copying blob sha256:2f9c09f7c02f4403f9ec5313e53e63eafe6cd43993457b810ce1b9642812daec Copying blob sha256:30fb943195a7f7cee90a9c67461c338d1d76a7004d2f94792b774ef71d875a02 Copying blob sha256:778656c04542093db6d3b6e07bffbcf6ec4b24709276be7cdf177fcb3666663a Copying config sha256:04f51101c1b979fb8a45a5332bfa8ed2c60f613ea396c3edd40f3d91702b24ef Writing manifest to image destination [2026-05-12T10:39:02,259379352+00:00] Unsetting proxy { "architecture": "x86_64", "vcs-type": "git", "vcs-ref": "33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "org.opencontainers.image.revision": "33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-python-basic", "quay.expires-after": "6h", "build-date": "2026-05-12T10:38:33Z", "org.opencontainers.image.created": "2026-05-12T10:38:33Z", "io.buildah.version": "1.42.2" } [2026-05-12T10:39:02,301008092+00:00] Register sub-man Adding the entitlement to the build [2026-05-12T10:39:02,304124123+00:00] Add secrets [2026-05-12T10:39:02,311264793+00:00] Run buildah build [2026-05-12T10:39:02,312295783+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 --label org.opencontainers.image.revision=33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --label quay.expires-after=6h --label build-date=2026-05-12T10:38:33Z --label org.opencontainers.image.created=2026-05-12T10:38:33Z --annotation org.opencontainers.image.revision=33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --annotation org.opencontainers.image.created=2026-05-12T10:38:33Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.E3Z0Gi -t quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 . STEP 1/11: FROM quay.io/devfile/python:slim STEP 2/11: EXPOSE 8081/tcp STEP 3/11: ENV FLASK_PORT=8081 STEP 4/11: WORKDIR /projects STEP 5/11: COPY requirements.txt . STEP 6/11: RUN pip install -r requirements.txt Collecting Flask==2.1.0 Downloading Flask-2.1.0-py3-none-any.whl (95 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 95.2/95.2 kB 20.6 MB/s eta 0:00:00 Collecting Werkzeug>=2.0 Downloading werkzeug-3.1.8-py3-none-any.whl (226 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 226.5/226.5 kB 92.4 MB/s eta 0:00:00 Collecting Jinja2>=3.0 Downloading jinja2-3.1.6-py3-none-any.whl (134 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 134.9/134.9 kB 128.1 MB/s eta 0:00:00 Collecting itsdangerous>=2.0 Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB) Collecting click>=8.0 Downloading click-8.3.3-py3-none-any.whl (110 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 110.5/110.5 kB 118.5 MB/s eta 0:00:00 Collecting MarkupSafe>=2.0 Downloading markupsafe-3.0.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (22 kB) Installing collected packages: MarkupSafe, itsdangerous, click, Werkzeug, Jinja2, Flask Successfully installed Flask-2.1.0 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.8 click-8.3.3 itsdangerous-2.2.0 WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv [notice] A new release of pip available: 22.3.1 -> 26.1.1 [notice] To update, run: pip install --upgrade pip STEP 7/11: COPY . . STEP 8/11: CMD [ "python", "./app.py" ] STEP 9/11: COPY labels.json /usr/share/buildinfo/labels.json STEP 10/11: COPY labels.json /root/buildinfo/labels.json STEP 11/11: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635" "org.opencontainers.image.revision"="33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-python-basic" "quay.expires-after"="6h" "build-date"="2026-05-12T10:38:33Z" "org.opencontainers.image.created"="2026-05-12T10:38:33Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 --> 7998fe3873c2 Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 7998fe3873c27ff5de009b9520066fe620f7af68b84af03bc04f4f510ed0df0f [2026-05-12T10:39:05,320626106+00:00] Unsetting proxy [2026-05-12T10:39:05,321851994+00:00] Add metadata Recording base image digests used quay.io/devfile/python:slim quay.io/devfile/python:slim@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c Getting image source signatures Copying blob sha256:a3013b777804928627928e6d4fa4e7724e97b09ea7269d35092b5995384e46ce Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying config sha256:7998fe3873c27ff5de009b9520066fe620f7af68b84af03bc04f4f510ed0df0f Writing manifest to image destination [2026-05-12T10:39:06,444450871+00:00] End build pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | container step-push: [2026-05-12T10:39:07,153786437+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-05-12T10:39:09,121343339+00:00] Convert image [2026-05-12T10:39:09,122362860+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:test-comp-jerp-on-pull-request-nwqd7-build-container [retry] executing: buildah push --format=oci --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:test-comp-jerp-on-pull-request-nwqd7-build-container Getting image source signatures Copying blob sha256:a3013b777804928627928e6d4fa4e7724e97b09ea7269d35092b5995384e46ce Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying config sha256:7998fe3873c27ff5de009b9520066fe620f7af68b84af03bc04f4f510ed0df0f Writing manifest to image destination [2026-05-12T10:39:12,238280255+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 [retry] executing: buildah push --format=oci --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 Getting image source signatures Copying blob sha256:a3013b777804928627928e6d4fa4e7724e97b09ea7269d35092b5995384e46ce Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying config sha256:7998fe3873c27ff5de009b9520066fe620f7af68b84af03bc04f4f510ed0df0f Writing manifest to image destination sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 [retry] executing: kubectl get configmap cluster-config -n konflux-info -o json Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap) [2026-05-12T10:39:13,050857751+00:00] End push pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | container step-sbom-syft-generate: [2026-05-12T10:39:13,965826460+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2026-05-12T10:39:18,395894259+00:00] End sbom-syft-generate pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | container step-prepare-sboms: [2026-05-12T10:39:18,530025746+00:00] Prepare SBOM [2026-05-12T10:39:18,533676577+00:00] Generate SBOM with mobster Skipping SBOM validation 2026-05-12 10:39:19,592 [INFO] mobster.log: Logging level set to 20 2026-05-12 10:39:19,669 [INFO] mobster.oci: Fetching manifest for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c 2026-05-12 10:39:20,238 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:20,440 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:20,874 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:21,110 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:21,539 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:21,763 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:22,193 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:22,383 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:22,383 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2026-05-12 10:39:22,383 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2026-05-12 10:39:22,384 [INFO] mobster.log: Contextual workflow completed in 2.73s 2026-05-12 10:39:22,405 [INFO] mobster.main: Exiting with code 0. [2026-05-12T10:39:22,463669442+00:00] End prepare-sboms pod: test-comp-jerp-on-pull-request-nwqd7-build-container-pod | container step-upload-sbom: [2026-05-12T10:39:22,588618167+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp Pushing sbom to registry [retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'. Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6] to [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:sha256-d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6.sbom] with mediaType [text/spdx+json]. quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:3872fc6b57f49b914c7be2d5a6df3edb7217013f74f8181b7de114ccaabe950d [2026-05-12T10:39:25,998761257+00:00] End upload-sbom pod: test-comp-jerp-on-pull-request-nwqd7-build-image-index-pod | init container: prepare 2026/05/12 10:39:27 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-build-image-index-pod | init container: place-scripts 2026/05/12 10:39:27 Decoded script /tekton/scripts/script-0-gq9xn 2026/05/12 10:39:27 Decoded script /tekton/scripts/script-1-2vqww 2026/05/12 10:39:27 Decoded script /tekton/scripts/script-2-7rnql pod: test-comp-jerp-on-pull-request-nwqd7-build-image-index-pod | container step-build: [2026-05-12T10:40:04,759745293+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Running konflux-build-cli time="2026-05-12T10:40:06Z" level=info msg="[param] image: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635" time="2026-05-12T10:40:06Z" level=info msg="[param] images: [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6]" time="2026-05-12T10:40:06Z" level=info msg="[param] buildah-format: oci" time="2026-05-12T10:40:06Z" level=info msg="[param] always-build-index: false" time="2026-05-12T10:40:06Z" level=info msg="[param] additional-tags: [test-comp-jerp-on-pull-request-nwqd7-build-image-index]" time="2026-05-12T10:40:06Z" level=info msg="[param] output-manifest-path: /index-build-data/manifest_data.json" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-image-digest: /tekton/results/IMAGE_DIGEST" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-image-url: /tekton/results/IMAGE_URL" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-images: /tekton/results/IMAGES" time="2026-05-12T10:40:06Z" level=info msg="Creating manifest list: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635" time="2026-05-12T10:40:06Z" level=info msg="buildah [stdout] 04102db8e797112c51037f036309878dd7fcaf09dca2ed58deaf2529aab49c17" logger=CliExecutor time="2026-05-12T10:40:06Z" level=info msg="Skipping image index generation. Returning results for single image." {"image_digest":"sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6","image_url":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635","image_ref":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6","images":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6"} pod: test-comp-jerp-on-pull-request-nwqd7-build-image-index-pod | container step-create-sbom: The manifest_data.json file does not exist. Skipping the SBOM creation... pod: test-comp-jerp-on-pull-request-nwqd7-build-image-index-pod | container step-upload-sbom: [2026-05-12T10:40:08,541357523+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' The index.spdx.json file does not exists. Skipping the SBOM upload... pod: test-comp-jerp-on-pull-request-nwqd7-clamav-scan-pod | init container: prepare 2026/05/12 10:40:15 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-clamav-scan-pod | init container: place-scripts 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-0-2jv8s 2026/05/12 10:40:15 Decoded script /tekton/scripts/script-1-9gr49 pod: test-comp-jerp-on-pull-request-nwqd7-clamav-scan-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Detecting artifact type for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6. Detected container image. Processing image manifests. Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 44.431 sec (0 m 44 s) Start Date: 2026:05:12 10:40:38 End Date: 2026:05:12 10:41:22 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27998/Tue May 12 06:24:57 2026 Database version: 27998 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1778582482","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1778582482","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1778582482","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "digests": ["sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6"]}} pod: test-comp-jerp-on-pull-request-nwqd7-clamav-scan-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Uploading d1078b934609 clamscan-result-amd64.log Uploading 108131123caa clamscan-ec-test-amd64.json Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploaded d1078b934609 clamscan-result-amd64.log Uploaded 108131123caa clamscan-ec-test-amd64.json Uploading 05b65c272012 application/vnd.oci.image.manifest.v1+json Uploaded 05b65c272012 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 Digest: sha256:05b65c272012804dfddecd21cb9b2dc6be11a5bc56da8922369a7554a9c96733 pod: test-comp-jerp-on-pull-request-nwqd7-clone-repository-pod | init container: prepare 2026/05/12 10:37:28 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-clone-repository-pod | init container: place-scripts 2026/05/12 10:37:30 Decoded script /tekton/scripts/script-0-8r2cb 2026/05/12 10:37:30 Decoded script /tekton/scripts/script-1-j5rw5 pod: test-comp-jerp-on-pull-request-nwqd7-clone-repository-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1778582252.1682649,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582252.4306808,"caller":"git/git.go:223","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/devfile-sample-python-basic @ 33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1778582252.4307415,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582252.4546034,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision 33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 directly. pod: test-comp-jerp-on-pull-request-nwqd7-clone-repository-pod | container step-symlink-check: Running symlink check pod: test-comp-jerp-on-pull-request-nwqd7-init-pod | init container: prepare 2026/05/12 10:37:20 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-init-pod | container step-init: time="2026-05-12T10:37:23Z" level=info msg="[param] enable: false" time="2026-05-12T10:37:23Z" level=info msg="[param] default-http-proxy: squid.caching.svc.cluster.local:3128" time="2026-05-12T10:37:23Z" level=info msg="[param] default-no-proxy: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-05-12T10:37:23Z" level=info msg="[param] http-proxy-result-path: /tekton/results/http-proxy" time="2026-05-12T10:37:23Z" level=info msg="[param] no-proxy-result-path: /tekton/results/no-proxy" time="2026-05-12T10:37:23Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-05-12T10:37:23Z" level=info msg="Cache proxy is disabled via param" time="2026-05-12T10:37:23Z" level=info msg="[result] HTTP PROXY: " time="2026-05-12T10:37:23Z" level=info msg="[result] NO PROXY: " pod: test-comp-jerp-on-pull-request-nwqd7-prefetch-dependencies-pod | init container: prepare 2026/05/12 10:37:35 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-prefetch-dependencies-pod | init container: place-scripts 2026/05/12 10:37:35 Decoded script /tekton/scripts/script-0-b575z pod: test-comp-jerp-on-pull-request-nwqd7-prefetch-dependencies-pod | container step-prefetch-dependencies: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using mounted service CA bundle: /mnt/service-ca/ca-bundle.crt '/mnt/service-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/service-ca.crt' time="2026-05-12T10:37:49Z" level=debug msg="Starting prefetch-dependencies" time="2026-05-12T10:37:49Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-05-12T10:37:49Z" level=info msg="Not using package registry proxy because allow-package-registry-proxy is not set to `true` on the cluster level" logger=PrefetchDependencies time="2026-05-12T10:37:49Z" level=info msg="[param] source-dir: /workspace/source/source" time="2026-05-12T10:37:49Z" level=info msg="[param] output-dir: /workspace/source/cachi2/output" time="2026-05-12T10:37:49Z" level=info msg="[param] sbom-format: spdx" time="2026-05-12T10:37:49Z" level=info msg="[param] mode: strict" time="2026-05-12T10:37:49Z" level=info msg="[param] output-dir-mount-point: /cachi2/output" time="2026-05-12T10:37:49Z" level=info msg="[param] env-files: [/workspace/source/cachi2/cachi2.env /workspace/source/cachi2/prefetch.env /workspace/source/cachi2/prefetch-env.json]" time="2026-05-12T10:37:49Z" level=info msg="[param] git-auth-directory: /workspace/git-basic-auth" time="2026-05-12T10:37:50Z" level=info msg="hermeto [stdout] hermeto 0.51.0" logger=CliExecutor time="2026-05-12T10:37:50Z" level=warning msg="No input provided; skipping prefetch-dependencies" logger=PrefetchDependencies time="2026-05-12T10:37:50Z" level=debug msg="Finished prefetch-dependencies" pod: test-comp-jerp-on-pull-request-nwqd7-push-dockerfile-pod | init container: prepare 2026/05/12 10:40:21 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-push-dockerfile-pod | init container: working-dir-initializer pod: test-comp-jerp-on-pull-request-nwqd7-push-dockerfile-pod | container step-push: time="2026-05-12T10:40:26Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635" time="2026-05-12T10:40:26Z" level=info msg="[param] image-digest: sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6" time="2026-05-12T10:40:26Z" level=info msg="[param] containerfile: docker/Dockerfile" time="2026-05-12T10:40:26Z" level=info msg="[param] context: ." time="2026-05-12T10:40:26Z" level=info msg="[param] tag-suffix: .dockerfile" time="2026-05-12T10:40:26Z" level=info msg="[param] artifact-type: application/vnd.konflux.dockerfile" time="2026-05-12T10:40:26Z" level=info msg="[param] source: source" time="2026-05-12T10:40:26Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF" time="2026-05-12T10:40:26Z" level=info msg="[param] alternative-filename: Dockerfile" time="2026-05-12T10:40:27Z" level=info msg="oras [stdout] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:8031fce30684b279dc51824107047db7ed032deed24168b51d1afcbb7afa33b4" logger=CliExecutor time="2026-05-12T10:40:27Z" level=info msg="Containerfile '/workspace/workspace/source/docker/Dockerfile' is pushed to registry with tag: sha256-d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6.dockerfile" {"image_ref":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:8031fce30684b279dc51824107047db7ed032deed24168b51d1afcbb7afa33b4"} pod: test-comp-jerp-on-pull-request-nwqd7-rpms-signature-scan-pod | init container: prepare 2026/05/12 10:40:20 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-rpms-signature-scan-pod | init container: place-scripts 2026/05/12 10:40:22 Decoded script /tekton/scripts/script-0-9h44s 2026/05/12 10:40:22 Decoded script /tekton/scripts/script-1-gsp47 pod: test-comp-jerp-on-pull-request-nwqd7-rpms-signature-scan-pod | container step-rpms-signature-scan: + set -o pipefail + rpm_verifier --image-url quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 --image-digest sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 --workdir /tmp Image: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 No unsigned RPMs found {'keys': {'unsigned': 0}} ==================================== Final results: {"keys": {"unsigned": 0}} Images processed: {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "digests": ["sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6"]}} pod: test-comp-jerp-on-pull-request-nwqd7-rpms-signature-scan-pod | container step-output-results: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index ++ cat /tmp/status + status=SUCCESS ++ cat /tmp/results + rpms_data='{"keys": {"unsigned": 0}}' ++ cat /tmp/images_processed + images_processed='{"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "digests": ["sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6"]}}' + '[' SUCCESS == ERROR ']' + note='Task rpms-signature-scan completed successfully' ++ make_result_json -r SUCCESS -t 'Task rpms-signature-scan completed successfully' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task rpms-signature-scan completed successfully' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-05-12T10:42:17+00:00 --arg result SUCCESS --arg note 'Task rpms-signature-scan completed successfully' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:17+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:17+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:17+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' + echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:17+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-05-12T10:42:17+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0} + echo '{"keys": {"unsigned": 0}}' + tee /tekton/results/RPMS_DATA {"keys": {"unsigned": 0}} + echo '{"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "digests": ["sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6"]}}' + tee /tekton/results/IMAGES_PROCESSED {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635", "digests": ["sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6"]}} pod: test-comp-jerp-on-pull-request-nwqd7-sast-shell-check-pod | init container: prepare 2026/05/12 10:40:21 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-sast-shell-check-pod | init container: place-scripts 2026/05/12 10:40:21 Decoded script /tekton/scripts/script-0-fpkp9 2026/05/12 10:40:21 Decoded script /tekton/scripts/script-1-mbnrx pod: test-comp-jerp-on-pull-request-nwqd7-sast-shell-check-pod | init container: working-dir-initializer pod: test-comp-jerp-on-pull-request-nwqd7-sast-shell-check-pod | container step-sast-shell-check: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=test-comp-jerp + echo 'INFO: The PROJECT_NAME used is: test-comp-jerp' INFO: The PROJECT_NAME used is: test-comp-jerp + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust ++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck + PACKAGE_VERSION=ShellCheck-0.10.0-3.el9 + OUTPUT_FILE=shellcheck-results.json + SOURCE_CODE_DIR=/workspace/workspace/source + declare -a ALL_TARGETS + IFS=, + read -ra TARGET_ARRAY + for d in "${TARGET_ARRAY[@]}" + potential_path=/workspace/workspace/source/. ++ realpath -m /workspace/workspace/source/. + resolved_path=/workspace/workspace/source + [[ /workspace/workspace/source == \/\w\o\r\k\s\p\a\c\e\/\w\o\r\k\s\p\a\c\e\/\s\o\u\r\c\e* ]] + ALL_TARGETS+=("$resolved_path") + '[' -z '' ']' + '[' -r /sys/fs/cgroup/cpu.max ']' + read -r quota period + '[' 800000 '!=' max ']' + '[' -n 100000 ']' + '[' 100000 -gt 0 ']' + export SC_JOBS=8 + SC_JOBS=8 INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh + echo 'INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh' + /usr/share/csmock/scripts/run-shellcheck.sh /workspace/workspace/source Looking for shell scripts................ done + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/applypatch-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/post-update.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/prepare-commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-applypatch.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-merge-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-push.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-rebase.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-receive.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/push-to-checkout.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/sendemail-validate.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/update.sample + CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}") + [[ true == \t\r\u\e ]] + CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|' + CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|' + CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$' + CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER") + csgrep --mode=json --strip-path-prefix=/workspace/workspace/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-103.json ./shellcheck-results/sc-116.json ./shellcheck-results/sc-117.json ./shellcheck-results/sc-119.json ./shellcheck-results/sc-70.json ./shellcheck-results/sc-73.json ./shellcheck-results/sc-74.json ./shellcheck-results/sc-76.json ./shellcheck-results/sc-79.json ./shellcheck-results/sc-82.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' ShellCheck results have been saved to shellcheck-results.json + echo 'ShellCheck results have been saved to shellcheck-results.json' + csgrep --mode=evtstat shellcheck-results.json + csgrep --mode=sarif shellcheck-results.json + TEST_OUTPUT= + parse_test_output sast-shell-check sarif shellcheck-results.sarif + TEST_NAME=sast-shell-check + TEST_RESULT_FORMAT=sarif + TEST_RESULT_FILE=shellcheck-results.sarif + '[' -z sast-shell-check ']' + '[' -z sarif ']' + '[' -z shellcheck-results.sarif ']' + '[' '!' -f shellcheck-results.sarif ']' + '[' sarif = sarif ']' +++ jq -rce '(if (.runs[].results | length > 0) then "FAILURE" else "SUCCESS" end)' shellcheck-results.sarif +++ jq -rce '(.runs[].results | length)' shellcheck-results.sarif ++ make_result_json -r SUCCESS -f 0 ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ FAILURES=0 ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-05-12T10:42:05+00:00 --arg result SUCCESS --arg note 'For details, check Tekton task log.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:05+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:05+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:05+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:05+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ jq .failures + '[' 0 -gt 0 ']' + echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:05+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-05-12T10:42:05+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: test-comp-jerp-on-pull-request-nwqd7-sast-shell-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 shellcheck-results.sarif:application/sarif+json Preparing shellcheck-results.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading da808faebf6f shellcheck-results.sarif Uploaded da808faebf6f shellcheck-results.sarif Uploading 3d65d1a4e45e application/vnd.oci.image.manifest.v1+json Uploaded 3d65d1a4e45e application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 Digest: sha256:3d65d1a4e45e8fe7e8900a0d9b0bbb6da27fafd54b346527f72c6ebc6325a610 No excluded-findings.json exists. Skipping upload. pod: test-comp-jerp-on-pull-request-nwqd7-sast-snyk-check-pod | init container: prepare 2026/05/12 10:40:21 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-sast-snyk-check-pod | init container: place-scripts 2026/05/12 10:40:21 Decoded script /tekton/scripts/script-0-xn4p8 2026/05/12 10:40:21 Decoded script /tekton/scripts/script-1-l6t67 pod: test-comp-jerp-on-pull-request-nwqd7-sast-snyk-check-pod | init container: working-dir-initializer pod: test-comp-jerp-on-pull-request-nwqd7-sast-snyk-check-pod | container step-sast-snyk-check: INFO: The PROJECT_NAME used is: test-comp-jerp INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' {"result":"SKIPPED","timestamp":"2026-05-12T10:42:05+00:00","note":"Task sast-snyk-check skipped: If you wish to use the Snyk code SAST task, please create a secret name snyk-secret with the key 'snyk_token' containing the Snyk token by following the steps given [here](https://konflux-ci.dev/docs/testing/build/snyk/)","namespace":"default","successes":0,"failures":0,"warnings":0} pod: test-comp-jerp-on-pull-request-nwqd7-sast-snyk-check-pod | container step-upload: No sast_snyk_check_out.sarif exists. Skipping upload. No excluded-findings.json exists. Skipping upload. pod: test-comp-jerp-on-pull-request-nwqd7-sast-unicode-check-pod | init container: prepare 2026/05/12 10:40:21 Entrypoint initialization pod: test-comp-jerp-on-pull-request-nwqd7-sast-unicode-check-pod | init container: place-scripts 2026/05/12 10:40:22 Decoded script /tekton/scripts/script-0-jx2l4 2026/05/12 10:40:22 Decoded script /tekton/scripts/script-1-9c5vl pod: test-comp-jerp-on-pull-request-nwqd7-sast-unicode-check-pod | init container: working-dir-initializer pod: test-comp-jerp-on-pull-request-nwqd7-sast-unicode-check-pod | container step-sast-unicode-check: + . /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=test-comp-jerp + echo 'INFO: The PROJECT_NAME used is: test-comp-jerp' INFO: The PROJECT_NAME used is: test-comp-jerp + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust + SCAN_PROP=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 + FUC_EXIT_CODE=0 + declare -a ALL_TARGETS + OLD_IFS=' ' + IFS=, + for d in $TARGET_DIRS + ALL_TARGETS+=("${SOURCE_CODE_DIR}/source/${d}") + IFS=' ' + LANG=en_US.utf8 + find_unicode_control.py -p bidi -v -d -t /workspace/workspace/source/. + [[ 0 -ne 0 ]] + sed -i raw_sast_unicode_check_out.txt -E -e 's|(.*:[0-9]+)(.*)|\1: warning:\2|' -e 's|^|Error: UNICONTROL_WARNING:\n|' + CSGERP_OPTS=(--mode=json --remove-duplicates --embed-context=3 --set-scan-prop="${SCAN_PROP}" --strip-path-prefix="${SOURCE_CODE_DIR}"/source/) + csgrep --mode=json --remove-duplicates --embed-context=3 --set-scan-prop=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 --strip-path-prefix=/workspace/workspace/source/ raw_sast_unicode_check_out.txt + csgrep --mode=evtstat processed_sast_unicode_check_out.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered + mv processed_sast_unicode_check_out.json sast_unicode_check_out.json + csgrep --mode=sarif sast_unicode_check_out.json + [[ 0 -eq 0 ]] + note='Task sast-unicode-check success: No finding was detected' ++ make_result_json -r SUCCESS -t 'Task sast-unicode-check success: No finding was detected' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task sast-unicode-check success: No finding was detected' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-05-12T10:42:03+00:00 --arg result SUCCESS --arg note 'Task sast-unicode-check success: No finding was detected' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + ERROR_OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-05-12T10:42:03+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: test-comp-jerp-on-pull-request-nwqd7-sast-unicode-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 sast_unicode_check_out.sarif:application/sarif+json Preparing sast_unicode_check_out.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading 0e9806f310b4 sast_unicode_check_out.sarif Uploaded 0e9806f310b4 sast_unicode_check_out.sarif Uploading f2428b8c139b application/vnd.oci.image.manifest.v1+json Uploaded f2428b8c139b application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-jerp:on-pr-33f1dcd6a3c0cf828d9ef99a4181b12d7bdf6635@sha256:d7abcc2bee541fba8636fd089b9954982f3283a1e9265a770490da4507d38eb6 Digest: sha256:f2428b8c139b108217ae598f11a67cf62afc15b58d80831e64e9a2415a87ba7a No excluded-findings.json exists. Skipping upload. New PipelineRun test-comp-jerp-on-pull-request-fjz9l found after retrigger for component build-e2e-tgct/test-comp-jerp PipelineRun test-comp-jerp-on-pull-request-fjz9l found for Component build-e2e-tgct/test-comp-jerp PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: ResolvingTaskRef PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Running PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Running PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Running PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Running PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Running PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Running PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Completed < Exit [It] should eventually finish successfully for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:356 @ 05/12/26 10:54:42.233 (2m35.709s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:42.233 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:42.233 (0s) > Enter [It] should push Dockerfile to registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:366 @ 05/12/26 10:54:42.234 < Exit [It] should push Dockerfile to registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:366 @ 05/12/26 10:54:46.619 (4.385s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:46.619 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:46.619 (0s) > Enter [It] floating tags are created successfully - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:378 @ 05/12/26 10:54:46.62 [SKIPPED] floating tag validation is not needed for: https://github.com/redhat-appstudio-qe/devfile-sample-python-basic In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:380 @ 05/12/26 10:54:46.62 < Exit [It] floating tags are created successfully - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:378 @ 05/12/26 10:54:46.62 (0s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:46.62 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:46.62 (0s) > Enter [It] image manifest mediaType is correct - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:395 @ 05/12/26 10:54:46.621 < Exit [It] image manifest mediaType is correct - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:395 @ 05/12/26 10:54:47.004 (383ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.004 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.004 (0s) > Enter [It] check for source images if enabled in pipeline - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:420 @ 05/12/26 10:54:47.005 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:440 @ 05/12/26 10:54:47.019 < Exit [It] check for source images if enabled in pipeline - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:420 @ 05/12/26 10:54:47.019 (15ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.02 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.02 (0s) > Enter [BeforeAll] when Pipeline Results are stored for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:477 @ 05/12/26 10:54:47.02 < Exit [BeforeAll] when Pipeline Results are stored for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:477 @ 05/12/26 10:54:47.04 (20ms) > Enter [It] should have Pipeline Records - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:498 @ 05/12/26 10:54:47.04 records for PipelineRun test-comp-jerp-on-pull-request-fjz9l: &{[{build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/a053fbc1-d775-4deb-a66f-1bcf7a1c91e7 00e2a6ff-b3f1-4d53-8c19-e41225ccbecb 00e2a6ff-b3f1-4d53-8c19-e41225ccbecb} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/9def5087-b0f2-4af2-b66d-491e81f7267e 1636333b-a79f-4b79-b536-6649309f2e2e 1636333b-a79f-4b79-b536-6649309f2e2e} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/1c75eef4-ca11-4af8-a56c-0bd23782f58e 23fd9a14-f230-4585-a55e-e331273eafea 23fd9a14-f230-4585-a55e-e331273eafea} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/3efba0fd-7e52-44dc-aad2-cb313db9b7a7 2aaebe34-e2b2-4fc1-a799-9cf1c534679d 2aaebe34-e2b2-4fc1-a799-9cf1c534679d} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/4df71482-f35e-4158-b952-163257a84c30 44f7683e-1aed-4bc5-b302-8a65ad273730 44f7683e-1aed-4bc5-b302-8a65ad273730} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/f0d5f4d4-a1c3-4757-976e-edd5c452a29f 6a7f99d5-b269-401b-84d4-07767dcf2d40 6a7f99d5-b269-401b-84d4-07767dcf2d40} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/92629e2c-4365-455c-9ce3-169ed9647867 7d8ea529-fc2d-46b1-a933-35d165fa2d33 7d8ea529-fc2d-46b1-a933-35d165fa2d33} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/3f784c4d-4f86-462b-8f6c-6c88803e21d1 7e98c0a5-2fb6-457d-b655-724bdfa74a32 7e98c0a5-2fb6-457d-b655-724bdfa74a32} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/49203adf-9681-4fe5-aeb8-52cec4420741 8042b1f9-a90a-499e-a787-0f3201f80ceb 8042b1f9-a90a-499e-a787-0f3201f80ceb} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/08bf21e9-ddd9-4507-8e26-b5eadd4774c1 8da0fcc8-2456-43d0-be5b-d1e6fe92f090 8da0fcc8-2456-43d0-be5b-d1e6fe92f090} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/d4f25ec2-7f33-4b29-9bc4-9c62599f6947 c169c0f5-0b81-498e-9eb1-28924bc5b083 c169c0f5-0b81-498e-9eb1-28924bc5b083} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/fa9b93d7-25f9-4c11-966a-12a040c267b6 c60059de-af90-4b24-ada0-883e8ae700ec c60059de-af90-4b24-ada0-883e8ae700ec} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/5708492d-a7d8-4e53-8c02-8f5d5c310bc8 da07791c-b47b-40d2-9ad6-8a50c282023a da07791c-b47b-40d2-9ad6-8a50c282023a} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/5e0d3058-9a58-4f27-b2d6-fa64f40e8fd6 df761fb7-1c79-4009-a8ba-0e980f601fc8 df761fb7-1c79-4009-a8ba-0e980f601fc8} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/c4e5f31c-7b60-4ed2-9a47-1e273d23d6dd e94d76a7-b395-464c-8062-c294016620e2 e94d76a7-b395-464c-8062-c294016620e2} {build-e2e-tgct/results/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae/records/ca4069d9-34c7-4b4b-8050-6274a9b0b9ae eb13198b-52be-4390-9f04-2fe5879eb0ad eb13198b-52be-4390-9f04-2fe5879eb0ad}]} < Exit [It] should have Pipeline Records - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:498 @ 05/12/26 10:54:47.133 (93ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.133 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.133 (0s) > Enter [It] should validate tekton taskrun test results for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:540 @ 05/12/26 10:54:47.134 < Exit [It] should validate tekton taskrun test results for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:540 @ 05/12/26 10:54:47.341 (208ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.342 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:54:47.342 (0s) > Enter [BeforeAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:550 @ 05/12/26 10:54:47.342 < Exit [BeforeAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:550 @ 05/12/26 10:54:47.353 (11ms) > Enter [It] verify-enterprise-contract check should pass - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:567 @ 05/12/26 10:54:47.353 Creating Pipeline "verify-enterprise-contract-run-wnnfp" Waiting for pipeline "verify-enterprise-contract-run-wnnfp" to finish < Exit [It] verify-enterprise-contract check should pass - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:567 @ 05/12/26 10:55:08.836 (21.483s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:55:08.836 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:55:08.836 (0s) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:659 @ 05/12/26 10:55:08.837 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:661 @ 05/12/26 10:55:08.837 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:659 @ 05/12/26 10:55:08.837 (0s) > Enter [AfterAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:555 @ 05/12/26 10:55:08.837 < Exit [AfterAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:555 @ 05/12/26 10:55:08.875 (38ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:55:08.876 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:55:08.876 (0s) > Enter [BeforeAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:706 @ 05/12/26 10:55:08.876 PipelineRun test-comp-jerp-on-pull-request-fjz9l found for Component build-e2e-tgct/test-comp-jerp PipelineRun test-comp-jerp-on-pull-request-fjz9l reason: Completed < Exit [BeforeAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:706 @ 05/12/26 10:55:09.084 (208ms) > Enter [It] runs ec pipeline pipelines/enterprise-contract.yaml - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:741 @ 05/12/26 10:55:09.084 Creating Pipeline "ec-integration-test-scenario-run-fz7q5" Waiting for pipeline "ec-integration-test-scenario-run-fz7q5" to finish The PipelineRun ec-integration-test-scenario-run-fz7q5 in namespace build-e2e-tgct has status.conditions: v1.Conditions{apis.Condition{Type:"Succeeded", Status:"True", Severity:"", LastTransitionTime:apis.VolatileTime{Inner:time.Date(2026, time.May, 12, 10, 55, 32, 0, time.Local)}, Reason:"Succeeded", Message:"Tasks Completed: 2 (Failed: 0, Cancelled 0), Skipped: 0"}} EC PipelineRun ec-integration-test-scenario-run-fz7q5 has labels: map[build.appstudio.redhat.com/pipeline:enterprise-contract kueue.x-k8s.io/priority-class:konflux-default kueue.x-k8s.io/queue-name:pipelines-queue tekton.dev/pipeline:enterprise-contract] The TaskRun ec-integration-test-scenario-run-fz7q5-verify of PipelineRun ec-integration-test-scenario-run-fz7q5 has status.conditions: v1.Conditions{apis.Condition{Type:"Succeeded", Status:"True", Severity:"", LastTransitionTime:apis.VolatileTime{Inner:time.Date(2026, time.May, 12, 10, 55, 32, 0, time.Local)}, Reason:"Succeeded", Message:"All Steps have completed executing"}} got step-summary log: { "timestamp": "1778583330", "namespace": "", "successes": 21, "failures": 0, "warnings": 0, "result": "SUCCESS" } < Exit [It] runs ec pipeline pipelines/enterprise-contract.yaml - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:741 @ 05/12/26 10:55:33.307 (24.223s) > Enter [AfterAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:726 @ 05/12/26 10:55:33.307 < Exit [AfterAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:726 @ 05/12/26 10:55:33.353 (46ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:55:33.354 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:55:33.354 (0s) > Enter [It] should eventually finish successfully for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:356 @ 05/12/26 10:55:33.354 PipelineRun test-comp-zsrs-on-pull-request-w5s5g found for Component build-e2e-tgct/test-comp-zsrs PipelineRun test-comp-zsrs-on-pull-request-w5s5g reason: Failed attempt 1/3: PipelineRun "test-comp-zsrs-on-pull-request-w5s5g" failed: pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | init container: prepare 2026/05/12 10:40:13 Entrypoint initialization pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | init container: place-scripts 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-0-phxjg 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-1-6kj5l 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-2-czjtj 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-3-7jzxg 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-4-zdmp2 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-5-7xgvp pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | container step-introspect: Artifact type will be determined by introspection. Checking the media type of the OCI artifact... [retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 The media type of the OCI artifact is application/vnd.oci.image.manifest.v1+json. Looking for image labels that indicate this might be an operator bundle... [retry] executing: skopeo inspect --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 Found 0 matching labels. Expecting 3 or more to identify this image as an operator bundle. Introspection concludes that this artifact is of type "application". pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | container step-generate-container-auth: Selecting auth for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Auth json written to "/auth/auth.json". pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | container step-set-skip-for-bundles: 2026/05/12 10:40:40 INFO Step was skipped due to when expressions were evaluated to false. pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | container step-app-check: time="2026-05-12T10:40:41Z" level=info msg="certification library version" version="1.17.2 <commit: eb87e5b2d67ad110a0afe8edfb16f445e0877c4e>" time="2026-05-12T10:40:41Z" level=info msg="running checks for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 for platform amd64" time="2026-05-12T10:40:41Z" level=info msg="target image" image="quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1" time="2026-05-12T10:40:45Z" level=error msg="could not get rpm list, continuing without it" error="could not find rpm db/packages: stat /tmp/preflight-1817519894/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1817519894/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1817519894/fs/var/lib/rpm/Packages: no such file or directory" time="2026-05-12T10:40:45Z" level=info msg="warning: licenses directory does not exist or all of its children are empty directories: error when checking for /licenses: stat /tmp/preflight-1817519894/fs/licenses: no such file or directory" check=HasLicense time="2026-05-12T10:40:45Z" level=info msg="check completed" check=HasLicense result=FAILED time="2026-05-12T10:40:45Z" level=info msg="check completed" check=HasUniqueTag result=PASSED time="2026-05-12T10:40:45Z" level=info msg="check completed" check=LayerCountAcceptable result=PASSED time="2026-05-12T10:40:45Z" level=info msg="check completed" check=HasNoProhibitedPackages err="unable to get a list of all packages in the image: could not get rpm list: could not find rpm db/packages: stat /tmp/preflight-1817519894/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1817519894/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-1817519894/fs/var/lib/rpm/Packages: no such file or directory" result=ERROR time="2026-05-12T10:40:45Z" level=info msg="check completed" check=HasRequiredLabel result=FAILED time="2026-05-12T10:40:45Z" level=info msg="detected empty USER. Presumed to be running as root" check=RunAsNonRoot time="2026-05-12T10:40:45Z" level=info msg="USER value must be provided and be a non-root value for this check to pass" check=RunAsNonRoot time="2026-05-12T10:40:45Z" level=info msg="check completed" check=RunAsNonRoot result=FAILED time="2026-05-12T10:40:48Z" level=info msg="check completed" check=HasModifiedFiles result=PASSED time="2026-05-12T10:40:49Z" level=info msg="check completed" check=BasedOnUbi result=FAILED time="2026-05-12T10:40:49Z" level=info msg="This image's tag on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 will be paired with digest sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 once this image has been published in accordance with Red Hat Certification policy. You may then add or remove any supplemental tags through your Red Hat Connect portal as you see fit." { "image": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "passed": false, "test_library": { "name": "github.com/redhat-openshift-ecosystem/openshift-preflight", "version": "1.17.2", "commit": "eb87e5b2d67ad110a0afe8edfb16f445e0877c4e" }, "results": { "passed": [ { "name": "HasUniqueTag", "elapsed_time": 0, "description": "Checking if container has a tag other than 'latest', so that the image can be uniquely identified." }, { "name": "LayerCountAcceptable", "elapsed_time": 0, "description": "Checking if container has less than 40 layers. Too many layers within the container images can degrade container performance." }, { "name": "HasModifiedFiles", "elapsed_time": 3803, "description": "Checks that no files installed via RPM in the base Red Hat layer have been modified" } ], "failed": [ { "name": "HasLicense", "elapsed_time": 0, "description": "Checking if terms and conditions applicable to the software including open source licensing information are present. The license must be at /licenses", "help": "Check HasLicense encountered an error. Please review the preflight.log file for more information.", "suggestion": "Create a directory named /licenses and include all relevant licensing and/or terms and conditions as text file(s) in that directory.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "HasRequiredLabel", "elapsed_time": 0, "description": "Checking if the required labels (name, vendor, version, release, summary, description, maintainer) are present in the container metadata", "help": "Check HasRequiredLabel encountered an error. Please review the preflight.log file for more information.", "suggestion": "Add the following labels to your Dockerfile or Containerfile: name, vendor, version, release, summary, description, maintainer.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "RunAsNonRoot", "elapsed_time": 0, "description": "Checking if container runs as the root user because a container that does not specify a non-root user will fail the automatic certification, and will be subject to a manual review before the container can be approved for publication", "help": "Check RunAsNonRoot encountered an error. Please review the preflight.log file for more information.", "suggestion": "Indicate a specific USER in the dockerfile or containerfile", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "BasedOnUbi", "elapsed_time": 205, "description": "Checking if the container's base image is based upon the Red Hat Universal Base Image (UBI)", "help": "Check BasedOnUbi encountered an error. Please review the preflight.log file for more information.", "suggestion": "Change the FROM directive in your Dockerfile or Containerfile, for the latest list of images and details refer to: https://catalog.redhat.com/software/base-images", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" } ], "errors": [ { "name": "HasNoProhibitedPackages", "elapsed_time": 0, "description": "Checks to ensure that the image in use does not include prohibited packages, such as Red Hat Enterprise Linux (RHEL) kernel packages.", "help": "Check HasNoProhibitedPackages encountered an error. Please review the preflight.log file for more information." } ] } } time="2026-05-12T10:40:49Z" level=info msg="Preflight result: FAILED" pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | container step-app-set-outcome: {"result":"ERROR","timestamp":"1778582449","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":3,"failures":4,"warnings":0}[retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 pod: test-comp-zsrs-on-pull-requ72aca27106c22cccc9659971419b25d6-pod | container step-final-outcome: + [[ ! -f /mount/konflux.results.json ]] + tee /tekton/steps/step-final-outcome/results/test-output {"result":"ERROR","timestamp":"1778582449","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":3,"failures":4,"warnings":0} pod: test-comp-zsrs-on-pull-request-w5s5g-apply-tags-pod | init container: prepare 2026/05/12 10:40:15 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-apply-tags-pod | container step-apply-additional-tags: time="2026-05-12T10:40:18Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1" time="2026-05-12T10:40:18Z" level=info msg="[param] digest: sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9" time="2026-05-12T10:40:18Z" level=info msg="[param] tags-from-image-label: konflux.additional-tags" time="2026-05-12T10:40:19Z" level=warning msg="No tags given in 'konflux.additional-tags' image label" {"tags":[]} pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | init container: prepare 2026/05/12 10:38:05 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | init container: place-scripts 2026/05/12 10:38:06 Decoded script /tekton/scripts/script-1-qghbs 2026/05/12 10:38:06 Decoded script /tekton/scripts/script-2-zl68l 2026/05/12 10:38:06 Decoded script /tekton/scripts/script-3-wgnsc 2026/05/12 10:38:06 Decoded script /tekton/scripts/script-4-dfh55 2026/05/12 10:38:06 Decoded script /tekton/scripts/script-5-rzzwd pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | container step-use-trusted-artifact: Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Executing: oras blob fetch --registry-config /tmp/use-oci.sh.wLyMDQ/auth-MIcSKD.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:f56d2ebf627f406936b54b257592530108e394feaf29133ec3940180bcfc337c --output - Restored artifact quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:f56d2ebf627f406936b54b257592530108e394feaf29133ec3940180bcfc337c to /var/workdir/source WARN: artifact URI not provided, (given: =/var/workdir/cachi2) pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | container step-build: [2026-05-12T10:38:37,440493915+00:00] Validate context path [2026-05-12T10:38:37,443744014+00:00] Update CA trust [2026-05-12T10:38:37,444788905+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-05-12T10:38:39,505316810+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2026-05-12T10:38:39,510897294+00:00] Prepare system (architecture: x86_64) [2026-05-12T10:38:39,523649754+00:00] Setup prefetched Trying to pull quay.io/devfile/python:slim... Getting image source signatures Copying blob sha256:0f372def914e585a52a46de64d0ed00b960c02f5f81a307d673e73b404203d61 Copying blob sha256:2f9c09f7c02f4403f9ec5313e53e63eafe6cd43993457b810ce1b9642812daec Copying blob sha256:778656c04542093db6d3b6e07bffbcf6ec4b24709276be7cdf177fcb3666663a Copying blob sha256:30fb943195a7f7cee90a9c67461c338d1d76a7004d2f94792b774ef71d875a02 Copying blob sha256:025c56f98b679f70b7a54241917e56da7b59ab9d2defecc6ebdb0bf2750484bb Copying config sha256:04f51101c1b979fb8a45a5332bfa8ed2c60f613ea396c3edd40f3d91702b24ef Writing manifest to image destination [2026-05-12T10:39:11,995818048+00:00] Unsetting proxy { "architecture": "x86_64", "vcs-type": "git", "vcs-ref": "ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "org.opencontainers.image.revision": "ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-python-basic", "quay.expires-after": "6h", "build-date": "2026-05-12T10:38:39Z", "org.opencontainers.image.created": "2026-05-12T10:38:39Z", "io.buildah.version": "1.42.2" } [2026-05-12T10:39:12,037284358+00:00] Register sub-man Adding the entitlement to the build [2026-05-12T10:39:12,040666213+00:00] Add secrets [2026-05-12T10:39:12,047806752+00:00] Run buildah build [2026-05-12T10:39:12,048840391+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 --label org.opencontainers.image.revision=ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --label quay.expires-after=6h --label build-date=2026-05-12T10:38:39Z --label org.opencontainers.image.created=2026-05-12T10:38:39Z --annotation org.opencontainers.image.revision=ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --annotation org.opencontainers.image.created=2026-05-12T10:38:39Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.yzm4b4 -t quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 . STEP 1/11: FROM quay.io/devfile/python:slim STEP 2/11: EXPOSE 8081/tcp STEP 3/11: ENV FLASK_PORT=8081 STEP 4/11: WORKDIR /projects STEP 5/11: COPY requirements.txt . STEP 6/11: RUN pip install -r requirements.txt Collecting Flask==2.1.0 Downloading Flask-2.1.0-py3-none-any.whl (95 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 95.2/95.2 kB 16.2 MB/s eta 0:00:00 Collecting Werkzeug>=2.0 Downloading werkzeug-3.1.8-py3-none-any.whl (226 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 226.5/226.5 kB 74.6 MB/s eta 0:00:00 Collecting Jinja2>=3.0 Downloading jinja2-3.1.6-py3-none-any.whl (134 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 134.9/134.9 kB 126.8 MB/s eta 0:00:00 Collecting itsdangerous>=2.0 Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB) Collecting click>=8.0 Downloading click-8.3.3-py3-none-any.whl (110 kB) ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 110.5/110.5 kB 113.7 MB/s eta 0:00:00 Collecting MarkupSafe>=2.0 Downloading markupsafe-3.0.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (22 kB) Installing collected packages: MarkupSafe, itsdangerous, click, Werkzeug, Jinja2, Flask Successfully installed Flask-2.1.0 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.8 click-8.3.3 itsdangerous-2.2.0 WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv [notice] A new release of pip available: 22.3.1 -> 26.1.1 [notice] To update, run: pip install --upgrade pip STEP 7/11: COPY . . STEP 8/11: CMD [ "python", "./app.py" ] STEP 9/11: COPY labels.json /usr/share/buildinfo/labels.json STEP 10/11: COPY labels.json /root/buildinfo/labels.json STEP 11/11: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1" "org.opencontainers.image.revision"="ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-python-basic" "quay.expires-after"="6h" "build-date"="2026-05-12T10:38:39Z" "org.opencontainers.image.created"="2026-05-12T10:38:39Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 --> 50326a369a5c Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 50326a369a5cd7275cc2d59681aedf72738d1d1393ff1fe42bc9239cbefa327a [2026-05-12T10:39:15,222541025+00:00] Unsetting proxy [2026-05-12T10:39:15,223801319+00:00] Add metadata Recording base image digests used quay.io/devfile/python:slim quay.io/devfile/python:slim@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c Getting image source signatures Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying blob sha256:2fe2719d4d0c8a54e8de74cae6c673a1a440efcb88e6ae457e4fcddb1a8693b8 Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying config sha256:50326a369a5cd7275cc2d59681aedf72738d1d1393ff1fe42bc9239cbefa327a Writing manifest to image destination [2026-05-12T10:39:16,829521381+00:00] End build pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | container step-push: [2026-05-12T10:39:17,527517337+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-05-12T10:39:19,549208338+00:00] Convert image [2026-05-12T10:39:19,550247188+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:test-comp-zsrs-on-pull-request-w5s5g-build-container [retry] executing: buildah push --format=oci --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:test-comp-zsrs-on-pull-request-w5s5g-build-container Getting image source signatures Copying blob sha256:2fe2719d4d0c8a54e8de74cae6c673a1a440efcb88e6ae457e4fcddb1a8693b8 Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying config sha256:50326a369a5cd7275cc2d59681aedf72738d1d1393ff1fe42bc9239cbefa327a Writing manifest to image destination [2026-05-12T10:39:22,466839463+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 [retry] executing: buildah push --format=oci --retry 3 --tls-verify=true --digestfile /var/workdir/image-digest quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 docker://quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 Getting image source signatures Copying blob sha256:2fe2719d4d0c8a54e8de74cae6c673a1a440efcb88e6ae457e4fcddb1a8693b8 Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29 Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6 Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238 Copying config sha256:50326a369a5cd7275cc2d59681aedf72738d1d1393ff1fe42bc9239cbefa327a Writing manifest to image destination sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 [retry] executing: kubectl get configmap cluster-config -n konflux-info -o json Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap) [2026-05-12T10:39:23,338955260+00:00] End push pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | container step-sbom-syft-generate: [2026-05-12T10:39:23,609442332+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2026-05-12T10:39:28,297235610+00:00] End sbom-syft-generate pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | container step-prepare-sboms: [2026-05-12T10:39:28,466897928+00:00] Prepare SBOM [2026-05-12T10:39:28,470771862+00:00] Generate SBOM with mobster Skipping SBOM validation 2026-05-12 10:39:29,535 [INFO] mobster.log: Logging level set to 20 2026-05-12 10:39:29,613 [INFO] mobster.oci: Fetching manifest for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c 2026-05-12 10:39:30,181 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:30,419 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:30,933 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:31,133 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:31,589 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:31,800 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:32,320 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:32,539 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-05-12 10:39:32,539 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2026-05-12 10:39:32,539 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2026-05-12 10:39:32,540 [INFO] mobster.log: Contextual workflow completed in 2.94s 2026-05-12 10:39:32,562 [INFO] mobster.main: Exiting with code 0. [2026-05-12T10:39:32,625897443+00:00] End prepare-sboms pod: test-comp-zsrs-on-pull-request-w5s5g-build-container-pod | container step-upload-sbom: [2026-05-12T10:39:33,541396915+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Pushing sbom to registry [retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'. Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9] to [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:sha256-80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9.sbom] with mediaType [text/spdx+json]. quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:27c7636b0ff897382f96710e79022ea177b6c554a2b2e3e51cc8cf224846ab6c [2026-05-12T10:39:36,843966415+00:00] End upload-sbom pod: test-comp-zsrs-on-pull-request-w5s5g-build-image-index-pod | init container: prepare 2026/05/12 10:39:40 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-build-image-index-pod | init container: place-scripts 2026/05/12 10:39:41 Decoded script /tekton/scripts/script-0-vsqmq 2026/05/12 10:39:41 Decoded script /tekton/scripts/script-1-frvld 2026/05/12 10:39:41 Decoded script /tekton/scripts/script-2-h5b8z pod: test-comp-zsrs-on-pull-request-w5s5g-build-image-index-pod | container step-build: [2026-05-12T10:40:04,903751781+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Running konflux-build-cli time="2026-05-12T10:40:06Z" level=info msg="[param] image: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1" time="2026-05-12T10:40:06Z" level=info msg="[param] images: [quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9]" time="2026-05-12T10:40:06Z" level=info msg="[param] buildah-format: oci" time="2026-05-12T10:40:06Z" level=info msg="[param] always-build-index: false" time="2026-05-12T10:40:06Z" level=info msg="[param] additional-tags: [test-comp-zsrs-on-pull-request-w5s5g-build-image-index]" time="2026-05-12T10:40:06Z" level=info msg="[param] output-manifest-path: /index-build-data/manifest_data.json" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-image-digest: /tekton/results/IMAGE_DIGEST" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-image-url: /tekton/results/IMAGE_URL" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF" time="2026-05-12T10:40:06Z" level=info msg="[param] result-path-images: /tekton/results/IMAGES" time="2026-05-12T10:40:06Z" level=info msg="Creating manifest list: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1" time="2026-05-12T10:40:06Z" level=info msg="buildah [stdout] 2c852acbd4793b6a577116aa9c445d5dbd6026fdc7f7f09a368f71c00d020bae" logger=CliExecutor time="2026-05-12T10:40:06Z" level=info msg="Skipping image index generation. Returning results for single image." {"image_digest":"sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9","image_url":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1","image_ref":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9","images":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9"} pod: test-comp-zsrs-on-pull-request-w5s5g-build-image-index-pod | container step-create-sbom: The manifest_data.json file does not exist. Skipping the SBOM creation... pod: test-comp-zsrs-on-pull-request-w5s5g-build-image-index-pod | container step-upload-sbom: [2026-05-12T10:40:08,543735542+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' The index.spdx.json file does not exists. Skipping the SBOM upload... pod: test-comp-zsrs-on-pull-request-w5s5g-clamav-scan-pod | init container: prepare 2026/05/12 10:40:14 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-clamav-scan-pod | init container: place-scripts 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-0-kcsjr 2026/05/12 10:40:14 Decoded script /tekton/scripts/script-1-82wtz pod: test-comp-zsrs-on-pull-request-w5s5g-clamav-scan-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Detecting artifact type for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9. Detected container image. Processing image manifests. Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 45.478 sec (0 m 45 s) Start Date: 2026:05:12 10:40:38 End Date: 2026:05:12 10:41:23 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27998/Tue May 12 06:24:57 2026 Database version: 27998 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1778582483","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1778582483","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1778582483","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "digests": ["sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9"]}} pod: test-comp-zsrs-on-pull-request-w5s5g-clamav-scan-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Uploading 37fcb6bf2493 clamscan-ec-test-amd64.json Uploading 7234cede0eb2 clamscan-result-amd64.log Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploaded 37fcb6bf2493 clamscan-ec-test-amd64.json Uploaded 7234cede0eb2 clamscan-result-amd64.log Uploading 70dff29cc2aa application/vnd.oci.image.manifest.v1+json Uploaded 70dff29cc2aa application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 Digest: sha256:70dff29cc2aa555b9a28e64c87c51b1548955cd0d6ffae8d9b9bdf679932325d pod: test-comp-zsrs-on-pull-request-w5s5g-clone-repository-pod | init container: prepare 2026/05/12 10:37:36 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-clone-repository-pod | init container: place-scripts 2026/05/12 10:37:36 Decoded script /tekton/scripts/script-0-cxv2w 2026/05/12 10:37:36 Decoded script /tekton/scripts/script-1-nrshk pod: test-comp-zsrs-on-pull-request-w5s5g-clone-repository-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1778582264.8068695,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582265.0540895,"caller":"git/git.go:223","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/devfile-sample-python-basic @ ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 (grafted, HEAD) in path /var/workdir/source"} {"level":"info","ts":1778582265.054135,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582265.0774345,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /var/workdir/source"} Merge option disabled. Using checked-out revision ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 directly. pod: test-comp-zsrs-on-pull-request-w5s5g-clone-repository-pod | container step-symlink-check: Running symlink check pod: test-comp-zsrs-on-pull-request-w5s5g-clone-repository-pod | container step-create-trusted-artifact: Prepared artifact from /var/workdir/source (sha256:f56d2ebf627f406936b54b257592530108e394feaf29133ec3940180bcfc337c) Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Executing: oras push --annotation=quay.expires-after=6h --registry-config /tmp/create-oci.sh.ffUhFN/auth-7J8tBo.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1.git SOURCE_ARTIFACT Uploading f56d2ebf627f SOURCE_ARTIFACT Uploaded f56d2ebf627f SOURCE_ARTIFACT Pushed [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1.git ArtifactType: application/vnd.unknown.artifact.v1 Digest: sha256:6b56ff99f1ce06e053ada541ae22f40591c442b87095db2c928dce644ef4562f Artifacts created pod: test-comp-zsrs-on-pull-request-w5s5g-init-pod | init container: prepare 2026/05/12 10:37:30 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-init-pod | container step-init: time="2026-05-12T10:37:33Z" level=info msg="[param] enable: false" time="2026-05-12T10:37:33Z" level=info msg="[param] default-http-proxy: squid.caching.svc.cluster.local:3128" time="2026-05-12T10:37:33Z" level=info msg="[param] default-no-proxy: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-05-12T10:37:33Z" level=info msg="[param] http-proxy-result-path: /tekton/results/http-proxy" time="2026-05-12T10:37:33Z" level=info msg="[param] no-proxy-result-path: /tekton/results/no-proxy" time="2026-05-12T10:37:33Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-05-12T10:37:33Z" level=info msg="Cache proxy is disabled via param" time="2026-05-12T10:37:33Z" level=info msg="[result] HTTP PROXY: " time="2026-05-12T10:37:33Z" level=info msg="[result] NO PROXY: " pod: test-comp-zsrs-on-pull-request-w5s5g-prefetch-dependencies-pod | init container: prepare 2026/05/12 10:37:50 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-prefetch-dependencies-pod | init container: place-scripts 2026/05/12 10:37:50 Decoded script /tekton/scripts/script-0-bxgm5 2026/05/12 10:37:50 Decoded script /tekton/scripts/script-2-4vx7h pod: test-comp-zsrs-on-pull-request-w5s5g-prefetch-dependencies-pod | container step-skip-ta: pod: test-comp-zsrs-on-pull-request-w5s5g-prefetch-dependencies-pod | container step-use-trusted-artifact: WARN: found skip file in /var/workdir/source pod: test-comp-zsrs-on-pull-request-w5s5g-prefetch-dependencies-pod | container step-prefetch-dependencies: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using mounted service CA bundle: /mnt/service-ca/ca-bundle.crt '/mnt/service-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/service-ca.crt' time="2026-05-12T10:38:00Z" level=debug msg="Starting prefetch-dependencies" time="2026-05-12T10:38:00Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-05-12T10:38:00Z" level=info msg="Not using package registry proxy because allow-package-registry-proxy is not set to `true` on the cluster level" logger=PrefetchDependencies time="2026-05-12T10:38:00Z" level=info msg="[param] source-dir: /var/workdir/source" time="2026-05-12T10:38:00Z" level=info msg="[param] output-dir: /var/workdir/cachi2/output" time="2026-05-12T10:38:00Z" level=info msg="[param] sbom-format: spdx" time="2026-05-12T10:38:00Z" level=info msg="[param] mode: strict" time="2026-05-12T10:38:00Z" level=info msg="[param] output-dir-mount-point: /cachi2/output" time="2026-05-12T10:38:00Z" level=info msg="[param] env-files: [/var/workdir/cachi2/cachi2.env /var/workdir/cachi2/prefetch.env /var/workdir/cachi2/prefetch-env.json]" time="2026-05-12T10:38:00Z" level=info msg="[param] git-auth-directory: /workspace/git-basic-auth" time="2026-05-12T10:38:01Z" level=info msg="hermeto [stdout] hermeto 0.51.0" logger=CliExecutor time="2026-05-12T10:38:01Z" level=warning msg="No input provided; skipping prefetch-dependencies" logger=PrefetchDependencies time="2026-05-12T10:38:01Z" level=debug msg="Finished prefetch-dependencies" pod: test-comp-zsrs-on-pull-request-w5s5g-prefetch-dependencies-pod | container step-create-trusted-artifact: WARN: found skip file in /var/workdir/source WARN: found skip file in /var/workdir/cachi2 pod: test-comp-zsrs-on-pull-request-w5s5g-push-dockerfile-pod | init container: prepare 2026/05/12 10:40:17 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-push-dockerfile-pod | container step-use-trusted-artifact: Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Executing: oras blob fetch --registry-config /tmp/use-oci.sh.UQuLK3/auth-uXQaFK.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:f56d2ebf627f406936b54b257592530108e394feaf29133ec3940180bcfc337c --output - Restored artifact quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:f56d2ebf627f406936b54b257592530108e394feaf29133ec3940180bcfc337c to /var/workdir/source pod: test-comp-zsrs-on-pull-request-w5s5g-push-dockerfile-pod | container step-push: time="2026-05-12T10:40:21Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1" time="2026-05-12T10:40:21Z" level=info msg="[param] image-digest: sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9" time="2026-05-12T10:40:21Z" level=info msg="[param] containerfile: docker/Dockerfile" time="2026-05-12T10:40:21Z" level=info msg="[param] context: ." time="2026-05-12T10:40:21Z" level=info msg="[param] tag-suffix: .dockerfile" time="2026-05-12T10:40:21Z" level=info msg="[param] artifact-type: application/vnd.konflux.dockerfile" time="2026-05-12T10:40:21Z" level=info msg="[param] source: source" time="2026-05-12T10:40:21Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF" time="2026-05-12T10:40:21Z" level=info msg="[param] alternative-filename: Dockerfile" time="2026-05-12T10:40:22Z" level=info msg="oras [stdout] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:204605930ca7f96918407bd294bf0166847f38b4c8076a229ded48973cc5a1d3" logger=CliExecutor time="2026-05-12T10:40:22Z" level=info msg="Containerfile '/var/workdir/source/docker/Dockerfile' is pushed to registry with tag: sha256-80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9.dockerfile" {"image_ref":"quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:204605930ca7f96918407bd294bf0166847f38b4c8076a229ded48973cc5a1d3"} pod: test-comp-zsrs-on-pull-request-w5s5g-rpms-signature-scan-pod | init container: prepare 2026/05/12 10:40:17 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-rpms-signature-scan-pod | init container: place-scripts 2026/05/12 10:40:20 Decoded script /tekton/scripts/script-0-rtgbf 2026/05/12 10:40:20 Decoded script /tekton/scripts/script-1-787v2 pod: test-comp-zsrs-on-pull-request-w5s5g-rpms-signature-scan-pod | container step-rpms-signature-scan: + set -o pipefail + rpm_verifier --image-url quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 --image-digest sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 --workdir /tmp Image: quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 No unsigned RPMs found {'keys': {'unsigned': 0}} ==================================== Final results: {"keys": {"unsigned": 0}} Images processed: {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "digests": ["sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9"]}} pod: test-comp-zsrs-on-pull-request-w5s5g-rpms-signature-scan-pod | container step-output-results: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index ++ cat /tmp/status + status=SUCCESS ++ cat /tmp/results + rpms_data='{"keys": {"unsigned": 0}}' ++ cat /tmp/images_processed + images_processed='{"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "digests": ["sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9"]}}' + '[' SUCCESS == ERROR ']' + note='Task rpms-signature-scan completed successfully' ++ make_result_json -r SUCCESS -t 'Task rpms-signature-scan completed successfully' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task rpms-signature-scan completed successfully' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-05-12T10:42:16+00:00 --arg result SUCCESS --arg note 'Task rpms-signature-scan completed successfully' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:16+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:16+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:16+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' + echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:16+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-05-12T10:42:16+00:00","note":"Task rpms-signature-scan completed successfully","namespace":"default","successes":0,"failures":0,"warnings":0} + echo '{"keys": {"unsigned": 0}}' + tee /tekton/results/RPMS_DATA {"keys": {"unsigned": 0}} + echo '{"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "digests": ["sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9"]}}' + tee /tekton/results/IMAGES_PROCESSED {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1", "digests": ["sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9"]}} pod: test-comp-zsrs-on-pull-request-w5s5g-sast-unicode-check-pod | init container: prepare 2026/05/12 10:40:15 Entrypoint initialization pod: test-comp-zsrs-on-pull-request-w5s5g-sast-unicode-check-pod | init container: place-scripts 2026/05/12 10:40:17 Decoded script /tekton/scripts/script-1-2hmwb 2026/05/12 10:40:17 Decoded script /tekton/scripts/script-2-8khn4 pod: test-comp-zsrs-on-pull-request-w5s5g-sast-unicode-check-pod | container step-use-trusted-artifact: Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Executing: oras blob fetch --registry-config /tmp/use-oci.sh.ynCGUF/auth-XsjrI3.json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:f56d2ebf627f406936b54b257592530108e394feaf29133ec3940180bcfc337c --output - Restored artifact quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs@sha256:f56d2ebf627f406936b54b257592530108e394feaf29133ec3940180bcfc337c to /var/workdir/source WARN: artifact URI not provided, (given: =/var/workdir/cachi2) pod: test-comp-zsrs-on-pull-request-w5s5g-sast-unicode-check-pod | container step-sast-unicode-check: + . /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=test-comp-zsrs + echo 'INFO: The PROJECT_NAME used is: test-comp-zsrs' INFO: The PROJECT_NAME used is: test-comp-zsrs + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust + SCAN_PROP=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 + FUC_EXIT_CODE=0 + declare -a ALL_TARGETS + OLD_IFS=' ' + IFS=, + for d in $TARGET_DIRS + ALL_TARGETS+=("${SOURCE_CODE_DIR}/source/${d}") + IFS=' ' + LANG=en_US.utf8 + find_unicode_control.py -p bidi -v -d -t /var/workdir/source/. + [[ 0 -ne 0 ]] + sed -i raw_sast_unicode_check_out.txt -E -e 's|(.*:[0-9]+)(.*)|\1: warning:\2|' -e 's|^|Error: UNICONTROL_WARNING:\n|' + CSGERP_OPTS=(--mode=json --remove-duplicates --embed-context=3 --set-scan-prop="${SCAN_PROP}" --strip-path-prefix="${SOURCE_CODE_DIR}"/source/) + csgrep --mode=json --remove-duplicates --embed-context=3 --set-scan-prop=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 --strip-path-prefix=/var/workdir/source/ raw_sast_unicode_check_out.txt + csgrep --mode=evtstat processed_sast_unicode_check_out.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered + mv processed_sast_unicode_check_out.json sast_unicode_check_out.json + csgrep --mode=sarif sast_unicode_check_out.json + [[ 0 -eq 0 ]] + note='Task sast-unicode-check-oci-ta success: No finding was detected' ++ make_result_json -r SUCCESS -t 'Task sast-unicode-check-oci-ta success: No finding was detected' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task sast-unicode-check-oci-ta success: No finding was detected' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-05-12T10:42:04+00:00 --arg result SUCCESS --arg note 'Task sast-unicode-check-oci-ta success: No finding was detected' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:04+00:00","note":"Task sast-unicode-check-oci-ta success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:04+00:00","note":"Task sast-unicode-check-oci-ta success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + ERROR_OUTPUT='{"result":"SUCCESS","timestamp":"2026-05-12T10:42:04+00:00","note":"Task sast-unicode-check-oci-ta success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + echo '{"result":"SUCCESS","timestamp":"2026-05-12T10:42:04+00:00","note":"Task sast-unicode-check-oci-ta success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-05-12T10:42:04+00:00","note":"Task sast-unicode-check-oci-ta success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: test-comp-zsrs-on-pull-request-w5s5g-sast-unicode-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs Attaching to quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 sast_unicode_check_out.sarif:application/sarif+json Preparing sast_unicode_check_out.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading 0e9806f310b4 sast_unicode_check_out.sarif Uploaded 0e9806f310b4 sast_unicode_check_out.sarif Uploading b0f5b0026505 application/vnd.oci.image.manifest.v1+json Uploaded b0f5b0026505 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-tgct/test-comp-zsrs:on-pr-ec282e7ce4aa8bfb9a64129138b7ffaaaf55d5c1@sha256:80f40b59133852fce5d775f202ea1f738b147f60641b42a507c36910f5fc0ac9 Digest: sha256:b0f5b00265056fc7cd5a06e617509cd549e16e77908b99bf054850a71276796b No excluded-findings.json exists. Skipping upload. New PipelineRun test-comp-zsrs-on-pull-request-bk4r7 found after retrigger for component build-e2e-tgct/test-comp-zsrs PipelineRun test-comp-zsrs-on-pull-request-bk4r7 found for Component build-e2e-tgct/test-comp-zsrs PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: ResolvingTaskRef PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Running PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Completed < Exit [It] should eventually finish successfully for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:356 @ 05/12/26 10:58:48.546 (3m15.191s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:48.546 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:48.546 (0s) > Enter [It] should push Dockerfile to registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:366 @ 05/12/26 10:58:48.547 < Exit [It] should push Dockerfile to registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:366 @ 05/12/26 10:58:53.334 (4.787s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.334 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.334 (0s) > Enter [It] floating tags are created successfully - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:378 @ 05/12/26 10:58:53.335 [SKIPPED] floating tag validation is not needed for: https://github.com/redhat-appstudio-qe/devfile-sample-python-basic In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:380 @ 05/12/26 10:58:53.335 < Exit [It] floating tags are created successfully - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:378 @ 05/12/26 10:58:53.335 (0s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.335 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.335 (0s) > Enter [It] image manifest mediaType is correct - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:395 @ 05/12/26 10:58:53.336 < Exit [It] image manifest mediaType is correct - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:395 @ 05/12/26 10:58:53.646 (310ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.646 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.646 (0s) > Enter [It] check for source images if enabled in pipeline - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:420 @ 05/12/26 10:58:53.647 Source build is enabled: false [SKIPPED] Skipping source image check since it is not enabled in the pipeline In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:440 @ 05/12/26 10:58:53.662 < Exit [It] check for source images if enabled in pipeline - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:420 @ 05/12/26 10:58:53.662 (15ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.662 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.662 (0s) > Enter [BeforeAll] when Pipeline Results are stored for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:477 @ 05/12/26 10:58:53.663 < Exit [BeforeAll] when Pipeline Results are stored for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:477 @ 05/12/26 10:58:53.758 (95ms) > Enter [It] should have Pipeline Records - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:498 @ 05/12/26 10:58:53.758 records for PipelineRun test-comp-zsrs-on-pull-request-bk4r7: &{[{build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/8b1b295a-224b-4494-a6bf-8a739475125f 0030c79e-b110-4048-86a1-9fdf200acfc5 0030c79e-b110-4048-86a1-9fdf200acfc5} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/7cfcf142-0364-40e7-a9a1-1e12249d088b 0791b098-ffaf-4afe-bb77-f1043d0064d9 0791b098-ffaf-4afe-bb77-f1043d0064d9} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/792ef8d3-a10f-4ab0-b2af-ebf740a6b094 702ff3e6-0bc7-4c1e-a237-ba174aba2922 702ff3e6-0bc7-4c1e-a237-ba174aba2922} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/5f2e1176-3ffd-4097-8875-65ce1f152ec1 72619488-c146-4c8d-96d1-367108f3c19e 72619488-c146-4c8d-96d1-367108f3c19e} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/6f51495f-e46f-465c-8dae-578cc95e8f37 893fb0c2-0dd9-4ce3-8e20-e5353ad75737 893fb0c2-0dd9-4ce3-8e20-e5353ad75737} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/cac6658b-b375-447a-81c5-f571a46b322a 8e50895a-df2a-4ae1-b261-e2ccfe572421 8e50895a-df2a-4ae1-b261-e2ccfe572421} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/ad8b70e7-0c6f-46af-a05f-8715eaca6057 9b5406eb-1de1-4b90-b89e-29c127bc375c 9b5406eb-1de1-4b90-b89e-29c127bc375c} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/0ace1c54-2270-4ce2-bb84-8ef719680bd3 bca08a79-e19a-405b-836b-7813bbed8cbe bca08a79-e19a-405b-836b-7813bbed8cbe} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/3f6fa77e-26a9-422e-baf3-b0ad249db337 c51daf87-1166-4b26-8c75-3731be575aef c51daf87-1166-4b26-8c75-3731be575aef} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/58b0af04-d5dd-4155-af6d-cd51e617853b c5f020bc-219f-4be0-8496-7df92cb52cb9 c5f020bc-219f-4be0-8496-7df92cb52cb9} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/2995f081-f7ad-4aae-9f69-3f52deb41c19 d8abc4ff-441f-44fd-88b4-12595cc1859f d8abc4ff-441f-44fd-88b4-12595cc1859f} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/886e39bf-1f85-47ad-9631-22bea49e58c4 dc56349c-99ef-46a7-9603-9af82e48e078 dc56349c-99ef-46a7-9603-9af82e48e078} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/252b3af2-0a10-4f78-b743-ed64d0a6dca6 e5bafb81-e4be-4619-ae10-fc1ed46b2f7c e5bafb81-e4be-4619-ae10-fc1ed46b2f7c} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/e491cac8-f9e7-4279-a01d-cf2313b6f9bb e70aba61-dd76-477d-9c5a-3be8311afc1d e70aba61-dd76-477d-9c5a-3be8311afc1d} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/da26af6f-291e-4b2a-8f44-9c3386b66cc6 f5a45571-e59f-47d5-be59-5ddb1bc854c7 f5a45571-e59f-47d5-be59-5ddb1bc854c7} {build-e2e-tgct/results/549d7915-76e0-484a-a8d5-6dbb08736c9e/records/549d7915-76e0-484a-a8d5-6dbb08736c9e f9da384c-6dd6-4c62-8b24-7d4ff2215797 f9da384c-6dd6-4c62-8b24-7d4ff2215797}]} < Exit [It] should have Pipeline Records - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:498 @ 05/12/26 10:58:53.866 (108ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.866 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:53.866 (0s) > Enter [It] should validate tekton taskrun test results for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:540 @ 05/12/26 10:58:53.867 < Exit [It] should validate tekton taskrun test results for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic and Pipeline docker-build-oci-ta - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:540 @ 05/12/26 10:58:54.121 (254ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:54.121 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:58:54.121 (0s) > Enter [BeforeAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:550 @ 05/12/26 10:58:54.121 < Exit [BeforeAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:550 @ 05/12/26 10:58:54.13 (9ms) > Enter [It] verify-enterprise-contract check should pass - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:567 @ 05/12/26 10:58:54.13 Creating Pipeline "verify-enterprise-contract-run-wbvgx" Waiting for pipeline "verify-enterprise-contract-run-wbvgx" to finish < Exit [It] verify-enterprise-contract check should pass - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:567 @ 05/12/26 10:59:15.622 (21.492s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:15.623 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:15.623 (0s) > Enter [It] should have Hermeto content in the SBOM in case the build was hermetic - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:659 @ 05/12/26 10:59:15.624 [SKIPPED] Hermetic build is not enabled, skipping the test In [It] at: /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:661 @ 05/12/26 10:59:15.624 < Exit [It] should have Hermeto content in the SBOM in case the build was hermetic - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:659 @ 05/12/26 10:59:15.624 (0s) > Enter [AfterAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:555 @ 05/12/26 10:59:15.624 < Exit [AfterAll] when the container image for component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic is created and pushed to container registry - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:555 @ 05/12/26 10:59:15.663 (39ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:15.663 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:15.663 (0s) > Enter [BeforeAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:706 @ 05/12/26 10:59:15.663 PipelineRun test-comp-zsrs-on-pull-request-bk4r7 found for Component build-e2e-tgct/test-comp-zsrs PipelineRun test-comp-zsrs-on-pull-request-bk4r7 reason: Completed < Exit [BeforeAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:706 @ 05/12/26 10:59:15.871 (208ms) > Enter [It] runs ec pipeline pipelines/enterprise-contract.yaml - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:741 @ 05/12/26 10:59:15.872 Creating Pipeline "ec-integration-test-scenario-run-hgqnd" Waiting for pipeline "ec-integration-test-scenario-run-hgqnd" to finish The PipelineRun ec-integration-test-scenario-run-hgqnd in namespace build-e2e-tgct has status.conditions: v1.Conditions{apis.Condition{Type:"Succeeded", Status:"True", Severity:"", LastTransitionTime:apis.VolatileTime{Inner:time.Date(2026, time.May, 12, 10, 59, 37, 0, time.Local)}, Reason:"Succeeded", Message:"Tasks Completed: 2 (Failed: 0, Cancelled 0), Skipped: 0"}} EC PipelineRun ec-integration-test-scenario-run-hgqnd has labels: map[build.appstudio.redhat.com/pipeline:enterprise-contract kueue.x-k8s.io/priority-class:konflux-default kueue.x-k8s.io/queue-name:pipelines-queue tekton.dev/pipeline:enterprise-contract] The TaskRun ec-integration-test-scenario-run-hgqnd-verify of PipelineRun ec-integration-test-scenario-run-hgqnd has status.conditions: v1.Conditions{apis.Condition{Type:"Succeeded", Status:"True", Severity:"", LastTransitionTime:apis.VolatileTime{Inner:time.Date(2026, time.May, 12, 10, 59, 37, 0, time.Local)}, Reason:"Succeeded", Message:"All Steps have completed executing"}} got step-summary log: { "timestamp": "1778583575", "namespace": "", "successes": 21, "failures": 0, "warnings": 0, "result": "SUCCESS" } < Exit [It] runs ec pipeline pipelines/enterprise-contract.yaml - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:741 @ 05/12/26 10:59:38.091 (22.219s) > Enter [AfterAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:726 @ 05/12/26 10:59:38.091 < Exit [AfterAll] build-definitions ec pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:726 @ 05/12/26 10:59:38.142 (51ms) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:38.142 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:38.142 (0s) > Enter [It] pipelineRun should fail for symlink component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic with component name test-symlink-comp-cnrr - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:813 @ 05/12/26 10:59:38.143 PipelineRun test-symlink-comp-cnrr-on-pull-request-k88qq found for Component build-e2e-tgct/test-symlink-comp-cnrr PipelineRun test-symlink-comp-cnrr-on-pull-request-k88qq reason: Failed attempt 1/1: PipelineRun "test-symlink-comp-cnrr-on-pull-request-k88qq" failed: pod: test-symlink-comp-cnrr-on-pd1f8635e7845addcc7af2f872a5766e7-pod | init container: prepare 2026/05/12 10:37:56 Entrypoint initialization pod: test-symlink-comp-cnrr-on-pd1f8635e7845addcc7af2f872a5766e7-pod | init container: place-scripts 2026/05/12 10:37:57 Decoded script /tekton/scripts/script-0-vv5jq 2026/05/12 10:37:57 Decoded script /tekton/scripts/script-1-sm67f pod: test-symlink-comp-cnrr-on-pd1f8635e7845addcc7af2f872a5766e7-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1778582284.4613564,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582284.690552,"caller":"git/git.go:223","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/devfile-sample-python-basic @ 535204151df4311d6d8f00b8f983a2e97f970787 (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1778582284.6906374,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1778582284.715644,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision 535204151df4311d6d8f00b8f983a2e97f970787 directly. pod: test-symlink-comp-cnrr-on-pd1f8635e7845addcc7af2f872a5766e7-pod | container step-symlink-check: Running symlink check The cloned repository contains symlink pointing outside of the cloned repository: /workspace/output/source/os-release-symlink pod: test-symlink-comp-cnrr-on-pull-request-k88qq-init-pod | init container: prepare 2026/05/12 10:37:41 Entrypoint initialization pod: test-symlink-comp-cnrr-on-pull-request-k88qq-init-pod | container step-init: time="2026-05-12T10:37:47Z" level=info msg="[param] enable: false" time="2026-05-12T10:37:47Z" level=info msg="[param] default-http-proxy: squid.caching.svc.cluster.local:3128" time="2026-05-12T10:37:47Z" level=info msg="[param] default-no-proxy: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-05-12T10:37:47Z" level=info msg="[param] http-proxy-result-path: /tekton/results/http-proxy" time="2026-05-12T10:37:47Z" level=info msg="[param] no-proxy-result-path: /tekton/results/no-proxy" time="2026-05-12T10:37:47Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-05-12T10:37:47Z" level=info msg="Cache proxy is disabled via param" time="2026-05-12T10:37:47Z" level=info msg="[result] HTTP PROXY: " time="2026-05-12T10:37:47Z" level=info msg="[result] NO PROXY: " < Exit [It] pipelineRun should fail for symlink component with Git source URL https://github.com/redhat-appstudio-qe/devfile-sample-python-basic with component name test-symlink-comp-cnrr - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:813 @ 05/12/26 10:59:38.419 (276ms) > Enter [AfterAll] HACBS pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:271 @ 05/12/26 10:59:38.419 < Exit [AfterAll] HACBS pipelines - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:271 @ 05/12/26 10:59:46.102 (7.683s) > Enter [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:46.103 < Exit [AfterEach] [build-service-suite Build templates E2E test] - /tmp/tmp.65zYiiyd8W/tests/build/build_templates.go:207 @ 05/12/26 10:59:46.103 (0s)