pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | init container: prepare
2026/05/07 15:07:38 Entrypoint initialization

 pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | init container: place-scripts
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-0-sqrqs
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-1-4zbs9
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-2-wfbqb
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-3-4c9kj
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-4-psmlw
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-5-57r62

pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | container step-introspect: 
Artifact type will be determined by introspection.
Checking the media type of the OCI artifact...
[retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
The media type of the OCI artifact is application/vnd.oci.image.manifest.v1+json.
Looking for image labels that indicate this might be an operator bundle...
[retry] executing: skopeo inspect --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
Found 0 matching labels.
Expecting 3 or more to identify this image as an operator bundle.
Introspection concludes that this artifact is of type "application".

pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | container step-generate-container-auth: 
Selecting auth for quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
Using token for quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk
Auth json written to "/auth/auth.json".

pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | container step-set-skip-for-bundles: 
2026/05/07 15:08:13 INFO Step was skipped due to when expressions were evaluated to false.

pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | container step-app-check: 
time="2026-05-07T15:08:13Z" level=info msg="certification library version" version="1.17.2 <commit: eb87e5b2d67ad110a0afe8edfb16f445e0877c4e>"
time="2026-05-07T15:08:13Z" level=info msg="running checks for quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c for platform amd64"
time="2026-05-07T15:08:13Z" level=info msg="target image" image="quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c"
time="2026-05-07T15:08:19Z" level=error msg="could not get rpm list, continuing without it" error="could not find rpm db/packages: stat /tmp/preflight-3311691978/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-3311691978/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-3311691978/fs/var/lib/rpm/Packages: no such file or directory"
time="2026-05-07T15:08:19Z" level=info msg="warning: licenses directory does not exist or all of its children are empty directories: error when checking for /licenses: stat /tmp/preflight-3311691978/fs/licenses: no such file or directory" check=HasLicense
time="2026-05-07T15:08:19Z" level=info msg="check completed" check=HasLicense result=FAILED
time="2026-05-07T15:08:19Z" level=info msg="check completed" check=HasUniqueTag result=PASSED
time="2026-05-07T15:08:19Z" level=info msg="check completed" check=LayerCountAcceptable result=PASSED
time="2026-05-07T15:08:19Z" level=info msg="check completed" check=HasNoProhibitedPackages err="unable to get a list of all packages in the image: could not get rpm list: could not find rpm db/packages: stat /tmp/preflight-3311691978/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-3311691978/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-3311691978/fs/var/lib/rpm/Packages: no such file or directory" result=ERROR
time="2026-05-07T15:08:19Z" level=info msg="check completed" check=HasRequiredLabel result=FAILED
time="2026-05-07T15:08:19Z" level=info msg="detected empty USER. Presumed to be running as root" check=RunAsNonRoot
time="2026-05-07T15:08:19Z" level=info msg="USER value must be provided and be a non-root value for this check to pass" check=RunAsNonRoot
time="2026-05-07T15:08:19Z" level=info msg="check completed" check=RunAsNonRoot result=FAILED
time="2026-05-07T15:08:23Z" level=info msg="check completed" check=HasModifiedFiles result=PASSED
time="2026-05-07T15:08:23Z" level=info msg="check completed" check=BasedOnUbi result=FAILED
time="2026-05-07T15:08:23Z" level=info msg="This image's tag on-pr-1cb71038618da109b8ce119afe1ea028a468654c will be paired with digest sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1 once this image has been published in accordance with Red Hat Certification policy. You may then add or remove any supplemental tags through your Red Hat Connect portal as you see fit."
{
    "image": "quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c",
    "passed": false,
    "test_library": {
        "name": "github.com/redhat-openshift-ecosystem/openshift-preflight",
        "version": "1.17.2",
        "commit": "eb87e5b2d67ad110a0afe8edfb16f445e0877c4e"
    },
    "results": {
        "passed": [
            {
                "name": "HasUniqueTag",
                "elapsed_time": 0,
                "description": "Checking if container has a tag other than 'latest', so that the image can be uniquely identified."
            },
            {
                "name": "LayerCountAcceptable",
                "elapsed_time": 0,
                "description": "Checking if container has less than 40 layers.  Too many layers within the container images can degrade container performance."
            },
            {
                "name": "HasModifiedFiles",
                "elapsed_time": 3975,
                "description": "Checks that no files installed via RPM in the base Red Hat layer have been modified"
            }
        ],
        "failed": [
            {
                "name": "HasLicense",
                "elapsed_time": 0,
                "description": "Checking if terms and conditions applicable to the software including open source licensing information are present. The license must be at /licenses",
                "help": "Check HasLicense encountered an error. Please review the preflight.log file for more information.",
                "suggestion": "Create a directory named /licenses and include all relevant licensing and/or terms and conditions as text file(s) in that directory.",
                "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction",
                "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction"
            },
            {
                "name": "HasRequiredLabel",
                "elapsed_time": 0,
                "description": "Checking if the required labels (name, vendor, version, release, summary, description, maintainer) are present in the container metadata",
                "help": "Check HasRequiredLabel encountered an error. Please review the preflight.log file for more information.",
                "suggestion": "Add the following labels to your Dockerfile or Containerfile: name, vendor, version, release, summary, description, maintainer.",
                "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction",
                "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction"
            },
            {
                "name": "RunAsNonRoot",
                "elapsed_time": 0,
                "description": "Checking if container runs as the root user because a container that does not specify a non-root user will fail the automatic certification, and will be subject to a manual review before the container can be approved for publication",
                "help": "Check RunAsNonRoot encountered an error. Please review the preflight.log file for more information.",
                "suggestion": "Indicate a specific USER in the dockerfile or containerfile",
                "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction",
                "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction"
            },
            {
                "name": "BasedOnUbi",
                "elapsed_time": 295,
                "description": "Checking if the container's base image is based upon the Red Hat Universal Base Image (UBI)",
                "help": "Check BasedOnUbi encountered an error. Please review the preflight.log file for more information.",
                "suggestion": "Change the FROM directive in your Dockerfile or Containerfile, for the latest list of images and details refer to: https://catalog.redhat.com/software/base-images",
                "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction",
                "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction"
            }
        ],
        "errors": [
            {
                "name": "HasNoProhibitedPackages",
                "elapsed_time": 0,
                "description": "Checks to ensure that the image in use does not include prohibited packages, such as Red Hat Enterprise Linux (RHEL) kernel packages.",
                "help": "Check HasNoProhibitedPackages encountered an error. Please review the preflight.log file for more information."
            }
        ]
    }
}
time="2026-05-07T15:08:23Z" level=info msg="Preflight result: FAILED"

pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | container step-app-set-outcome: 
{"result":"ERROR","timestamp":"1778166503","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":3,"failures":4,"warnings":0}[retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c

pod: test-comp-srjk-on-pull-requa3e0a2c9af1da26bd3a48e1c7a0c18ac-pod | container step-final-outcome: 
+ [[ ! -f /mount/konflux.results.json ]]
+ tee /tekton/steps/step-final-outcome/results/test-output
{"result":"ERROR","timestamp":"1778166503","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":3,"failures":4,"warnings":0}
 pod: test-comp-srjk-on-pull-request-src67-apply-tags-pod | init container: prepare
2026/05/07 15:07:38 Entrypoint initialization

pod: test-comp-srjk-on-pull-request-src67-apply-tags-pod | container step-apply-additional-tags: 
time="2026-05-07T15:07:40Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c"
time="2026-05-07T15:07:40Z" level=info msg="[param] digest: sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1"
time="2026-05-07T15:07:40Z" level=info msg="[param] tags-from-image-label: konflux.additional-tags"
time="2026-05-07T15:07:41Z" level=warning msg="No tags given in 'konflux.additional-tags' image label"
{"tags":[]}
 pod: test-comp-srjk-on-pull-request-src67-build-container-pod | init container: prepare
2026/05/07 15:05:20 Entrypoint initialization

 pod: test-comp-srjk-on-pull-request-src67-build-container-pod | init container: place-scripts
2026/05/07 15:05:20 Decoded script /tekton/scripts/script-0-kgpqr
2026/05/07 15:05:20 Decoded script /tekton/scripts/script-1-pxn5z
2026/05/07 15:05:20 Decoded script /tekton/scripts/script-2-74xzj
2026/05/07 15:05:20 Decoded script /tekton/scripts/script-3-d2pht
2026/05/07 15:05:20 Decoded script /tekton/scripts/script-4-pxd7p

 pod: test-comp-srjk-on-pull-request-src67-build-container-pod | init container: working-dir-initializer

pod: test-comp-srjk-on-pull-request-src67-build-container-pod | container step-build: 
[2026-05-07T15:05:58,648433188+00:00] Validate context path
[2026-05-07T15:05:58,651699638+00:00] Update CA trust
[2026-05-07T15:05:58,652779627+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2026-05-07T15:06:00,812450957+00:00] Prepare Dockerfile
Checking if /var/workdir/cachi2/output/bom.json exists.
Could not find prefetched sbom. No content_sets found for ICM
[2026-05-07T15:06:00,818149113+00:00] Prepare system (architecture: x86_64)
[2026-05-07T15:06:00,830156261+00:00] Setup prefetched
Trying to pull quay.io/devfile/python:slim...
Getting image source signatures
Copying blob sha256:778656c04542093db6d3b6e07bffbcf6ec4b24709276be7cdf177fcb3666663a
Copying blob sha256:0f372def914e585a52a46de64d0ed00b960c02f5f81a307d673e73b404203d61
Copying blob sha256:2f9c09f7c02f4403f9ec5313e53e63eafe6cd43993457b810ce1b9642812daec
Copying blob sha256:025c56f98b679f70b7a54241917e56da7b59ab9d2defecc6ebdb0bf2750484bb
Copying blob sha256:30fb943195a7f7cee90a9c67461c338d1d76a7004d2f94792b774ef71d875a02
Copying config sha256:04f51101c1b979fb8a45a5332bfa8ed2c60f613ea396c3edd40f3d91702b24ef
Writing manifest to image destination
[2026-05-07T15:06:21,407399517+00:00] Unsetting proxy
{
  "architecture": "x86_64",
  "vcs-type": "git",
  "vcs-ref": "1cb71038618da109b8ce119afe1ea028a468654c",
  "org.opencontainers.image.revision": "1cb71038618da109b8ce119afe1ea028a468654c",
  "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-python-basic",
  "quay.expires-after": "6h",
  "build-date": "2026-05-07T15:06:00Z",
  "org.opencontainers.image.created": "2026-05-07T15:06:00Z",
  "io.buildah.version": "1.42.2"
}
[2026-05-07T15:06:21,469350703+00:00] Register sub-man
Adding the entitlement to the build
[2026-05-07T15:06:21,474182935+00:00] Add secrets
[2026-05-07T15:06:21,483158662+00:00] Run buildah build
[2026-05-07T15:06:21,484254458+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=1cb71038618da109b8ce119afe1ea028a468654c --label org.opencontainers.image.revision=1cb71038618da109b8ce119afe1ea028a468654c --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --label quay.expires-after=6h --label build-date=2026-05-07T15:06:00Z --label org.opencontainers.image.created=2026-05-07T15:06:00Z --annotation org.opencontainers.image.revision=1cb71038618da109b8ce119afe1ea028a468654c --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-python-basic --annotation org.opencontainers.image.created=2026-05-07T15:06:00Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.SBvcl4 -t quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c . 
STEP 1/11: FROM quay.io/devfile/python:slim
STEP 2/11: EXPOSE 8081/tcp
STEP 3/11: ENV FLASK_PORT=8081
STEP 4/11: WORKDIR /projects
STEP 5/11: COPY requirements.txt .
STEP 6/11: RUN pip install -r requirements.txt
Collecting Flask==2.1.0
  Downloading Flask-2.1.0-py3-none-any.whl (95 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 95.2/95.2 kB 15.7 MB/s eta 0:00:00
Collecting Werkzeug>=2.0
  Downloading werkzeug-3.1.8-py3-none-any.whl (226 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 226.5/226.5 kB 80.0 MB/s eta 0:00:00
Collecting Jinja2>=3.0
  Downloading jinja2-3.1.6-py3-none-any.whl (134 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 134.9/134.9 kB 113.1 MB/s eta 0:00:00
Collecting itsdangerous>=2.0
  Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB)
Collecting click>=8.0
  Downloading click-8.3.3-py3-none-any.whl (110 kB)
     ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 110.5/110.5 kB 98.5 MB/s eta 0:00:00
Collecting MarkupSafe>=2.0
  Downloading markupsafe-3.0.3-cp311-cp311-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (22 kB)
Installing collected packages: MarkupSafe, itsdangerous, click, Werkzeug, Jinja2, Flask
Successfully installed Flask-2.1.0 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.8 click-8.3.3 itsdangerous-2.2.0
WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv

[notice] A new release of pip available: 22.3.1 -> 26.1.1
[notice] To update, run: pip install --upgrade pip
STEP 7/11: COPY . .
STEP 8/11: CMD [ "python", "./app.py" ]
STEP 9/11: COPY labels.json /usr/share/buildinfo/labels.json
STEP 10/11: COPY labels.json /root/buildinfo/labels.json
STEP 11/11: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="1cb71038618da109b8ce119afe1ea028a468654c" "org.opencontainers.image.revision"="1cb71038618da109b8ce119afe1ea028a468654c" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-python-basic" "quay.expires-after"="6h" "build-date"="2026-05-07T15:06:00Z" "org.opencontainers.image.created"="2026-05-07T15:06:00Z"
COMMIT quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
--> 56c5b57dc96d
Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
56c5b57dc96dbf024bb090f7dc88d52ec59c69b3c20af8c2c281f3fe694ff24a
[2026-05-07T15:06:26,126696745+00:00] Unsetting proxy
[2026-05-07T15:06:26,128142830+00:00] Add metadata
Recording base image digests used
quay.io/devfile/python:slim quay.io/devfile/python:slim@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c
Getting image source signatures
Copying blob sha256:d987c1722a9d1d6a8a4bcfbdce2cfabc0fd001d32ddf17092ba0eb1611b23b8b
Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb
Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a
Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238
Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6
Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29
Copying config sha256:56c5b57dc96dbf024bb090f7dc88d52ec59c69b3c20af8c2c281f3fe694ff24a
Writing manifest to image destination
[2026-05-07T15:06:27,366532262+00:00] End build

pod: test-comp-srjk-on-pull-request-src67-build-container-pod | container step-push: 
[2026-05-07T15:06:27,822739325+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2026-05-07T15:06:30,137966886+00:00] Convert image
[2026-05-07T15:06:30,139099986+00:00] Push image with unique tag
Pushing to quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:test-comp-srjk-on-pull-request-src67-build-container
[retry] executing: buildah push --format=oci --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c docker://quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:test-comp-srjk-on-pull-request-src67-build-container
Getting image source signatures
Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb
Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29
Copying blob sha256:d987c1722a9d1d6a8a4bcfbdce2cfabc0fd001d32ddf17092ba0eb1611b23b8b
Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238
Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6
Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a
Copying config sha256:56c5b57dc96dbf024bb090f7dc88d52ec59c69b3c20af8c2c281f3fe694ff24a
Writing manifest to image destination
[2026-05-07T15:06:37,755470836+00:00] Push image with git revision
Pushing to quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
[retry] executing: buildah push --format=oci --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c docker://quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
Getting image source signatures
Copying blob sha256:d987c1722a9d1d6a8a4bcfbdce2cfabc0fd001d32ddf17092ba0eb1611b23b8b
Copying blob sha256:0a7eaca7a2e7e116a5658c409ea2ceb98226b7481a3b0f90c8d94d9f230fe238
Copying blob sha256:d326469892d974408d96f1e02d64dce10d20f88613688af11e99e3e22523beeb
Copying blob sha256:d9892173749de078dfb702835e9e3858aff86e7447fb11c5a2f2c6bb10f882f6
Copying blob sha256:609bcd29c7943a6667e3204bfa5b86a07d255f78ebc26d4c4e8981b335ac3b9a
Copying blob sha256:b5ebffba54d3e3f7fd80435fcdc34c4a96fdb2ecab0f0a298fe08f74c2f69d29
Copying config sha256:56c5b57dc96dbf024bb090f7dc88d52ec59c69b3c20af8c2c281f3fe694ff24a
Writing manifest to image destination
sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
[retry] executing: kubectl get configmap cluster-config -n konflux-info -o json
Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap)
[2026-05-07T15:06:38,556822881+00:00] End push

pod: test-comp-srjk-on-pull-request-src67-build-container-pod | container step-sbom-syft-generate: 
[2026-05-07T15:06:38,599635308+00:00] Generate SBOM
Running syft on the image
Running syft on the source code
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
[2026-05-07T15:06:43,711456520+00:00] End sbom-syft-generate

pod: test-comp-srjk-on-pull-request-src67-build-container-pod | container step-prepare-sboms: 
[2026-05-07T15:06:44,193613111+00:00] Prepare SBOM
[2026-05-07T15:06:44,197900230+00:00] Generate SBOM with mobster
Skipping SBOM validation
2026-05-07 15:06:45,549 [INFO] mobster.log: Logging level set to 20
2026-05-07 15:06:45,635 [INFO] mobster.oci: Fetching manifest for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c
2026-05-07 15:06:46,487 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:46,690 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:47,291 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:47,543 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:48,114 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:48,315 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:48,756 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:48,975 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/devfile/python@sha256:54924a2ee4a2ef17028ae076ce38e59b3f4054353a5c9f9318dfaee60377532c with output b'Error: found no attestations\nerror during command execution: found no attestations\n'
2026-05-07 15:06:48,976 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM.
2026-05-07 15:06:48,976 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully.
2026-05-07 15:06:48,976 [INFO] mobster.log: Contextual workflow completed in 3.36s
2026-05-07 15:06:49,004 [INFO] mobster.main: Exiting with code 0.
[2026-05-07T15:06:49,113139876+00:00] End prepare-sboms

pod: test-comp-srjk-on-pull-request-src67-build-container-pod | container step-upload-sbom: 
[2026-05-07T15:06:49,561501185+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1] to [quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:sha256-9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk@sha256:57ada25f5af1da9f0c980860dab3db35ef00cbf405b3e6778fce35c9617c7013
[2026-05-07T15:06:53,774434322+00:00] End upload-sbom

 pod: test-comp-srjk-on-pull-request-src67-build-image-index-pod | init container: prepare
2026/05/07 15:06:55 Entrypoint initialization

 pod: test-comp-srjk-on-pull-request-src67-build-image-index-pod | init container: place-scripts
2026/05/07 15:07:06 Decoded script /tekton/scripts/script-0-wsn6n
2026/05/07 15:07:06 Decoded script /tekton/scripts/script-1-wmv9g
2026/05/07 15:07:06 Decoded script /tekton/scripts/script-2-qjn7m

pod: test-comp-srjk-on-pull-request-src67-build-image-index-pod | container step-build: 
[2026-05-07T15:07:25,446178984+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Running konflux-build-cli
time="2026-05-07T15:07:27Z" level=info msg="[param] image: quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c"
time="2026-05-07T15:07:27Z" level=info msg="[param] images: [quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1]"
time="2026-05-07T15:07:27Z" level=info msg="[param] buildah-format: oci"
time="2026-05-07T15:07:27Z" level=info msg="[param] always-build-index: false"
time="2026-05-07T15:07:27Z" level=info msg="[param] additional-tags: [test-comp-srjk-on-pull-request-src67-build-image-index]"
time="2026-05-07T15:07:27Z" level=info msg="[param] output-manifest-path: /index-build-data/manifest_data.json"
time="2026-05-07T15:07:27Z" level=info msg="[param] result-path-image-digest: /tekton/results/IMAGE_DIGEST"
time="2026-05-07T15:07:27Z" level=info msg="[param] result-path-image-url: /tekton/results/IMAGE_URL"
time="2026-05-07T15:07:27Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF"
time="2026-05-07T15:07:27Z" level=info msg="[param] result-path-images: /tekton/results/IMAGES"
time="2026-05-07T15:07:27Z" level=info msg="Creating manifest list: quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c"
time="2026-05-07T15:07:27Z" level=info msg="buildah [stdout] 32418ad5d360c69b52d5f788daa3b4eb2b5ffb79875fc9757acdb91d43c9b92d" logger=CliExecutor
time="2026-05-07T15:07:27Z" level=info msg="Skipping image index generation. Returning results for single image."
{"image_digest":"sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1","image_url":"quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c","image_ref":"quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1","images":"quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1"}
pod: test-comp-srjk-on-pull-request-src67-build-image-index-pod | container step-create-sbom: 
The manifest_data.json file does not exist. Skipping the SBOM creation...

pod: test-comp-srjk-on-pull-request-src67-build-image-index-pod | container step-upload-sbom: 
[2026-05-07T15:07:28,842631847+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
The index.spdx.json file does not exists. Skipping the SBOM upload...

 pod: test-comp-srjk-on-pull-request-src67-clamav-scan-pod | init container: prepare
2026/05/07 15:07:38 Entrypoint initialization

 pod: test-comp-srjk-on-pull-request-src67-clamav-scan-pod | init container: place-scripts
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-0-pcp9k
2026/05/07 15:07:39 Decoded script /tekton/scripts/script-1-46dg7

pod: test-comp-srjk-on-pull-request-src67-clamav-scan-pod | container step-extract-and-scan-image: 
Starting clamd ...
clamd is ready!
Detecting artifact type for quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1.
Detected container image. Processing image manifests.
Running "oc image extract" on image of arch amd64
Scanning image for arch amd64. This operation may take a while.

----------- SCAN SUMMARY -----------
Infected files: 0
Time: 37.848 sec (0 m 37 s)
Start Date: 2026:05:07 15:08:19
End Date:   2026:05:07 15:08:57
Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27993/Wed May  6 06:24:57 2026 Database version: 27993
[
	{
		"filename": "/work/logs/clamscan-result-log-amd64.json",
		"namespace": "required_checks",
		"successes": 2
	}
]
{"timestamp":"1778166537","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"}
{"timestamp":"1778166537","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"}
{"timestamp":"1778166537","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"}
{"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c", "digests": ["sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1"]}}

pod: test-comp-srjk-on-pull-request-src67-clamav-scan-pod | container step-upload: 
Selecting auth
Using token for quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk
Attaching to quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c
Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1 clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json
Preparing clamscan-result-amd64.log
Preparing clamscan-ec-test-amd64.json
Uploading c18944d289f5 clamscan-result-amd64.log
Uploading 11ce3ffca808 clamscan-ec-test-amd64.json
Exists    44136fa355b3 application/vnd.oci.empty.v1+json
Uploaded  11ce3ffca808 clamscan-ec-test-amd64.json
Uploaded  c18944d289f5 clamscan-result-amd64.log
Uploading b4684da8e35f application/vnd.oci.image.manifest.v1+json
Uploaded  b4684da8e35f application/vnd.oci.image.manifest.v1+json
Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c@sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1
Digest: sha256:b4684da8e35fc0d8527fc43d7952940f8ca952c6441ce88b3b9f6f47a3ec808c

 pod: test-comp-srjk-on-pull-request-src67-clone-repository-pod | init container: prepare
2026/05/07 15:05:03 Entrypoint initialization

 pod: test-comp-srjk-on-pull-request-src67-clone-repository-pod | init container: place-scripts
2026/05/07 15:05:04 Decoded script /tekton/scripts/script-0-kxf2j
2026/05/07 15:05:04 Decoded script /tekton/scripts/script-1-zwr47

pod: test-comp-srjk-on-pull-request-src67-clone-repository-pod | container step-clone: 
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
{"level":"info","ts":1778166307.6887574,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"}
{"level":"info","ts":1778166307.9899359,"caller":"git/git.go:223","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/devfile-sample-python-basic @ 1cb71038618da109b8ce119afe1ea028a468654c (grafted, HEAD) in path /workspace/output/source"}
{"level":"info","ts":1778166307.9900117,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"}
{"level":"info","ts":1778166308.0151687,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /workspace/output/source"}
Merge option disabled. Using checked-out revision 1cb71038618da109b8ce119afe1ea028a468654c directly.

pod: test-comp-srjk-on-pull-request-src67-clone-repository-pod | container step-symlink-check: 
Running symlink check

 pod: test-comp-srjk-on-pull-request-src67-init-pod | init container: prepare
2026/05/07 15:04:50 Entrypoint initialization

pod: test-comp-srjk-on-pull-request-src67-init-pod | container step-init: 
time="2026-05-07T15:04:54Z" level=info msg="[param] enable: false"
time="2026-05-07T15:04:54Z" level=info msg="[param] default-http-proxy: squid.caching.svc.cluster.local:3128"
time="2026-05-07T15:04:54Z" level=info msg="[param] default-no-proxy: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai"
time="2026-05-07T15:04:54Z" level=info msg="[param] http-proxy-result-path: /tekton/results/http-proxy"
time="2026-05-07T15:04:54Z" level=info msg="[param] no-proxy-result-path: /tekton/results/no-proxy"
time="2026-05-07T15:04:54Z" level=info msg="Using in-cluster config" logger=KubeClient
time="2026-05-07T15:04:54Z" level=info msg="Cache proxy is disabled via param"
time="2026-05-07T15:04:54Z" level=info msg="[result] HTTP PROXY: "
time="2026-05-07T15:04:54Z" level=info msg="[result] NO PROXY: "

 pod: test-comp-srjk-on-pull-request-src67-prefetch-dependencies-pod | init container: prepare
2026/05/07 15:05:11 Entrypoint initialization

 pod: test-comp-srjk-on-pull-request-src67-prefetch-dependencies-pod | init container: place-scripts
2026/05/07 15:05:11 Decoded script /tekton/scripts/script-0-5c2hh

pod: test-comp-srjk-on-pull-request-src67-prefetch-dependencies-pod | container step-prefetch-dependencies: 
Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using mounted service CA bundle: /mnt/service-ca/ca-bundle.crt
'/mnt/service-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/service-ca.crt'
time="2026-05-07T15:05:16Z" level=debug msg="Starting prefetch-dependencies"
time="2026-05-07T15:05:16Z" level=info msg="Using in-cluster config" logger=KubeClient
time="2026-05-07T15:05:16Z" level=info msg="Not using package registry proxy because allow-package-registry-proxy is not set to `true` on the cluster level" logger=PrefetchDependencies
time="2026-05-07T15:05:16Z" level=info msg="[param] source-dir: /workspace/source/source"
time="2026-05-07T15:05:16Z" level=info msg="[param] output-dir: /workspace/source/cachi2/output"
time="2026-05-07T15:05:16Z" level=info msg="[param] sbom-format: spdx"
time="2026-05-07T15:05:16Z" level=info msg="[param] mode: strict"
time="2026-05-07T15:05:16Z" level=info msg="[param] output-dir-mount-point: /cachi2/output"
time="2026-05-07T15:05:16Z" level=info msg="[param] env-files: [/workspace/source/cachi2/cachi2.env /workspace/source/cachi2/prefetch.env /workspace/source/cachi2/prefetch-env.json]"
time="2026-05-07T15:05:16Z" level=info msg="[param] git-auth-directory: /workspace/git-basic-auth"
time="2026-05-07T15:05:17Z" level=info msg="hermeto [stdout] hermeto 0.51.0" logger=CliExecutor
time="2026-05-07T15:05:18Z" level=warning msg="No input provided; skipping prefetch-dependencies" logger=PrefetchDependencies
time="2026-05-07T15:05:18Z" level=debug msg="Finished prefetch-dependencies"

 pod: test-comp-srjk-on-pull-request-src67-push-dockerfile-pod | init container: prepare
2026/05/07 15:07:52 Entrypoint initialization

 pod: test-comp-srjk-on-pull-request-src67-push-dockerfile-pod | init container: working-dir-initializer

pod: test-comp-srjk-on-pull-request-src67-push-dockerfile-pod | container step-push: 
time="2026-05-07T15:07:57Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk:on-pr-1cb71038618da109b8ce119afe1ea028a468654c"
time="2026-05-07T15:07:57Z" level=info msg="[param] image-digest: sha256:9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1"
time="2026-05-07T15:07:57Z" level=info msg="[param] containerfile: docker/Dockerfile"
time="2026-05-07T15:07:57Z" level=info msg="[param] context: ."
time="2026-05-07T15:07:57Z" level=info msg="[param] tag-suffix: .dockerfile"
time="2026-05-07T15:07:57Z" level=info msg="[param] artifact-type: application/vnd.konflux.dockerfile"
time="2026-05-07T15:07:57Z" level=info msg="[param] source: source"
time="2026-05-07T15:07:57Z" level=info msg="[param] result-path-image-ref: /tekton/results/IMAGE_REF"
time="2026-05-07T15:07:57Z" level=info msg="[param] alternative-filename: Dockerfile"
time="2026-05-07T15:07:58Z" level=info msg="oras [stdout] quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk@sha256:6122ab28821d2fa3283d67ebb44b52eb260b2dbe33b8dcbab605c315d230357f" logger=CliExecutor
time="2026-05-07T15:07:58Z" level=info msg="Containerfile '/workspace/workspace/source/docker/Dockerfile' is pushed to registry with tag: sha256-9ebf58c2ff9e8ef045c207a68f825e283a1edc9b16e8c69f1dda7fc332b7bde1.dockerfile"
{"image_ref":"quay.io/redhat-appstudio-qe/build-e2e-kavk/test-comp-srjk@sha256:6122ab28821d2fa3283d67ebb44b52eb260b2dbe33b8dcbab605c315d230357f"}
 pod: test-comp-srjk-on-pull-request-src67-sast-snyk-check-pod | init container: prepare
2026/05/07 15:07:48 Entrypoint initialization

 pod: test-comp-srjk-on-pull-request-src67-sast-snyk-check-pod | init container: place-scripts
2026/05/07 15:07:49 Decoded script /tekton/scripts/script-0-lrf95
2026/05/07 15:07:49 Decoded script /tekton/scripts/script-1-dn954

 pod: test-comp-srjk-on-pull-request-src67-sast-snyk-check-pod | init container: working-dir-initializer

pod: test-comp-srjk-on-pull-request-src67-sast-snyk-check-pod | container step-sast-snyk-check: 
INFO: The PROJECT_NAME used is: test-comp-srjk
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
{"result":"SKIPPED","timestamp":"2026-05-07T15:09:34+00:00","note":"Task sast-snyk-check skipped: If you wish to use the Snyk code SAST task, please create a secret name snyk-secret with the key 'snyk_token' containing the Snyk token by following the steps given [here](https://konflux-ci.dev/docs/testing/build/snyk/)","namespace":"default","successes":0,"failures":0,"warnings":0}

pod: test-comp-srjk-on-pull-request-src67-sast-snyk-check-pod | container step-upload: 
No sast_snyk_check_out.sarif exists. Skipping upload.
No excluded-findings.json exists. Skipping upload.