[2026-04-30T10:23:50,451322119+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-jqhm/python-component-srtzfh
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-jqhm/python-component-srtzfh:77ab300103a269fb87bfbb856a294688b7299321@sha256:a73a452f9851e32875333fe385df55dc7021e371028e4598efa75c8e7a8347f8
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-jqhm/python-component-srtzfh@sha256:a73a452f9851e32875333fe385df55dc7021e371028e4598efa75c8e7a8347f8] to [quay.io/redhat-appstudio-qe/group-jqhm/python-component-srtzfh:sha256-a73a452f9851e32875333fe385df55dc7021e371028e4598efa75c8e7a8347f8.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-jqhm/python-component-srtzfh@sha256:e3a47d4559ea67377f7ce44d863746152295dbce3a89be3dc2f5220bdb8c489d
[2026-04-30T10:23:54,281117526+00:00] End upload-sbom