Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
time="2026-08-18T04:44:56Z" level=debug msg="Starting prefetch-dependencies"
time="2026-08-18T04:44:56Z" level=info msg="Using in-cluster config" logger=KubeClient
time="2026-08-18T04:44:56Z" level=info msg="Not using package registry proxy because allow-package-registry-proxy is not set to `true` on the cluster level" logger=PrefetchDependencies
time="2026-08-18T04:44:56Z" level=info msg="[param] input: generic"
time="2026-08-18T04:44:56Z" level=info msg="[param] source-dir: /workspace/source/source"
time="2026-08-18T04:44:56Z" level=info msg="[param] output-dir: /workspace/source/cachi2/output"
time="2026-08-18T04:44:56Z" level=info msg="[param] sbom-format: spdx"
time="2026-08-18T04:44:56Z" level=info msg="[param] mode: strict"
time="2026-08-18T04:44:56Z" level=info msg="[param] output-dir-mount-point: /cachi2/output"
time="2026-08-18T04:44:56Z" level=info msg="[param] env-files: [/workspace/source/cachi2/cachi2.env /workspace/source/cachi2/prefetch.env /workspace/source/cachi2/prefetch-env.json]"
time="2026-08-18T04:44:56Z" level=info msg="[param] git-auth-directory: /workspace/git-basic-auth"
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stdout] hermeto 0.60.1"
time="2026-08-18T04:44:57Z" level=debug msg="Using modified input for Hermeto:\n{\"type\":\"generic\"}" logger=PrefetchDependencies
time="2026-08-18T04:44:57Z" level=debug msg="Executing hermeto --log-level debug --mode strict fetch-deps '{\"type\":\"generic\"}' --sbom-output-type spdx --source /workspace/source/source --output /workspace/source/cachi2/output" logger=HermetoCli
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,550 DEBUG Copying /workspace/source/source to /tmpdpmkcky8.hermeto-source-copy using fast in-kernel copy."
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,550 DEBUG Fast copying failed, falling back to standard copy."
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,553 INFO Reading generic lockfile: /tmpdpmkcky8.hermeto-source-copy/artifacts.lock.yaml"
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,555 DEBUG Downloading https://github.com/jeremylong/DependencyCheck/releases/download/v11.1.0/dependency-check-11.1.0-release.zip"
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,859 INFO Verifying checksums of dependency-check.zip"
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,890 DEBUG dependency-check.zip: sha256 checksum matches: c5b5b9e592682b700e17c28f489fe50644ef54370edeb2c53d18b70824de1e22"
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,892 WARNING No purls found for SPDXID='SPDXRef-DocumentRoot-File-' name='' versionInfo='' externalRefs=[] annotations=[] downloadLocation='NOASSERTION' sourceInfo=None."
time="2026-08-18T04:44:57Z" level=info msg="hermeto [stderr] 2026-08-18 04:44:57,893 INFO All dependencies fetched successfully \\o/"
time="2026-08-18T04:44:57Z" level=debug msg="Executing hermeto --log-level debug generate-env /workspace/source/cachi2/output --for-output-dir /cachi2/output --output /workspace/source/cachi2/cachi2.env" logger=HermetoCli
time="2026-08-18T04:44:58Z" level=debug msg="Executing hermeto --log-level debug generate-env /workspace/source/cachi2/output --for-output-dir /cachi2/output --output /workspace/source/cachi2/prefetch.env" logger=HermetoCli
time="2026-08-18T04:44:58Z" level=debug msg="Executing hermeto --log-level debug generate-env /workspace/source/cachi2/output --for-output-dir /cachi2/output --output /workspace/source/cachi2/prefetch-env.json" logger=HermetoCli
time="2026-08-18T04:44:59Z" level=debug msg="Executing hermeto --log-level debug inject-files /workspace/source/cachi2/output --for-output-dir /cachi2/output" logger=HermetoCli
time="2026-08-18T04:45:00Z" level=debug msg="Finished prefetch-dependencies"