pod: gh-test-custom-branch-efyqou-on-pull-request-q2vdh-init-pod | init container: prepare 2026/07/07 14:51:50 Entrypoint initialization pod: gh-test-custom-branch-efyqou-on-pull-request-q2vdh-init-pod | container step-init: time="2026-07-07T14:51:52Z" level=info msg="[param] enable: false" time="2026-07-07T14:51:52Z" level=info msg="[param] default-http-proxy: squid.caching.svc.cluster.local:3128" time="2026-07-07T14:51:52Z" level=info msg="[param] default-no-proxy: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-07-07T14:51:52Z" level=info msg="[param] http-proxy-result-path: /tekton/results/http-proxy" time="2026-07-07T14:51:52Z" level=info msg="[param] no-proxy-result-path: /tekton/results/no-proxy" time="2026-07-07T14:51:52Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-07-07T14:51:52Z" level=info msg="Cache proxy is disabled via param" time="2026-07-07T14:51:52Z" level=info msg="[result] HTTP PROXY: " time="2026-07-07T14:51:52Z" level=info msg="[result] NO PROXY: " pod: gh-test-custom-branch-efyqou-on-pull-request-q2vdh-tpa-scan-pod | init container: prepare 2026/07/07 14:54:57 Entrypoint initialization pod: gh-test-custom-branch-efyqou-on-pull-request-q2vdh-tpa-scan-pod | init container: place-scripts 2026/07/07 14:54:59 Decoded script /tekton/scripts/script-0-lv982 2026/07/07 14:54:59 Decoded script /tekton/scripts/script-1-964nb 2026/07/07 14:54:59 Decoded script /tekton/scripts/script-2-z7w5z pod: gh-test-custom-branch-efyqou-on-pull-request-q2vdh-tpa-scan-pod | container step-get-vulnerabilities: Inspecting raw image manifest quay.io/redhat-appstudio-qe/image-controller-e2e-pexh/gh-test-custom-branch-efyqou@sha256:d42ee651409cfc8ea8a25f1d077394cf7a3dfcd6362a09ad7a513d0d54e4a110. Selecting auth Using token for quay.io/redhat-appstudio-qe/image-controller-e2e-pexh/gh-test-custom-branch-efyqou Selecting auth Using token for quay.io/redhat-appstudio-qe/image-controller-e2e-pexh/gh-test-custom-branch-efyqou WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation '. Found SBOM of media type: text/spdx+json Running TPA scan on amd64 image manifest... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed { "scanned" : { "total" : 78, "direct" : 27, "transitive" : 51 }, 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 112k 0 0 100 112k 0 91372 0:00:01 0:00:01 --:--:-- 91372 100 112k 0 0 100 112k 0 50973 0:00:02 0:00:02 --:--:-- 50973 100 118k 0 5780 100 112k 2404 48004 0:00:02 0:00:02 --:--:-- 50409 "providers" : { "rhtpa" : { "status" : { "ok" : true, "name" : "rhtpa", "code" : 200, "message" : "OK", "warnings" : { } }, "sources" : { }, "recommendations" : { } } }, "licenses" : [ { "status" : { "ok" : true, "name" : "deps.dev", "code" : 200, "message" : "OK", "warnings" : { } }, "summary" : { "total" : 0, "concluded" : 61, "permissive" : 0, "weakCopyleft" : 0, "strongCopyleft" : 0, "unknown" : 0, "deprecated" : 0, "osiApproved" : 0, "fsfLibre" : 0 }, "packages" : { "pkg:apk/alpine/aom-libs@3.14.1-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/alpine-release@3.23.4-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/pcre@8.45-r4" : { "evidence" : [ ] }, "pkg:apk/alpine/libexpat@2.7.5-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/busybox-binsh@1.37.0-r30" : { "evidence" : [ ] }, "pkg:apk/alpine/brotli-libs@1.2.0-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libx11@1.8.12-r1" : { "evidence" : [ ] }, "pkg:apk/alpine/ssl_client@1.37.0-r30" : { "evidence" : [ ] }, "pkg:apk/alpine/tiff@4.7.1-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libice@1.1.2-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/.runtime-deps@20260617.203708" : { "evidence" : [ ] }, "pkg:apk/alpine/libxslt@1.1.43-r3" : { "evidence" : [ ] }, "pkg:apk/alpine/fontconfig@2.17.1-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libgcc@15.2.0-r2" : { "evidence" : [ ] }, "pkg:apk/alpine/libyuv@0.0.1887.20251502-r1" : { "evidence" : [ ] }, "pkg:apk/alpine/libsm@1.2.6-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libxml2@2.13.9-r1" : { "evidence" : [ ] }, "pkg:apk/alpine/libgd@2.3.3-r10" : { "evidence" : [ ] }, "pkg:apk/alpine/libcrypto3@3.5.7-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libuuid@2.41.4-r0" : { "evidence" : [ ] }, "pkg:generic/nginx@1.31.2" : { "evidence" : [ ] }, "pkg:apk/alpine/libmd@1.1.0-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/ca-certificates-bundle@20260413-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libbz2@1.0.8-r6" : { "evidence" : [ ] }, "pkg:apk/alpine/libapk@3.0.6-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libbsd@0.12.2-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libstdc%2B%2B@15.2.0-r2" : { "evidence" : [ ] }, "pkg:apk/alpine/gd@2.3.3-r10" : { "evidence" : [ ] }, "pkg:apk/alpine/libssl3@3.5.7-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libxext@1.3.6-r2" : { "evidence" : [ ] }, "pkg:apk/alpine/apk-tools@3.0.6-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/scanelf@1.3.8-r2" : { "evidence" : [ ] }, "pkg:apk/alpine/musl-utils@1.2.5-r23" : { "evidence" : [ ] }, "pkg:oci/nginx@sha256%3Aded37838a58bf767acced3030f102a0ca25b98a5766598f5879c11cd1d5683d1" : { "evidence" : [ ] }, "pkg:apk/alpine/ca-certificates@20260413-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libdav1d@1.5.2-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/zlib@1.3.2-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libxcb@1.17.0-r1" : { "evidence" : [ ] }, "pkg:apk/alpine/xz-libs@5.8.3-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libxau@1.0.12-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/geoip@1.6.12-r6" : { "evidence" : [ ] }, "pkg:apk/alpine/zstd-libs@1.5.7-r2" : { "evidence" : [ ] }, "pkg:apk/alpine/libavif@1.3.0-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libpng@1.6.58-r1" : { "evidence" : [ ] }, "pkg:apk/alpine/libwebp@1.6.0-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/perl@5.42.2-r0" : { "evidence" : [ ] }, "pkg:github/actions/checkout@v4" : { "evidence" : [ ] }, "pkg:apk/alpine/freetype@2.14.1-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/alpine-baselayout-data@3.7.2-r0" : { "evidence" : [ ] }, "pkg:oci/gh-test-custom-branch-efyqou@sha256%3Ad42ee651409cfc8ea8a25f1d077394cf7a3dfcd6362a09ad7a513d0d54e4a110" : { "evidence" : [ ] }, "pkg:github/beatlabs/delete-old-branches-action@v0.0.10" : { "evidence" : [ ] }, "pkg:apk/alpine/busybox@1.37.0-r30" : { "evidence" : [ ] }, "pkg:apk/alpine/libjpeg-turbo@3.1.2-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libxt@1.3.1-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/openssl@3.5.7-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/alpine-keys@2.6-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/libxdmcp@1.1.5-r1" : { "evidence" : [ ] }, "pkg:apk/alpine/libsharpyuv@1.6.0-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/alpine-baselayout@3.7.2-r0" : { "evidence" : [ ] }, "pkg:apk/alpine/musl@1.2.5-r23" : { "evidence" : [ ] }, "pkg:apk/alpine/libxpm@3.5.19-r0" : { "evidence" : [ ] } } } ] } pod: gh-test-custom-branch-efyqou-on-pull-request-q2vdh-tpa-scan-pod | container step-oci-attach-report: Using token for quay.io/redhat-appstudio-qe/image-controller-e2e-pexh/gh-test-custom-branch-efyqou Attaching tpa-report-amd64.json to quay.io/redhat-appstudio-qe/image-controller-e2e-pexh/gh-test-custom-branch-efyqou@sha256:d42ee651409cfc8ea8a25f1d077394cf7a3dfcd6362a09ad7a513d0d54e4a110 [retry] executing: oras attach --no-tty --format go-template=\{\{.digest\}\} --registry-config /tmp/auth/config.json --artifact-type application/vnd.redhat.tpa-report+json quay.io/redhat-appstudio-qe/image-controller-e2e-pexh/gh-test-custom-branch-efyqou@sha256:d42ee651409cfc8ea8a25f1d077394cf7a3dfcd6362a09ad7a513d0d54e4a110 tpa-report-amd64.json:application/vnd.redhat.tpa-report+json pod: gh-test-custom-branch-efyqou-on-pull-request-q2vdh-tpa-scan-pod | container step-conftest-vulnerabilities: [ { "filename": "/tekton/home/tpa-report-amd64.json", "namespace": "required_checks", "successes": 8 } ] {"vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0}} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/image-controller-e2e-pexh/gh-test-custom-branch-efyqou:on-pr-46497c7c5d9879ad7e082da881230e4ba9dd6601", "digests": ["sha256:d42ee651409cfc8ea8a25f1d077394cf7a3dfcd6362a09ad7a513d0d54e4a110"]}} {"result":"SUCCESS","timestamp":"2026-07-07T14:55:13+00:00","note":"Task tpa-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by TPA.","namespace":"default","successes":0,"failures":0,"warnings":0}