pod: gh-test-custom-branch-ttgjou-on-pull-request-67q7n-init-pod | init container: prepare 2026/03/16 09:29:27 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-pull-request-67q7n-init-pod | container step-init: time="2026-03-16T09:29:29Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-03-16T09:29:29Z" level=info msg="[param] ENABLE: false" time="2026-03-16T09:29:29Z" level=info msg="[param] DEFAULT HTTP PROXY: squid.caching.svc.cluster.local:3128" time="2026-03-16T09:29:29Z" level=info msg="[param] DEFAULT NO PROXY: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-03-16T09:29:29Z" level=info msg="[param] HTTP PROXY RESULT PATH: /tekton/results/http-proxy" time="2026-03-16T09:29:29Z" level=info msg="[param] NO PROXY RESULT PATH: /tekton/results/no-proxy" time="2026-03-16T09:29:29Z" level=info msg="Cache proxy is disabled in param or in backend" time="2026-03-16T09:29:29Z" level=info msg="[result] HTTP PROXY: " time="2026-03-16T09:29:29Z" level=info msg="[result] NO PROXY: " pod: gh-test-custom-branch-ttgjou-on-pull-request-d4lnz-init-pod | init container: prepare 2026/03/16 09:39:00 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-pull-request-d4lnz-init-pod | container step-init: time="2026-03-16T09:39:02Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-03-16T09:39:02Z" level=info msg="[param] ENABLE: false" time="2026-03-16T09:39:02Z" level=info msg="[param] DEFAULT HTTP PROXY: squid.caching.svc.cluster.local:3128" time="2026-03-16T09:39:02Z" level=info msg="[param] DEFAULT NO PROXY: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-03-16T09:39:02Z" level=info msg="[param] HTTP PROXY RESULT PATH: /tekton/results/http-proxy" time="2026-03-16T09:39:02Z" level=info msg="[param] NO PROXY RESULT PATH: /tekton/results/no-proxy" time="2026-03-16T09:39:02Z" level=info msg="Cache proxy is disabled in param or in backend" time="2026-03-16T09:39:02Z" level=info msg="[result] HTTP PROXY: " time="2026-03-16T09:39:02Z" level=info msg="[result] NO PROXY: " pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-apply-tags-pod | init container: prepare 2026/03/16 09:42:19 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-apply-tags-pod | container step-apply-additional-tags: time="2026-03-16T09:42:24Z" level=info msg="[param] Image URL: quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09" time="2026-03-16T09:42:24Z" level=info msg="[param] Image digest: sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0" time="2026-03-16T09:42:24Z" level=info msg="[param] image label: konflux.additional-tags" time="2026-03-16T09:42:25Z" level=info msg="Additional tags from 'konflux.additional-tags' image label: test-tag1, test-tag2" {"tags":["test-tag1","test-tag2"]} pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | init container: prepare 2026/03/16 09:41:17 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | init container: place-scripts 2026/03/16 09:41:18 Decoded script /tekton/scripts/script-0-zcpk6 2026/03/16 09:41:18 Decoded script /tekton/scripts/script-1-mfg8b 2026/03/16 09:41:18 Decoded script /tekton/scripts/script-2-7vmp7 2026/03/16 09:41:18 Decoded script /tekton/scripts/script-3-6q7rd 2026/03/16 09:41:18 Decoded script /tekton/scripts/script-4-ztt8f pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | init container: working-dir-initializer pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | container step-build: [2026-03-16T09:41:22,842888412+00:00] Validate context path [2026-03-16T09:41:22,846540413+00:00] Update CA trust [2026-03-16T09:41:22,847788241+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-03-16T09:41:25,270572050+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2026-03-16T09:41:25,279002542+00:00] Prepare system (architecture: x86_64) [2026-03-16T09:41:25,304719866+00:00] Setup prefetched Trying to pull quay.io/jitesoft/nginx:latest... Getting image source signatures Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying blob sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153 Copying blob sha256:3478266b4865f4efc58d163e64670ca678ab1de9918b00b890093f6426681f7b Copying blob sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab Copying config sha256:eccc690320ca661eae87600543db212c2f40266c30ac269f53148c797b04b61b Writing manifest to image destination [2026-03-16T09:41:27,737639109+00:00] Unsetting proxy { "com.jitesoft.app.alpine.version": "3.23.3", "com.jitesoft.app.nginx.version": "1.29.6", "com.jitesoft.build.arch": "amd64", "com.jitesoft.build.platform": "linux/amd64", "com.jitesoft.project.registry.uri": "registry.gitlab.com/jitesoft/dockerfiles/nginx", "com.jitesoft.project.repo.issues": "https://gitlab.com/jitesoft/dockerfiles/nginx/issues", "com.jitesoft.project.repo.type": "git", "com.jitesoft.project.repo.uri": "https://gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.alternative-locations": "oci://index.docker.io/jitesoft/nginx,oci://ghcr.io/jitesoft/nginx,oci://registry.gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.logo-url": "https://jitesoft.com/favicon-96x96.png", "io.artifacthub.package.readme-url": "https://gitlab.com/jitesoft/dockerfiles/nginx/-/raw/master/README.md", "maintainer": "Johannes Tegnér ", "maintainer.org": "Jitesoft", "maintainer.org.uri": "https://jitesoft.com", "org.opencontainers.image.created": "2026-03-16T09:41:25Z", "org.opencontainers.image.description": "Nginx on Alpine linux", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-hello-world-sbeqsy", "org.opencontainers.image.vendor": "Jitesoft", "org.opencontainers.image.version": "1.29.6", "architecture": "x86_64", "vcs-type": "git", "vcs-ref": "8f9f67feec4f468d93a25c48c6ad0904bfe44b09", "org.opencontainers.image.revision": "8f9f67feec4f468d93a25c48c6ad0904bfe44b09", "build-date": "2026-03-16T09:41:25Z", "io.buildah.version": "1.42.2", "konflux.additional-tags": "test-tag1, test-tag2" } [2026-03-16T09:41:27,781052304+00:00] Register sub-man Adding the entitlement to the build [2026-03-16T09:41:27,784615030+00:00] Add secrets [2026-03-16T09:41:27,800675850+00:00] Run buildah build [2026-03-16T09:41:27,801927686+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=8f9f67feec4f468d93a25c48c6ad0904bfe44b09 --label org.opencontainers.image.revision=8f9f67feec4f468d93a25c48c6ad0904bfe44b09 --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world-sbeqsy --label build-date=2026-03-16T09:41:25Z --label org.opencontainers.image.created=2026-03-16T09:41:25Z --annotation org.opencontainers.image.revision=8f9f67feec4f468d93a25c48c6ad0904bfe44b09 --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world-sbeqsy --annotation org.opencontainers.image.created=2026-03-16T09:41:25Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.wlp438 -t quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 . STEP 1/6: FROM quay.io/jitesoft/nginx:latest STEP 2/6: ENV PORT="8080" STEP 3/6: LABEL konflux.additional-tags="test-tag1, test-tag2" STEP 4/6: COPY labels.json /usr/share/buildinfo/labels.json STEP 5/6: COPY labels.json /root/buildinfo/labels.json STEP 6/6: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="8f9f67feec4f468d93a25c48c6ad0904bfe44b09" "org.opencontainers.image.revision"="8f9f67feec4f468d93a25c48c6ad0904bfe44b09" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-hello-world-sbeqsy" "build-date"="2026-03-16T09:41:25Z" "org.opencontainers.image.created"="2026-03-16T09:41:25Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 time="2026-03-16T09:41:28Z" level=warning msg="HEALTHCHECK is not supported for OCI image format and will be ignored. Must use `docker` format" --> e0b3a653aaa4 Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 e0b3a653aaa434dc9f5c6649b1b7f610a56bad4f9d7be53a67e513cf2146a1f9 [2026-03-16T09:41:29,111515198+00:00] Unsetting proxy [2026-03-16T09:41:29,112838934+00:00] Add metadata Recording base image digests used quay.io/jitesoft/nginx:latest quay.io/jitesoft/nginx:latest@sha256:543f0f328620772879e3bed47f5b2090c86da257e89dae0560866fe02d12acac Getting image source signatures Copying blob sha256:b431ed29c213c3983481ebac7a73e46bc4c57aa8a883d602b321fe3da5d3e187 Copying blob sha256:194b275abc2fc167b1e7d5138c7d621f22341c35a4cd61316338e159826f097d Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying blob sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e Copying blob sha256:45cae0c429a3dc5424ba58d0b2b7fd206d9ea8a1e4e7dcdced59fea655f57c96 Copying config sha256:e0b3a653aaa434dc9f5c6649b1b7f610a56bad4f9d7be53a67e513cf2146a1f9 Writing manifest to image destination [2026-03-16T09:41:29,535243487+00:00] End build pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | container step-push: [2026-03-16T09:41:29,982408144+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-03-16T09:41:32,226142543+00:00] Convert image [2026-03-16T09:41:32,227297862+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container [retry] executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 docker://quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container Getting image source signatures Copying blob sha256:45cae0c429a3dc5424ba58d0b2b7fd206d9ea8a1e4e7dcdced59fea655f57c96 Copying blob sha256:b431ed29c213c3983481ebac7a73e46bc4c57aa8a883d602b321fe3da5d3e187 Copying blob sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e Copying blob sha256:194b275abc2fc167b1e7d5138c7d621f22341c35a4cd61316338e159826f097d Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying config sha256:e0b3a653aaa434dc9f5c6649b1b7f610a56bad4f9d7be53a67e513cf2146a1f9 Writing manifest to image destination [2026-03-16T09:41:36,383293556+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 [retry] executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 docker://quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 Getting image source signatures Copying blob sha256:45cae0c429a3dc5424ba58d0b2b7fd206d9ea8a1e4e7dcdced59fea655f57c96 Copying blob sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e Copying blob sha256:194b275abc2fc167b1e7d5138c7d621f22341c35a4cd61316338e159826f097d Copying blob sha256:b431ed29c213c3983481ebac7a73e46bc4c57aa8a883d602b321fe3da5d3e187 Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying config sha256:e0b3a653aaa434dc9f5c6649b1b7f610a56bad4f9d7be53a67e513cf2146a1f9 Writing manifest to image destination sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 [retry] executing: kubectl get configmap cluster-config -n konflux-info -o json Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap) [2026-03-16T09:41:37,967456321+00:00] End push pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | container step-sbom-syft-generate: [2026-03-16T09:41:38,144222167+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2026-03-16T09:41:41,251316996+00:00] End sbom-syft-generate pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | container step-prepare-sboms: [2026-03-16T09:41:41,298746834+00:00] Prepare SBOM [2026-03-16T09:41:41,303086582+00:00] Generate SBOM with mobster Skipping SBOM validation 2026-03-16 09:41:43,010 [INFO] mobster.log: Logging level set to 20 2026-03-16 09:41:43,056 [INFO] mobster.oci: Fetching manifest for quay.io/jitesoft/nginx@sha256:543f0f328620772879e3bed47f5b2090c86da257e89dae0560866fe02d12acac 2026-03-16 09:41:46,184 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2026-03-16 09:41:46,184 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2026-03-16 09:41:46,184 [INFO] mobster.log: Contextual workflow completed in 3.13s 2026-03-16 09:41:46,195 [INFO] mobster.main: Exiting with code 0. [2026-03-16T09:41:46,252601953+00:00] End prepare-sboms pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-build-container-pod | container step-upload-sbom: [2026-03-16T09:41:46,413452534+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou Pushing sbom to registry [retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key '. Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0] to [quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:sha256-4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0.sbom] with mediaType [text/spdx+json]. quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:deed52cd33bedc45344959e1d846105d5db826e98ed5bcf8071a39aed9d9fef0 [2026-03-16T09:41:50,945765433+00:00] End upload-sbom pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clair-scan-pod | init container: prepare 2026/03/16 09:42:08 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clair-scan-pod | init container: place-scripts 2026/03/16 09:42:09 Decoded script /tekton/scripts/script-0-8q9gv 2026/03/16 09:42:09 Decoded script /tekton/scripts/script-1-qtz6v 2026/03/16 09:42:09 Decoded script /tekton/scripts/script-2-kfvq4 2026/03/16 09:42:09 Decoded script /tekton/scripts/script-3-8mqx6 pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clair-scan-pod | container step-get-image-manifests: Inspecting raw image manifest quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0. pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clair-scan-pod | container step-get-vulnerabilities: Running clair-action on amd64 image manifest... 2026-03-16T09:42:19Z INF matchers created component=libvuln/New matchers=[{"docs":"https://pkg.go.dev/github.com/quay/claircore/ruby","name":"ruby-gem"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/ubuntu","name":"ubuntu-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/java","name":"java-maven"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/photon","name":"photon"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/python","name":"python"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/debian","name":"debian-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/oracle","name":"oracle"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/suse","name":"suse"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel","name":"rhel"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/alpine","name":"alpine-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/aws","name":"aws-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/gobin","name":"gobin"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel/rhcc","name":"rhel-container-matcher"}] 2026-03-16T09:42:19Z INF libvuln initialized component=libvuln/New 2026-03-16T09:42:20Z INF registered configured scanners component=libindex/New 2026-03-16T09:42:20Z INF NewLayerScanner: constructing a new layer-scanner component=indexer.NewLayerScanner 2026-03-16T09:42:20Z INF index request start component=libindex/Libindex.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 2026-03-16T09:42:20Z INF starting scan component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 2026-03-16T09:42:20Z INF manifest to be scanned component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=CheckManifest 2026-03-16T09:42:20Z INF layers fetch start component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=FetchLayers 2026-03-16T09:42:21Z INF layers fetch success component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=FetchLayers 2026-03-16T09:42:21Z INF layers fetch done component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=FetchLayers 2026-03-16T09:42:21Z INF layers scan start component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=ScanLayers 2026-03-16T09:42:21Z INF layers scan done component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=ScanLayers 2026-03-16T09:42:21Z INF starting index manifest component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=IndexManifest 2026-03-16T09:42:21Z INF finishing scan component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=IndexFinished 2026-03-16T09:42:21Z INF manifest successfully scanned component=indexer/controller/Controller.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 state=IndexFinished 2026-03-16T09:42:21Z INF index request done component=libindex/Libindex.Index manifest=sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 { "manifest_hash": "sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0", "packages": { "1JHlDN09RHJl/n6/syZiWA==": { "id": "1JHlDN09RHJl/n6/syZiWA==", "name": "geoip", "version": "1.6.12-r6", "kind": "binary", "source": { "id": "", "name": "geoip", "version": "1.6.12-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "1SbJ+ySlKWDxDgIPEp+KeQ==": { "id": "1SbJ+ySlKWDxDgIPEp+KeQ==", "name": "ca-certificates", "version": "20251003-r0", "kind": "binary", "source": { "id": "", "name": "ca-certificates", "version": "20251003-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "20KL0W0hrBqqViRvcgc1Fg==": { "id": "20KL0W0hrBqqViRvcgc1Fg==", "name": "libuuid", "version": "2.41.2-r0", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.41.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "3CJXIrqkLy7LSZIC0Tvaeg==": { "id": "3CJXIrqkLy7LSZIC0Tvaeg==", "name": "libyuv", "version": "0.0.1887.20251502-r1", "kind": "binary", "source": { "id": "", "name": "libyuv", "version": "0.0.1887.20251502-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "3sBN651DB8W0iH7aFznZCg==": { "id": "3sBN651DB8W0iH7aFznZCg==", "name": "libxdmcp", "version": "1.1.5-r1", "kind": "binary", "source": { "id": "", "name": "libxdmcp", "version": "1.1.5-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "4BS4GwloVgpzJeTKVsjysA==": { "id": "4BS4GwloVgpzJeTKVsjysA==", "name": "zlib", "version": "1.3.1-r2", "kind": "binary", "source": { "id": "", "name": "zlib", "version": "1.3.1-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "4GIn8arn4clHnB3CFVLGWw==": { "id": "4GIn8arn4clHnB3CFVLGWw==", "name": "libjpeg-turbo", "version": "3.1.2-r0", "kind": "binary", "source": { "id": "", "name": "libjpeg-turbo", "version": "3.1.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "5WvIf7JQsCvOLvoK87EAhQ==": { "id": "5WvIf7JQsCvOLvoK87EAhQ==", "name": "ssl_client", "version": "1.37.0-r30", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r30", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "5x1ZY2a3uHOEvliX+OVtug==": { "id": "5x1ZY2a3uHOEvliX+OVtug==", "name": "libmd", "version": "1.1.0-r0", "kind": "binary", "source": { "id": "", "name": "libmd", "version": "1.1.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6b3DIgebYUsp8nz0j7l/5g==": { "id": "6b3DIgebYUsp8nz0j7l/5g==", "name": "libapk", "version": "3.0.3-r1", "kind": "binary", "source": { "id": "", "name": "apk-tools", "version": "3.0.3-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6lTLCltLqryTaSTclKgihA==": { "id": "6lTLCltLqryTaSTclKgihA==", "name": "pcre", "version": "8.45-r4", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.45-r4", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6rE8rAncxg+34MOZHCkkeQ==": { "id": "6rE8rAncxg+34MOZHCkkeQ==", "name": "libx11", "version": "1.8.12-r1", "kind": "binary", "source": { "id": "", "name": "libx11", "version": "1.8.12-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "9sXDXt2HMrPE6BwItL52OQ==": { "id": "9sXDXt2HMrPE6BwItL52OQ==", "name": "libbsd", "version": "0.12.2-r0", "kind": "binary", "source": { "id": "", "name": "libbsd", "version": "0.12.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "A+hqm1SkTquUotiJOA3OYQ==": { "id": "A+hqm1SkTquUotiJOA3OYQ==", "name": "brotli-libs", "version": "1.2.0-r0", "kind": "binary", "source": { "id": "", "name": "brotli", "version": "1.2.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AMDDysdln4E3fw80+reHoA==": { "id": "AMDDysdln4E3fw80+reHoA==", "name": "scanelf", "version": "1.3.8-r2", "kind": "binary", "source": { "id": "", "name": "pax-utils", "version": "1.3.8-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AbyA5OH1Kjwc+ffl6y2WFw==": { "id": "AbyA5OH1Kjwc+ffl6y2WFw==", "name": "libgd", "version": "2.3.3-r10", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.3-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AdhvXsue2sTbURKW4+5W2A==": { "id": "AdhvXsue2sTbURKW4+5W2A==", "name": "libice", "version": "1.1.2-r0", "kind": "binary", "source": { "id": "", "name": "libice", "version": "1.1.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AjtWFuX5NbHF/WyTvfoqgg==": { "id": "AjtWFuX5NbHF/WyTvfoqgg==", "name": "busybox-binsh", "version": "1.37.0-r30", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r30", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Dtwtac6pdDnw+oUNU8iY3w==": { "id": "Dtwtac6pdDnw+oUNU8iY3w==", "name": "musl-utils", "version": "1.2.5-r21", "kind": "binary", "source": { "id": "", "name": "musl", "version": "1.2.5-r21", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "FUDo4NNyQFLTi2SqF7lH1Q==": { "id": "FUDo4NNyQFLTi2SqF7lH1Q==", "name": "fontconfig", "version": "2.17.1-r0", "kind": "binary", "source": { "id": "", "name": "fontconfig", "version": "2.17.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "FwKg6L5pgd6iX3xGWQLASA==": { "id": "FwKg6L5pgd6iX3xGWQLASA==", "name": "libxext", "version": "1.3.6-r2", "kind": "binary", "source": { "id": "", "name": "libxext", "version": "1.3.6-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "GJnXxKHScND/ZbStBkKPRA==": { "id": "GJnXxKHScND/ZbStBkKPRA==", "name": "gd", "version": "2.3.3-r10", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.3-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "GRzWMFojXF+6NWGXYC7qoQ==": { "id": "GRzWMFojXF+6NWGXYC7qoQ==", "name": "libsm", "version": "1.2.6-r0", "kind": "binary", "source": { "id": "", "name": "libsm", "version": "1.2.6-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Gjo4GjcjWTs47gF+4pnjPw==": { "id": "Gjo4GjcjWTs47gF+4pnjPw==", "name": "tiff", "version": "4.7.1-r0", "kind": "binary", "source": { "id": "", "name": "tiff", "version": "4.7.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "JRTV1UG65MiQX+rl+R09Wg==": { "id": "JRTV1UG65MiQX+rl+R09Wg==", "name": "alpine-baselayout", "version": "3.7.1-r8", "kind": "binary", "source": { "id": "", "name": "alpine-baselayout", "version": "3.7.1-r8", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "KFAUGuhc9ZIyYWxz7PbfbA==": { "id": "KFAUGuhc9ZIyYWxz7PbfbA==", "name": "ca-certificates-bundle", "version": "20251003-r0", "kind": "binary", "source": { "id": "", "name": "ca-certificates", "version": "20251003-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "LKCfp7WoOhJT3ViFUz8mtg==": { "id": "LKCfp7WoOhJT3ViFUz8mtg==", "name": "musl", "version": "1.2.5-r21", "kind": "binary", "source": { "id": "", "name": "musl", "version": "1.2.5-r21", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "LZ9p0XaGrNPir9isAfIpMw==": { "id": "LZ9p0XaGrNPir9isAfIpMw==", "name": "alpine-release", "version": "3.23.3-r0", "kind": "binary", "source": { "id": "", "name": "alpine-base", "version": "3.23.3-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "LhzvTdrf+0rfQxqUBuIrtA==": { "id": "LhzvTdrf+0rfQxqUBuIrtA==", "name": "libavif", "version": "1.3.0-r0", "kind": "binary", "source": { "id": "", "name": "libavif", "version": "1.3.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "MwhswvIAo/Wa8B6XxOq7Gw==": { "id": "MwhswvIAo/Wa8B6XxOq7Gw==", "name": "busybox", "version": "1.37.0-r30", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r30", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "NRDJF1mRIco5uGk65P9KDw==": { "id": "NRDJF1mRIco5uGk65P9KDw==", "name": "libwebp", "version": "1.6.0-r0", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.6.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "NYv5d6XZqZgs/Fs2skNBAA==": { "id": "NYv5d6XZqZgs/Fs2skNBAA==", "name": "libxau", "version": "1.0.12-r0", "kind": "binary", "source": { "id": "", "name": "libxau", "version": "1.0.12-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "REAYLmtH9o9vWv97+6TqPA==": { "id": "REAYLmtH9o9vWv97+6TqPA==", "name": "openssl", "version": "3.5.5-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "U7aLkdHIhGSTfXJmfwfymA==": { "id": "U7aLkdHIhGSTfXJmfwfymA==", "name": "libssl3", "version": "3.5.5-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "UtTtKqlFuOtQ+Y0/FOYI4w==": { "id": "UtTtKqlFuOtQ+Y0/FOYI4w==", "name": "apk-tools", "version": "3.0.3-r1", "kind": "binary", "source": { "id": "", "name": "apk-tools", "version": "3.0.3-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "V4nbf41YvJN3nHT1LMFdRQ==": { "id": "V4nbf41YvJN3nHT1LMFdRQ==", "name": "libxslt", "version": "1.1.43-r3", "kind": "binary", "source": { "id": "", "name": "libxslt", "version": "1.1.43-r3", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Y5xVaKThvoJ+Wm0kWuE3gg==": { "id": "Y5xVaKThvoJ+Wm0kWuE3gg==", "name": "libxpm", "version": "3.5.17-r0", "kind": "binary", "source": { "id": "", "name": "libxpm", "version": "3.5.17-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "YinGk8lWmyYmzWo489O7Jg==": { "id": "YinGk8lWmyYmzWo489O7Jg==", "name": "aom-libs", "version": "3.13.1-r1", "kind": "binary", "source": { "id": "", "name": "aom", "version": "3.13.1-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "ZEt8sKQkMkSKlniBOF7I7Q==": { "id": "ZEt8sKQkMkSKlniBOF7I7Q==", "name": "libpng", "version": "1.6.55-r0", "kind": "binary", "source": { "id": "", "name": "libpng", "version": "1.6.55-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "c+w1t1D9vC/ykhbHwbJp6Q==": { "id": "c+w1t1D9vC/ykhbHwbJp6Q==", "name": "alpine-baselayout-data", "version": "3.7.1-r8", "kind": "binary", "source": { "id": "", "name": "alpine-baselayout", "version": "3.7.1-r8", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "dlZ5TrRmtTSzjs44dDQEkg==": { "id": "dlZ5TrRmtTSzjs44dDQEkg==", "name": "zstd-libs", "version": "1.5.7-r2", "kind": "binary", "source": { "id": "", "name": "zstd", "version": "1.5.7-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "gxB+wC2hwW0t1ImFW9L+WA==": { "id": "gxB+wC2hwW0t1ImFW9L+WA==", "name": "libsharpyuv", "version": "1.6.0-r0", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.6.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "hn6SxVA1vxeb+7Pqe7KBmA==": { "id": "hn6SxVA1vxeb+7Pqe7KBmA==", "name": "libxt", "version": "1.3.1-r0", "kind": "binary", "source": { "id": "", "name": "libxt", "version": "1.3.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "j0/3DJwDD3os1JMaEBTVqA==": { "id": "j0/3DJwDD3os1JMaEBTVqA==", "name": "libdav1d", "version": "1.5.2-r0", "kind": "binary", "source": { "id": "", "name": "dav1d", "version": "1.5.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "lVuw7kGI/WysgthsdUbxdg==": { "id": "lVuw7kGI/WysgthsdUbxdg==", "name": "libxml2", "version": "2.13.9-r0", "kind": "binary", "source": { "id": "", "name": "libxml2", "version": "2.13.9-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "nWndTLxXL6a93pH3P2iSDQ==": { "id": "nWndTLxXL6a93pH3P2iSDQ==", "name": "libgcc", "version": "15.2.0-r2", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "15.2.0-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "pMHpLK1yyJwKkuc+0/WuNw==": { "id": "pMHpLK1yyJwKkuc+0/WuNw==", "name": "freetype", "version": "2.14.1-r0", "kind": "binary", "source": { "id": "", "name": "freetype", "version": "2.14.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "rtEQZRr0L2tNrD0xLWTObQ==": { "id": "rtEQZRr0L2tNrD0xLWTObQ==", "name": ".runtime-deps", "version": "20260310.201401", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "noarch", "cpe": "" }, "ssss5C1R3lXph1KM06sMlg==": { "id": "ssss5C1R3lXph1KM06sMlg==", "name": "libbz2", "version": "1.0.8-r6", "kind": "binary", "source": { "id": "", "name": "bzip2", "version": "1.0.8-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "v6iFZ/ugzwHn84JlcvuoPA==": { "id": "v6iFZ/ugzwHn84JlcvuoPA==", "name": "xz-libs", "version": "5.8.2-r0", "kind": "binary", "source": { "id": "", "name": "xz", "version": "5.8.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "vq1mfGzPf/wv9jrP8bGUfQ==": { "id": "vq1mfGzPf/wv9jrP8bGUfQ==", "name": "libxcb", "version": "1.17.0-r1", "kind": "binary", "source": { "id": "", "name": "libxcb", "version": "1.17.0-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "whN4uwCMvKlNMZ0Xhf9/MQ==": { "id": "whN4uwCMvKlNMZ0Xhf9/MQ==", "name": "libcrypto3", "version": "3.5.5-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "y9AsnNEg9koPQGRNR+GKHA==": { "id": "y9AsnNEg9koPQGRNR+GKHA==", "name": "alpine-keys", "version": "2.6-r0", "kind": "binary", "source": { "id": "", "name": "alpine-keys", "version": "2.6-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "zMNDqbj6Me7c5DW7Javy7A==": { "id": "zMNDqbj6Me7c5DW7Javy7A==", "name": "libexpat", "version": "2.7.4-r0", "kind": "binary", "source": { "id": "", "name": "expat", "version": "2.7.4-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "zUlXasRWE0K54wcCR+MgQw==": { "id": "zUlXasRWE0K54wcCR+MgQw==", "name": "perl", "version": "5.42.0-r0", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.42.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "zr5o12yQE2YepPJb382K0A==": { "id": "zr5o12yQE2YepPJb382K0A==", "name": "libstdc++", "version": "15.2.0-r2", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "15.2.0-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" } }, "distributions": { "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb": { "id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "did": "alpine", "name": "Alpine Linux", "version": "3.23", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" } }, "repository": {}, "environments": { "1JHlDN09RHJl/n6/syZiWA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "1SbJ+ySlKWDxDgIPEp+KeQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "20KL0W0hrBqqViRvcgc1Fg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "3CJXIrqkLy7LSZIC0Tvaeg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "3sBN651DB8W0iH7aFznZCg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "4BS4GwloVgpzJeTKVsjysA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "4GIn8arn4clHnB3CFVLGWw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "5WvIf7JQsCvOLvoK87EAhQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "5x1ZY2a3uHOEvliX+OVtug==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "6b3DIgebYUsp8nz0j7l/5g==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "6lTLCltLqryTaSTclKgihA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "6rE8rAncxg+34MOZHCkkeQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "9sXDXt2HMrPE6BwItL52OQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "A+hqm1SkTquUotiJOA3OYQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "AMDDysdln4E3fw80+reHoA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "AbyA5OH1Kjwc+ffl6y2WFw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "AdhvXsue2sTbURKW4+5W2A==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "AjtWFuX5NbHF/WyTvfoqgg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "Dtwtac6pdDnw+oUNU8iY3w==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "FUDo4NNyQFLTi2SqF7lH1Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "FwKg6L5pgd6iX3xGWQLASA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "GJnXxKHScND/ZbStBkKPRA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "GRzWMFojXF+6NWGXYC7qoQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "Gjo4GjcjWTs47gF+4pnjPw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "JRTV1UG65MiQX+rl+R09Wg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "KFAUGuhc9ZIyYWxz7PbfbA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "LKCfp7WoOhJT3ViFUz8mtg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "LZ9p0XaGrNPir9isAfIpMw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "LhzvTdrf+0rfQxqUBuIrtA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "MwhswvIAo/Wa8B6XxOq7Gw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "NRDJF1mRIco5uGk65P9KDw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "NYv5d6XZqZgs/Fs2skNBAA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "REAYLmtH9o9vWv97+6TqPA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "U7aLkdHIhGSTfXJmfwfymA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "UtTtKqlFuOtQ+Y0/FOYI4w==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "V4nbf41YvJN3nHT1LMFdRQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "Y5xVaKThvoJ+Wm0kWuE3gg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "YinGk8lWmyYmzWo489O7Jg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "ZEt8sKQkMkSKlniBOF7I7Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "c+w1t1D9vC/ykhbHwbJp6Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "dlZ5TrRmtTSzjs44dDQEkg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "gxB+wC2hwW0t1ImFW9L+WA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "hn6SxVA1vxeb+7Pqe7KBmA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "j0/3DJwDD3os1JMaEBTVqA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "lVuw7kGI/WysgthsdUbxdg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "nWndTLxXL6a93pH3P2iSDQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "pMHpLK1yyJwKkuc+0/WuNw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "rtEQZRr0L2tNrD0xLWTObQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "ssss5C1R3lXph1KM06sMlg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "v6iFZ/ugzwHn84JlcvuoPA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "vq1mfGzPf/wv9jrP8bGUfQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "whN4uwCMvKlNMZ0Xhf9/MQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "y9AsnNEg9koPQGRNR+GKHA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "zMNDqbj6Me7c5DW7Javy7A==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "zUlXasRWE0K54wcCR+MgQw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ], "zr5o12yQE2YepPJb382K0A==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:2b212bad0b689c6057c80770cca97bf2cd44ee33fa1efc6ebb24c92a5d56fcab", "distribution_id": "22d5c1a9-a76b-4ad5-b7c3-94ced87bddcb", "repository_ids": null } ] }, "vulnerabilities": { "UVCBofm+ODDjIfLQtvFKtg==": { "id": "UVCBofm+ODDjIfLQtvFKtg==", "updater": "alpine-main-v3.23-updater", "name": "CVE-2026-27171", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2026-27171", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "zlib", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.23", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" }, "repository": { "cpe": "" }, "fixed_in_version": "1.3.2-r0" }, "w53yA/YljYhaLAhmVtNe4Q==": { "id": "w53yA/YljYhaLAhmVtNe4Q==", "updater": "alpine-main-v3.23-updater", "name": "CVE-2026-22184", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2026-22184", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "zlib", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.23", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" }, "repository": { "cpe": "" }, "fixed_in_version": "1.3.2-r0" } }, "package_vulnerabilities": { "4BS4GwloVgpzJeTKVsjysA==": [ "w53yA/YljYhaLAhmVtNe4Q==", "UVCBofm+ODDjIfLQtvFKtg==" ] }, "enrichments": {} } pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clair-scan-pod | container step-oci-attach-report: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou Attaching clair-report-amd64.json to quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 Executing: oras attach --no-tty --format go-template={{.digest}} --registry-config /home/oras/auth.json --artifact-type application/vnd.redhat.clair-report+json quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 clair-report-amd64.json:application/vnd.redhat.clair-report+json pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clair-scan-pod | container step-conftest-vulnerabilities: [ { "filename": "/tekton/home/clair-result-amd64.json", "namespace": "required_checks", "successes": 10 } ] {"vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0}} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09", "digests": ["sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0"]}} {"result":"SUCCESS","timestamp":"2026-03-16T09:42:27+00:00","note":"Task clair-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by Clair.","namespace":"default","successes":0,"failures":0,"warnings":0} pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clamav-scan-pod | init container: prepare 2026/03/16 09:42:19 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clamav-scan-pod | init container: place-scripts 2026/03/16 09:42:21 Decoded script /tekton/scripts/script-0-pzv8b 2026/03/16 09:42:21 Decoded script /tekton/scripts/script-1-mrnxr pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clamav-scan-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Detecting artifact type for quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0. Detected container image. Processing image manifests. Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 2.867 sec (0 m 2 s) Start Date: 2026:03:16 09:42:37 End Date: 2026:03:16 09:42:40 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27941/Sun Mar 15 06:24:08 2026 Database version: 27941 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1773654160","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1773654160","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1773654160","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09", "digests": ["sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0"]}} pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clamav-scan-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou Attaching to quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploading 42f7ff9808fd clamscan-ec-test-amd64.json Uploading 9130fda98a74 clamscan-result-amd64.log Uploaded 42f7ff9808fd clamscan-ec-test-amd64.json Uploaded 9130fda98a74 clamscan-result-amd64.log Uploading f4d7727f59c0 application/vnd.oci.image.manifest.v1+json Uploaded f4d7727f59c0 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 Digest: sha256:f4d7727f59c0d516a07dff6b91603add008d20ff5404ae2c292f8b9a69f4d159 pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clone-repository-pod | init container: prepare 2026/03/16 09:41:01 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clone-repository-pod | init container: place-scripts 2026/03/16 09:41:01 Decoded script /tekton/scripts/script-0-2rhhg 2026/03/16 09:41:01 Decoded script /tekton/scripts/script-1-c9f7b pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clone-repository-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1773654064.799534,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1773654065.1709144,"caller":"git/git.go:223","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/devfile-sample-hello-world-sbeqsy @ 8f9f67feec4f468d93a25c48c6ad0904bfe44b09 (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1773654065.1709623,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1773654065.198465,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision 8f9f67feec4f468d93a25c48c6ad0904bfe44b09 directly. pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-clone-repository-pod | container step-symlink-check: Running symlink check pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-init-pod | init container: prepare 2026/03/16 09:40:56 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-init-pod | container step-init: time="2026-03-16T09:40:59Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-03-16T09:40:59Z" level=info msg="[param] ENABLE: false" time="2026-03-16T09:40:59Z" level=info msg="[param] DEFAULT HTTP PROXY: squid.caching.svc.cluster.local:3128" time="2026-03-16T09:40:59Z" level=info msg="[param] DEFAULT NO PROXY: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-03-16T09:40:59Z" level=info msg="[param] HTTP PROXY RESULT PATH: /tekton/results/http-proxy" time="2026-03-16T09:40:59Z" level=info msg="[param] NO PROXY RESULT PATH: /tekton/results/no-proxy" time="2026-03-16T09:40:59Z" level=info msg="Cache proxy is disabled in param or in backend" time="2026-03-16T09:40:59Z" level=info msg="[result] HTTP PROXY: " time="2026-03-16T09:40:59Z" level=info msg="[result] NO PROXY: " pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-push-dockerfile-pod | init container: prepare 2026/03/16 09:42:19 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-push-dockerfile-pod | init container: working-dir-initializer pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-push-dockerfile-pod | container step-push: time="2026-03-16T09:42:24Z" level=info msg="[param] Image URL: quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09" time="2026-03-16T09:42:24Z" level=info msg="[param] Image digest: sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0" time="2026-03-16T09:42:24Z" level=info msg="[param] Tag suffix: .dockerfile" time="2026-03-16T09:42:24Z" level=info msg="[param] Containerfile: docker/Dockerfile" time="2026-03-16T09:42:24Z" level=info msg="[param] Context: ." time="2026-03-16T09:42:24Z" level=info msg="[param] Artifact type: application/vnd.konflux.dockerfile" time="2026-03-16T09:42:24Z" level=info msg="[param] Source directory: source" time="2026-03-16T09:42:24Z" level=info msg="[param] Image Reference result file: /tekton/results/IMAGE_REF" time="2026-03-16T09:42:24Z" level=info msg="[param] Alternative file name: Dockerfile" time="2026-03-16T09:42:24Z" level=info msg="oras [stdout] quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:e37877ca9c1b578cdb87a2271eea71f34ceb805dd42c260febd7d40878112ebc" logger=CliExecutor time="2026-03-16T09:42:24Z" level=info msg="Containerfile '/workspace/workspace/source/docker/Dockerfile' is pushed to registry with tag: sha256-4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0.dockerfile" {"image_ref":"quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou@sha256:e37877ca9c1b578cdb87a2271eea71f34ceb805dd42c260febd7d40878112ebc"} pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-shell-check-pod | init container: prepare 2026/03/16 09:42:16 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-shell-check-pod | init container: place-scripts 2026/03/16 09:42:17 Decoded script /tekton/scripts/script-0-tw66c 2026/03/16 09:42:17 Decoded script /tekton/scripts/script-1-ztk25 pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-shell-check-pod | init container: working-dir-initializer pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-shell-check-pod | container step-sast-shell-check: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=gh-test-custom-branch-ttgjou + echo 'INFO: The PROJECT_NAME used is: gh-test-custom-branch-ttgjou' + ca_bundle=/mnt/trusted-ca/ca-bundle.crt INFO: The PROJECT_NAME used is: gh-test-custom-branch-ttgjou + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust ++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck + PACKAGE_VERSION=ShellCheck-0.10.0-3.el9 + OUTPUT_FILE=shellcheck-results.json + SOURCE_CODE_DIR=/workspace/workspace/source + declare -a ALL_TARGETS + IFS=, + read -ra TARGET_ARRAY + for d in "${TARGET_ARRAY[@]}" + potential_path=/workspace/workspace/source/. ++ realpath -m /workspace/workspace/source/. + resolved_path=/workspace/workspace/source + [[ /workspace/workspace/source == \/\w\o\r\k\s\p\a\c\e\/\w\o\r\k\s\p\a\c\e\/\s\o\u\r\c\e* ]] + ALL_TARGETS+=("$resolved_path") + '[' -z '' ']' + '[' -r /sys/fs/cgroup/cpu.max ']' + read -r quota period + '[' 800000 '!=' max ']' + '[' -n 100000 ']' + '[' 100000 -gt 0 ']' + export SC_JOBS=8 + SC_JOBS=8 + echo 'INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh' INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh + /usr/share/csmock/scripts/run-shellcheck.sh /workspace/workspace/source Looking for shell scripts................ done + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/applypatch-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/post-update.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/prepare-commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-applypatch.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-merge-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-push.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-rebase.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-receive.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/push-to-checkout.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/sendemail-validate.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/update.sample + CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}") + [[ true == \t\r\u\e ]] + CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|' + CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|' + CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$' + CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER") + csgrep --mode=json --strip-path-prefix=/workspace/workspace/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-117.json ./shellcheck-results/sc-127.json ./shellcheck-results/sc-128.json ./shellcheck-results/sc-142.json ./shellcheck-results/sc-84.json ./shellcheck-results/sc-87.json ./shellcheck-results/sc-88.json ./shellcheck-results/sc-90.json ./shellcheck-results/sc-93.json ./shellcheck-results/sc-97.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered + echo 'ShellCheck results have been saved to shellcheck-results.json' + csgrep --mode=evtstat shellcheck-results.json ShellCheck results have been saved to shellcheck-results.json + csgrep --mode=sarif shellcheck-results.json + TEST_OUTPUT= + parse_test_output sast-shell-check sarif shellcheck-results.sarif + TEST_NAME=sast-shell-check + TEST_RESULT_FORMAT=sarif + TEST_RESULT_FILE=shellcheck-results.sarif + '[' -z sast-shell-check ']' + '[' -z sarif ']' + '[' -z shellcheck-results.sarif ']' + '[' '!' -f shellcheck-results.sarif ']' + '[' sarif = sarif ']' +++ jq -rce '(if (.runs[].results | length > 0) then "FAILURE" else "SUCCESS" end)' shellcheck-results.sarif +++ jq -rce '(.runs[].results | length)' shellcheck-results.sarif ++ make_result_json -r SUCCESS -f 0 ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ FAILURES=0 ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-03-16T09:42:24+00:00 --arg result SUCCESS --arg note 'For details, check Tekton task log.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-03-16T09:42:24+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-03-16T09:42:24+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2026-03-16T09:42:24+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-03-16T09:42:24+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ jq .failures + '[' 0 -gt 0 ']' + echo '{"result":"SUCCESS","timestamp":"2026-03-16T09:42:24+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-03-16T09:42:24+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-shell-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou Attaching to quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 shellcheck-results.sarif:application/sarif+json Preparing shellcheck-results.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Exists 3b606a9dd3a1 shellcheck-results.sarif Uploading f6b08e148bb4 application/vnd.oci.image.manifest.v1+json Uploaded f6b08e148bb4 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-whzg/gh-test-custom-branch-ttgjou:8f9f67feec4f468d93a25c48c6ad0904bfe44b09@sha256:4fbb9bbb0615c18968bef7317274036a14ea7d88d397acd6f0c2f81159ae29f0 Digest: sha256:f6b08e148bb461d78cfec1ee7b97760736b61cca6c23e1d360354ab8cb3c711b No excluded-findings.json exists. Skipping upload. pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-snyk-check-pod | init container: prepare 2026/03/16 09:42:19 Entrypoint initialization pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-snyk-check-pod | init container: place-scripts 2026/03/16 09:42:22 Decoded script /tekton/scripts/script-0-76dzj 2026/03/16 09:42:22 Decoded script /tekton/scripts/script-1-5dg9z pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-snyk-check-pod | init container: working-dir-initializer pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-snyk-check-pod | container step-sast-snyk-check: INFO: The PROJECT_NAME used is: gh-test-custom-branch-ttgjou INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' {"result":"SKIPPED","timestamp":"2026-03-16T09:42:27+00:00","note":"Task sast-snyk-check skipped: If you wish to use the Snyk code SAST task, please create a secret name snyk-secret with the key 'snyk_token' containing the Snyk token by following the steps given [here](https://konflux-ci.dev/docs/testing/build/snyk/)","namespace":"default","successes":0,"failures":0,"warnings":0} pod: gh-test-custom-branch-ttgjou-on-push-cdjnx-sast-snyk-check-pod | container step-upload: No sast_snyk_check_out.sarif exists. Skipping upload. No excluded-findings.json exists. Skipping upload.