pod: gl-test-custom-branch-fsinbd-on-pull-request-56v2r-init-pod | init container: prepare 2026/04/04 08:06:07 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-pull-request-56v2r-init-pod | container step-init: time="2026-04-04T08:06:09Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-04-04T08:06:09Z" level=info msg="[param] ENABLE: false" time="2026-04-04T08:06:09Z" level=info msg="[param] DEFAULT HTTP PROXY: squid.caching.svc.cluster.local:3128" time="2026-04-04T08:06:09Z" level=info msg="[param] DEFAULT NO PROXY: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-04-04T08:06:09Z" level=info msg="[param] HTTP PROXY RESULT PATH: /tekton/results/http-proxy" time="2026-04-04T08:06:09Z" level=info msg="[param] NO PROXY RESULT PATH: /tekton/results/no-proxy" time="2026-04-04T08:06:09Z" level=info msg="Cache proxy is disabled in param or in backend" time="2026-04-04T08:06:09Z" level=info msg="[result] HTTP PROXY: " time="2026-04-04T08:06:09Z" level=info msg="[result] NO PROXY: " pod: gl-test-custom-branch-fsinbd-on-pull-request-c5vrq-init-pod | init container: prepare 2026/04/04 08:11:04 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-pull-request-c5vrq-init-pod | container step-init: time="2026-04-04T08:11:06Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-04-04T08:11:06Z" level=info msg="[param] ENABLE: false" time="2026-04-04T08:11:06Z" level=info msg="[param] DEFAULT HTTP PROXY: squid.caching.svc.cluster.local:3128" time="2026-04-04T08:11:06Z" level=info msg="[param] DEFAULT NO PROXY: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-04-04T08:11:06Z" level=info msg="[param] HTTP PROXY RESULT PATH: /tekton/results/http-proxy" time="2026-04-04T08:11:06Z" level=info msg="[param] NO PROXY RESULT PATH: /tekton/results/no-proxy" time="2026-04-04T08:11:06Z" level=info msg="Cache proxy is disabled in param or in backend" time="2026-04-04T08:11:06Z" level=info msg="[result] HTTP PROXY: " time="2026-04-04T08:11:06Z" level=info msg="[result] NO PROXY: " pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-apply-tags-pod | init container: prepare 2026/04/04 08:14:31 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-apply-tags-pod | container step-apply-additional-tags: time="2026-04-04T08:14:35Z" level=info msg="[param] image-url: quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575" time="2026-04-04T08:14:35Z" level=info msg="[param] digest: sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21" time="2026-04-04T08:14:35Z" level=info msg="[param] tags-from-image-label: konflux.additional-tags" time="2026-04-04T08:14:37Z" level=info msg="Additional tags from 'konflux.additional-tags' image label: test-tag1, test-tag2" {"tags":["test-tag1","test-tag2"]} pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | init container: prepare 2026/04/04 08:13:29 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | init container: place-scripts 2026/04/04 08:13:30 Decoded script /tekton/scripts/script-0-znp9q 2026/04/04 08:13:30 Decoded script /tekton/scripts/script-1-w9c9w 2026/04/04 08:13:30 Decoded script /tekton/scripts/script-2-wcg47 2026/04/04 08:13:30 Decoded script /tekton/scripts/script-3-p6sld 2026/04/04 08:13:30 Decoded script /tekton/scripts/script-4-r6mxw pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | init container: working-dir-initializer pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | container step-build: [2026-04-04T08:13:34,525031916+00:00] Validate context path [2026-04-04T08:13:34,528791200+00:00] Update CA trust [2026-04-04T08:13:34,529987773+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-04-04T08:13:36,984236492+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2026-04-04T08:13:36,992441230+00:00] Prepare system (architecture: x86_64) [2026-04-04T08:13:37,025594943+00:00] Setup prefetched Trying to pull quay.io/jitesoft/nginx:latest... Getting image source signatures Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying blob sha256:3478266b4865f4efc58d163e64670ca678ab1de9918b00b890093f6426681f7b Copying blob sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153 Copying blob sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb Copying config sha256:706974d0abb10eb40ea6e819ce6b81d95bb090d79148838861fcddebb223942c Writing manifest to image destination [2026-04-04T08:13:39,541840913+00:00] Unsetting proxy { "com.jitesoft.app.alpine.version": "3.23.3", "com.jitesoft.app.nginx.version": "1.29.7", "com.jitesoft.build.arch": "amd64", "com.jitesoft.build.platform": "linux/amd64", "com.jitesoft.project.registry.uri": "registry.gitlab.com/jitesoft/dockerfiles/nginx", "com.jitesoft.project.repo.issues": "https://gitlab.com/jitesoft/dockerfiles/nginx/issues", "com.jitesoft.project.repo.type": "git", "com.jitesoft.project.repo.uri": "https://gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.alternative-locations": "oci://index.docker.io/jitesoft/nginx,oci://ghcr.io/jitesoft/nginx,oci://registry.gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.logo-url": "https://jitesoft.com/favicon-96x96.png", "io.artifacthub.package.readme-url": "https://gitlab.com/jitesoft/dockerfiles/nginx/-/raw/master/README.md", "maintainer": "Johannes Tegnér ", "maintainer.org": "Jitesoft", "maintainer.org.uri": "https://jitesoft.com", "org.opencontainers.image.created": "2026-04-04T08:13:37Z", "org.opencontainers.image.description": "Nginx on Alpine linux", "org.opencontainers.image.source": "https://gitlab.com/konflux-qe/devfile-sample-hello-world-jcmptl", "org.opencontainers.image.vendor": "Jitesoft", "org.opencontainers.image.version": "1.29.7", "architecture": "x86_64", "vcs-type": "git", "vcs-ref": "642b700b01121711be60df7e9d09e55bc3fe5575", "org.opencontainers.image.revision": "642b700b01121711be60df7e9d09e55bc3fe5575", "build-date": "2026-04-04T08:13:37Z", "io.buildah.version": "1.42.2", "konflux.additional-tags": "test-tag1, test-tag2" } [2026-04-04T08:13:39,585948554+00:00] Register sub-man Adding the entitlement to the build [2026-04-04T08:13:39,589414274+00:00] Add secrets [2026-04-04T08:13:39,605861877+00:00] Run buildah build [2026-04-04T08:13:39,607033771+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=642b700b01121711be60df7e9d09e55bc3fe5575 --label org.opencontainers.image.revision=642b700b01121711be60df7e9d09e55bc3fe5575 --label org.opencontainers.image.source=https://gitlab.com/konflux-qe/devfile-sample-hello-world-jcmptl --label build-date=2026-04-04T08:13:37Z --label org.opencontainers.image.created=2026-04-04T08:13:37Z --annotation org.opencontainers.image.revision=642b700b01121711be60df7e9d09e55bc3fe5575 --annotation org.opencontainers.image.source=https://gitlab.com/konflux-qe/devfile-sample-hello-world-jcmptl --annotation org.opencontainers.image.created=2026-04-04T08:13:37Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.iSLF3D -t quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 . STEP 1/6: FROM quay.io/jitesoft/nginx:latest STEP 2/6: ENV PORT="8080" STEP 3/6: LABEL konflux.additional-tags="test-tag1, test-tag2" STEP 4/6: COPY labels.json /usr/share/buildinfo/labels.json STEP 5/6: COPY labels.json /root/buildinfo/labels.json STEP 6/6: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="642b700b01121711be60df7e9d09e55bc3fe5575" "org.opencontainers.image.revision"="642b700b01121711be60df7e9d09e55bc3fe5575" "org.opencontainers.image.source"="https://gitlab.com/konflux-qe/devfile-sample-hello-world-jcmptl" "build-date"="2026-04-04T08:13:37Z" "org.opencontainers.image.created"="2026-04-04T08:13:37Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 time="2026-04-04T08:13:39Z" level=warning msg="HEALTHCHECK is not supported for OCI image format and will be ignored. Must use `docker` format" --> bdd3199542ea Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 bdd3199542eaf70e7488fe2be889cb6964e783121e383b15733847ad89c084b1 [2026-04-04T08:13:40,109949360+00:00] Unsetting proxy [2026-04-04T08:13:40,111266980+00:00] Add metadata Recording base image digests used quay.io/jitesoft/nginx:latest quay.io/jitesoft/nginx:latest@sha256:18c441c61111727a3e41fabd73745c778b208818f84b5d55d928ec3c94b8bfa1 Getting image source signatures Copying blob sha256:9f6515820121402f9e8ef2abbc715b184df22363e5490d145aa6dfa70f6fc9bd Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying blob sha256:23d0871c64c163c2c24ff164be468b4bd7af07afd2e22811be368693ce89cb74 Copying blob sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e Copying blob sha256:b431ed29c213c3983481ebac7a73e46bc4c57aa8a883d602b321fe3da5d3e187 Copying config sha256:bdd3199542eaf70e7488fe2be889cb6964e783121e383b15733847ad89c084b1 Writing manifest to image destination [2026-04-04T08:13:40,536333307+00:00] End build pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | container step-push: [2026-04-04T08:13:40,690487203+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2026-04-04T08:13:42,985593583+00:00] Convert image [2026-04-04T08:13:42,986843771+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container [retry] executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 docker://quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container Getting image source signatures Copying blob sha256:9f6515820121402f9e8ef2abbc715b184df22363e5490d145aa6dfa70f6fc9bd Copying blob sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e Copying blob sha256:23d0871c64c163c2c24ff164be468b4bd7af07afd2e22811be368693ce89cb74 Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying blob sha256:b431ed29c213c3983481ebac7a73e46bc4c57aa8a883d602b321fe3da5d3e187 Copying config sha256:bdd3199542eaf70e7488fe2be889cb6964e783121e383b15733847ad89c084b1 Writing manifest to image destination [2026-04-04T08:13:47,175089577+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 [retry] executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 docker://quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 Getting image source signatures Copying blob sha256:9f6515820121402f9e8ef2abbc715b184df22363e5490d145aa6dfa70f6fc9bd Copying blob sha256:989e799e634906e94dc9a5ee2ee26fc92ad260522990f26e707861a5f52bf64e Copying blob sha256:23d0871c64c163c2c24ff164be468b4bd7af07afd2e22811be368693ce89cb74 Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying blob sha256:b431ed29c213c3983481ebac7a73e46bc4c57aa8a883d602b321fe3da5d3e187 Copying config sha256:bdd3199542eaf70e7488fe2be889cb6964e783121e383b15733847ad89c084b1 Writing manifest to image destination sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 [retry] executing: kubectl get configmap cluster-config -n konflux-info -o json Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap) [2026-04-04T08:13:48,723385442+00:00] End push pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | container step-sbom-syft-generate: [2026-04-04T08:13:48,834745922+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2026-04-04T08:13:51,962883554+00:00] End sbom-syft-generate pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | container step-prepare-sboms: [2026-04-04T08:13:51,994613571+00:00] Prepare SBOM [2026-04-04T08:13:51,999492192+00:00] Generate SBOM with mobster Skipping SBOM validation 2026-04-04 08:13:53,725 [INFO] mobster.log: Logging level set to 20 2026-04-04 08:13:53,769 [INFO] mobster.oci: Fetching manifest for quay.io/jitesoft/nginx@sha256:18c441c61111727a3e41fabd73745c778b208818f84b5d55d928ec3c94b8bfa1 2026-04-04 08:13:55,392 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:13:56,001 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:13:57,220 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:13:57,815 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:13:59,081 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:13:59,665 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:14:00,922 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type spdxjson failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:14:01,479 [WARNING] mobster.oci.cosign.anonymous_fetcher: Cosign fetching attestation of type cyclonedx failed for quay.io/jitesoft/nginx@sha256:b4d728ce1726b1abfb0220efedc0762c9292e9dfca9c463d6e7919335dff540f with output b'Error: found no attestations\nerror during command execution: found no attestations\n' 2026-04-04 08:14:01,480 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2026-04-04 08:14:01,480 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2026-04-04 08:14:01,480 [INFO] mobster.log: Contextual workflow completed in 7.72s 2026-04-04 08:14:01,490 [INFO] mobster.main: Exiting with code 0. [2026-04-04T08:14:01,553418638+00:00] End prepare-sboms pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-build-container-pod | container step-upload-sbom: [2026-04-04T08:14:02,114594334+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd Pushing sbom to registry [retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key '. Uploading SBOM file for [quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21] to [quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:sha256-5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21.sbom] with mediaType [text/spdx+json]. quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd@sha256:9d1e0c1f90bfe098c35308d2b5950b77ec44544d1c60e08face0deb22e6794b0 [2026-04-04T08:14:06,309315314+00:00] End upload-sbom pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clair-scan-pod | init container: prepare 2026/04/04 08:14:22 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clair-scan-pod | init container: place-scripts 2026/04/04 08:14:23 Decoded script /tekton/scripts/script-0-xp82b 2026/04/04 08:14:24 Decoded script /tekton/scripts/script-1-g7kv4 2026/04/04 08:14:24 Decoded script /tekton/scripts/script-2-bk6n2 2026/04/04 08:14:24 Decoded script /tekton/scripts/script-3-7kr7k pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clair-scan-pod | container step-get-image-manifests: Inspecting raw image manifest quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21. pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clair-scan-pod | container step-get-vulnerabilities: Running clair-action on amd64 image manifest... 2026-04-04T08:14:40Z INF matchers created component=libvuln/New matchers=[{"docs":"https://pkg.go.dev/github.com/quay/claircore/ubuntu","name":"ubuntu-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel","name":"rhel"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/alpine","name":"alpine-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/aws","name":"aws-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/gobin","name":"gobin"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/python","name":"python"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/rhel/rhcc","name":"rhel-container-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/ruby","name":"ruby-gem"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/java","name":"java-maven"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/debian","name":"debian-matcher"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/oracle","name":"oracle"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/photon","name":"photon"},{"docs":"https://pkg.go.dev/github.com/quay/claircore/suse","name":"suse"}] 2026-04-04T08:14:40Z INF libvuln initialized component=libvuln/New 2026-04-04T08:14:41Z INF registered configured scanners component=libindex/New 2026-04-04T08:14:41Z INF NewLayerScanner: constructing a new layer-scanner component=indexer.NewLayerScanner 2026-04-04T08:14:42Z INF index request start component=libindex/Libindex.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 2026-04-04T08:14:42Z INF starting scan component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 2026-04-04T08:14:42Z INF manifest to be scanned component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=CheckManifest 2026-04-04T08:14:42Z INF layers fetch start component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=FetchLayers 2026-04-04T08:14:42Z INF layers fetch success component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=FetchLayers 2026-04-04T08:14:42Z INF layers fetch done component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=FetchLayers 2026-04-04T08:14:42Z INF layers scan start component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=ScanLayers 2026-04-04T08:14:42Z INF layers scan done component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=ScanLayers 2026-04-04T08:14:42Z INF starting index manifest component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=IndexManifest 2026-04-04T08:14:42Z INF finishing scan component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=IndexFinished 2026-04-04T08:14:42Z INF manifest successfully scanned component=indexer/controller/Controller.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 state=IndexFinished 2026-04-04T08:14:42Z INF index request done component=libindex/Libindex.Index manifest=sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 { "manifest_hash": "sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21", "packages": { "0K+bv90T/Ql3u1U6deAjEg==": { "id": "0K+bv90T/Ql3u1U6deAjEg==", "name": "perl", "version": "5.42.1-r0", "kind": "binary", "source": { "id": "", "name": "perl", "version": "5.42.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "1JHlDN09RHJl/n6/syZiWA==": { "id": "1JHlDN09RHJl/n6/syZiWA==", "name": "geoip", "version": "1.6.12-r6", "kind": "binary", "source": { "id": "", "name": "geoip", "version": "1.6.12-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "1SbJ+ySlKWDxDgIPEp+KeQ==": { "id": "1SbJ+ySlKWDxDgIPEp+KeQ==", "name": "ca-certificates", "version": "20251003-r0", "kind": "binary", "source": { "id": "", "name": "ca-certificates", "version": "20251003-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "20KL0W0hrBqqViRvcgc1Fg==": { "id": "20KL0W0hrBqqViRvcgc1Fg==", "name": "libuuid", "version": "2.41.2-r0", "kind": "binary", "source": { "id": "", "name": "util-linux", "version": "2.41.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "3CJXIrqkLy7LSZIC0Tvaeg==": { "id": "3CJXIrqkLy7LSZIC0Tvaeg==", "name": "libyuv", "version": "0.0.1887.20251502-r1", "kind": "binary", "source": { "id": "", "name": "libyuv", "version": "0.0.1887.20251502-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "3sBN651DB8W0iH7aFznZCg==": { "id": "3sBN651DB8W0iH7aFznZCg==", "name": "libxdmcp", "version": "1.1.5-r1", "kind": "binary", "source": { "id": "", "name": "libxdmcp", "version": "1.1.5-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "4BS4GwloVgpzJeTKVsjysA==": { "id": "4BS4GwloVgpzJeTKVsjysA==", "name": "zlib", "version": "1.3.1-r2", "kind": "binary", "source": { "id": "", "name": "zlib", "version": "1.3.1-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "4GIn8arn4clHnB3CFVLGWw==": { "id": "4GIn8arn4clHnB3CFVLGWw==", "name": "libjpeg-turbo", "version": "3.1.2-r0", "kind": "binary", "source": { "id": "", "name": "libjpeg-turbo", "version": "3.1.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "5WvIf7JQsCvOLvoK87EAhQ==": { "id": "5WvIf7JQsCvOLvoK87EAhQ==", "name": "ssl_client", "version": "1.37.0-r30", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r30", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "5x1ZY2a3uHOEvliX+OVtug==": { "id": "5x1ZY2a3uHOEvliX+OVtug==", "name": "libmd", "version": "1.1.0-r0", "kind": "binary", "source": { "id": "", "name": "libmd", "version": "1.1.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6b3DIgebYUsp8nz0j7l/5g==": { "id": "6b3DIgebYUsp8nz0j7l/5g==", "name": "libapk", "version": "3.0.3-r1", "kind": "binary", "source": { "id": "", "name": "apk-tools", "version": "3.0.3-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6lTLCltLqryTaSTclKgihA==": { "id": "6lTLCltLqryTaSTclKgihA==", "name": "pcre", "version": "8.45-r4", "kind": "binary", "source": { "id": "", "name": "pcre", "version": "8.45-r4", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "6rE8rAncxg+34MOZHCkkeQ==": { "id": "6rE8rAncxg+34MOZHCkkeQ==", "name": "libx11", "version": "1.8.12-r1", "kind": "binary", "source": { "id": "", "name": "libx11", "version": "1.8.12-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "9sXDXt2HMrPE6BwItL52OQ==": { "id": "9sXDXt2HMrPE6BwItL52OQ==", "name": "libbsd", "version": "0.12.2-r0", "kind": "binary", "source": { "id": "", "name": "libbsd", "version": "0.12.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "A+hqm1SkTquUotiJOA3OYQ==": { "id": "A+hqm1SkTquUotiJOA3OYQ==", "name": "brotli-libs", "version": "1.2.0-r0", "kind": "binary", "source": { "id": "", "name": "brotli", "version": "1.2.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AMDDysdln4E3fw80+reHoA==": { "id": "AMDDysdln4E3fw80+reHoA==", "name": "scanelf", "version": "1.3.8-r2", "kind": "binary", "source": { "id": "", "name": "pax-utils", "version": "1.3.8-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AbyA5OH1Kjwc+ffl6y2WFw==": { "id": "AbyA5OH1Kjwc+ffl6y2WFw==", "name": "libgd", "version": "2.3.3-r10", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.3-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AdhvXsue2sTbURKW4+5W2A==": { "id": "AdhvXsue2sTbURKW4+5W2A==", "name": "libice", "version": "1.1.2-r0", "kind": "binary", "source": { "id": "", "name": "libice", "version": "1.1.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "AjtWFuX5NbHF/WyTvfoqgg==": { "id": "AjtWFuX5NbHF/WyTvfoqgg==", "name": "busybox-binsh", "version": "1.37.0-r30", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r30", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Dtwtac6pdDnw+oUNU8iY3w==": { "id": "Dtwtac6pdDnw+oUNU8iY3w==", "name": "musl-utils", "version": "1.2.5-r21", "kind": "binary", "source": { "id": "", "name": "musl", "version": "1.2.5-r21", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "FUDo4NNyQFLTi2SqF7lH1Q==": { "id": "FUDo4NNyQFLTi2SqF7lH1Q==", "name": "fontconfig", "version": "2.17.1-r0", "kind": "binary", "source": { "id": "", "name": "fontconfig", "version": "2.17.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "FwKg6L5pgd6iX3xGWQLASA==": { "id": "FwKg6L5pgd6iX3xGWQLASA==", "name": "libxext", "version": "1.3.6-r2", "kind": "binary", "source": { "id": "", "name": "libxext", "version": "1.3.6-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "GJnXxKHScND/ZbStBkKPRA==": { "id": "GJnXxKHScND/ZbStBkKPRA==", "name": "gd", "version": "2.3.3-r10", "kind": "binary", "source": { "id": "", "name": "gd", "version": "2.3.3-r10", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "GRzWMFojXF+6NWGXYC7qoQ==": { "id": "GRzWMFojXF+6NWGXYC7qoQ==", "name": "libsm", "version": "1.2.6-r0", "kind": "binary", "source": { "id": "", "name": "libsm", "version": "1.2.6-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Gjo4GjcjWTs47gF+4pnjPw==": { "id": "Gjo4GjcjWTs47gF+4pnjPw==", "name": "tiff", "version": "4.7.1-r0", "kind": "binary", "source": { "id": "", "name": "tiff", "version": "4.7.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "JRTV1UG65MiQX+rl+R09Wg==": { "id": "JRTV1UG65MiQX+rl+R09Wg==", "name": "alpine-baselayout", "version": "3.7.1-r8", "kind": "binary", "source": { "id": "", "name": "alpine-baselayout", "version": "3.7.1-r8", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "KFAUGuhc9ZIyYWxz7PbfbA==": { "id": "KFAUGuhc9ZIyYWxz7PbfbA==", "name": "ca-certificates-bundle", "version": "20251003-r0", "kind": "binary", "source": { "id": "", "name": "ca-certificates", "version": "20251003-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "LKCfp7WoOhJT3ViFUz8mtg==": { "id": "LKCfp7WoOhJT3ViFUz8mtg==", "name": "musl", "version": "1.2.5-r21", "kind": "binary", "source": { "id": "", "name": "musl", "version": "1.2.5-r21", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "LZ9p0XaGrNPir9isAfIpMw==": { "id": "LZ9p0XaGrNPir9isAfIpMw==", "name": "alpine-release", "version": "3.23.3-r0", "kind": "binary", "source": { "id": "", "name": "alpine-base", "version": "3.23.3-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "LhzvTdrf+0rfQxqUBuIrtA==": { "id": "LhzvTdrf+0rfQxqUBuIrtA==", "name": "libavif", "version": "1.3.0-r0", "kind": "binary", "source": { "id": "", "name": "libavif", "version": "1.3.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "MwhswvIAo/Wa8B6XxOq7Gw==": { "id": "MwhswvIAo/Wa8B6XxOq7Gw==", "name": "busybox", "version": "1.37.0-r30", "kind": "binary", "source": { "id": "", "name": "busybox", "version": "1.37.0-r30", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "NRDJF1mRIco5uGk65P9KDw==": { "id": "NRDJF1mRIco5uGk65P9KDw==", "name": "libwebp", "version": "1.6.0-r0", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.6.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "NYv5d6XZqZgs/Fs2skNBAA==": { "id": "NYv5d6XZqZgs/Fs2skNBAA==", "name": "libxau", "version": "1.0.12-r0", "kind": "binary", "source": { "id": "", "name": "libxau", "version": "1.0.12-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "REAYLmtH9o9vWv97+6TqPA==": { "id": "REAYLmtH9o9vWv97+6TqPA==", "name": "openssl", "version": "3.5.5-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "U7aLkdHIhGSTfXJmfwfymA==": { "id": "U7aLkdHIhGSTfXJmfwfymA==", "name": "libssl3", "version": "3.5.5-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "UtTtKqlFuOtQ+Y0/FOYI4w==": { "id": "UtTtKqlFuOtQ+Y0/FOYI4w==", "name": "apk-tools", "version": "3.0.3-r1", "kind": "binary", "source": { "id": "", "name": "apk-tools", "version": "3.0.3-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "V4nbf41YvJN3nHT1LMFdRQ==": { "id": "V4nbf41YvJN3nHT1LMFdRQ==", "name": "libxslt", "version": "1.1.43-r3", "kind": "binary", "source": { "id": "", "name": "libxslt", "version": "1.1.43-r3", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "Y5xVaKThvoJ+Wm0kWuE3gg==": { "id": "Y5xVaKThvoJ+Wm0kWuE3gg==", "name": "libxpm", "version": "3.5.17-r0", "kind": "binary", "source": { "id": "", "name": "libxpm", "version": "3.5.17-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "YinGk8lWmyYmzWo489O7Jg==": { "id": "YinGk8lWmyYmzWo489O7Jg==", "name": "aom-libs", "version": "3.13.1-r1", "kind": "binary", "source": { "id": "", "name": "aom", "version": "3.13.1-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "ZEt8sKQkMkSKlniBOF7I7Q==": { "id": "ZEt8sKQkMkSKlniBOF7I7Q==", "name": "libpng", "version": "1.6.55-r0", "kind": "binary", "source": { "id": "", "name": "libpng", "version": "1.6.55-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "c+w1t1D9vC/ykhbHwbJp6Q==": { "id": "c+w1t1D9vC/ykhbHwbJp6Q==", "name": "alpine-baselayout-data", "version": "3.7.1-r8", "kind": "binary", "source": { "id": "", "name": "alpine-baselayout", "version": "3.7.1-r8", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "dlZ5TrRmtTSzjs44dDQEkg==": { "id": "dlZ5TrRmtTSzjs44dDQEkg==", "name": "zstd-libs", "version": "1.5.7-r2", "kind": "binary", "source": { "id": "", "name": "zstd", "version": "1.5.7-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "gxB+wC2hwW0t1ImFW9L+WA==": { "id": "gxB+wC2hwW0t1ImFW9L+WA==", "name": "libsharpyuv", "version": "1.6.0-r0", "kind": "binary", "source": { "id": "", "name": "libwebp", "version": "1.6.0-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "hn6SxVA1vxeb+7Pqe7KBmA==": { "id": "hn6SxVA1vxeb+7Pqe7KBmA==", "name": "libxt", "version": "1.3.1-r0", "kind": "binary", "source": { "id": "", "name": "libxt", "version": "1.3.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "j0/3DJwDD3os1JMaEBTVqA==": { "id": "j0/3DJwDD3os1JMaEBTVqA==", "name": "libdav1d", "version": "1.5.2-r0", "kind": "binary", "source": { "id": "", "name": "dav1d", "version": "1.5.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "lVuw7kGI/WysgthsdUbxdg==": { "id": "lVuw7kGI/WysgthsdUbxdg==", "name": "libxml2", "version": "2.13.9-r0", "kind": "binary", "source": { "id": "", "name": "libxml2", "version": "2.13.9-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "mVh8SPT22WHEThzELF7hfw==": { "id": "mVh8SPT22WHEThzELF7hfw==", "name": "libexpat", "version": "2.7.5-r0", "kind": "binary", "source": { "id": "", "name": "expat", "version": "2.7.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "nWndTLxXL6a93pH3P2iSDQ==": { "id": "nWndTLxXL6a93pH3P2iSDQ==", "name": "libgcc", "version": "15.2.0-r2", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "15.2.0-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "pMHpLK1yyJwKkuc+0/WuNw==": { "id": "pMHpLK1yyJwKkuc+0/WuNw==", "name": "freetype", "version": "2.14.1-r0", "kind": "binary", "source": { "id": "", "name": "freetype", "version": "2.14.1-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "ssss5C1R3lXph1KM06sMlg==": { "id": "ssss5C1R3lXph1KM06sMlg==", "name": "libbz2", "version": "1.0.8-r6", "kind": "binary", "source": { "id": "", "name": "bzip2", "version": "1.0.8-r6", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "sziqNndqrQtv152u5F34XA==": { "id": "sziqNndqrQtv152u5F34XA==", "name": ".runtime-deps", "version": "20260325.201615", "kind": "binary", "source": { "id": "", "name": "", "version": "", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "noarch", "cpe": "" }, "v6iFZ/ugzwHn84JlcvuoPA==": { "id": "v6iFZ/ugzwHn84JlcvuoPA==", "name": "xz-libs", "version": "5.8.2-r0", "kind": "binary", "source": { "id": "", "name": "xz", "version": "5.8.2-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "vq1mfGzPf/wv9jrP8bGUfQ==": { "id": "vq1mfGzPf/wv9jrP8bGUfQ==", "name": "libxcb", "version": "1.17.0-r1", "kind": "binary", "source": { "id": "", "name": "libxcb", "version": "1.17.0-r1", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "whN4uwCMvKlNMZ0Xhf9/MQ==": { "id": "whN4uwCMvKlNMZ0Xhf9/MQ==", "name": "libcrypto3", "version": "3.5.5-r0", "kind": "binary", "source": { "id": "", "name": "openssl", "version": "3.5.5-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "y9AsnNEg9koPQGRNR+GKHA==": { "id": "y9AsnNEg9koPQGRNR+GKHA==", "name": "alpine-keys", "version": "2.6-r0", "kind": "binary", "source": { "id": "", "name": "alpine-keys", "version": "2.6-r0", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" }, "zr5o12yQE2YepPJb382K0A==": { "id": "zr5o12yQE2YepPJb382K0A==", "name": "libstdc++", "version": "15.2.0-r2", "kind": "binary", "source": { "id": "", "name": "gcc", "version": "15.2.0-r2", "kind": "source", "normalized_version": "", "cpe": "" }, "normalized_version": "", "arch": "x86_64", "cpe": "" } }, "distributions": { "efb15b72-c53e-4c04-b20f-0370221b966d": { "id": "efb15b72-c53e-4c04-b20f-0370221b966d", "did": "alpine", "name": "Alpine Linux", "version": "3.23", "version_code_name": "", "version_id": "", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" } }, "repository": {}, "environments": { "0K+bv90T/Ql3u1U6deAjEg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "1JHlDN09RHJl/n6/syZiWA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "1SbJ+ySlKWDxDgIPEp+KeQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "20KL0W0hrBqqViRvcgc1Fg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "3CJXIrqkLy7LSZIC0Tvaeg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "3sBN651DB8W0iH7aFznZCg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "4BS4GwloVgpzJeTKVsjysA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "4GIn8arn4clHnB3CFVLGWw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "5WvIf7JQsCvOLvoK87EAhQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "5x1ZY2a3uHOEvliX+OVtug==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "6b3DIgebYUsp8nz0j7l/5g==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "6lTLCltLqryTaSTclKgihA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "6rE8rAncxg+34MOZHCkkeQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "9sXDXt2HMrPE6BwItL52OQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "A+hqm1SkTquUotiJOA3OYQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "AMDDysdln4E3fw80+reHoA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "AbyA5OH1Kjwc+ffl6y2WFw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "AdhvXsue2sTbURKW4+5W2A==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "AjtWFuX5NbHF/WyTvfoqgg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "Dtwtac6pdDnw+oUNU8iY3w==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "FUDo4NNyQFLTi2SqF7lH1Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "FwKg6L5pgd6iX3xGWQLASA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "GJnXxKHScND/ZbStBkKPRA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "GRzWMFojXF+6NWGXYC7qoQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "Gjo4GjcjWTs47gF+4pnjPw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "JRTV1UG65MiQX+rl+R09Wg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "KFAUGuhc9ZIyYWxz7PbfbA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "LKCfp7WoOhJT3ViFUz8mtg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "LZ9p0XaGrNPir9isAfIpMw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "LhzvTdrf+0rfQxqUBuIrtA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "MwhswvIAo/Wa8B6XxOq7Gw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "NRDJF1mRIco5uGk65P9KDw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "NYv5d6XZqZgs/Fs2skNBAA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "REAYLmtH9o9vWv97+6TqPA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "U7aLkdHIhGSTfXJmfwfymA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "UtTtKqlFuOtQ+Y0/FOYI4w==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "V4nbf41YvJN3nHT1LMFdRQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "Y5xVaKThvoJ+Wm0kWuE3gg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "YinGk8lWmyYmzWo489O7Jg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "ZEt8sKQkMkSKlniBOF7I7Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "c+w1t1D9vC/ykhbHwbJp6Q==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "dlZ5TrRmtTSzjs44dDQEkg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "gxB+wC2hwW0t1ImFW9L+WA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "hn6SxVA1vxeb+7Pqe7KBmA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "j0/3DJwDD3os1JMaEBTVqA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "lVuw7kGI/WysgthsdUbxdg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "mVh8SPT22WHEThzELF7hfw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "nWndTLxXL6a93pH3P2iSDQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "pMHpLK1yyJwKkuc+0/WuNw==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "ssss5C1R3lXph1KM06sMlg==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "sziqNndqrQtv152u5F34XA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "v6iFZ/ugzwHn84JlcvuoPA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "vq1mfGzPf/wv9jrP8bGUfQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "whN4uwCMvKlNMZ0Xhf9/MQ==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "y9AsnNEg9koPQGRNR+GKHA==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:589002ba0eaed121a1dbf42f6648f29e5be55d5c8a6ee0f8eaa0285cc21ac153", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ], "zr5o12yQE2YepPJb382K0A==": [ { "package_db": "lib/apk/db/installed", "introduced_in": "sha256:288db63402825620e469aa2029b43d571b621eb38cfbf8bf07846e18c41c23eb", "distribution_id": "efb15b72-c53e-4c04-b20f-0370221b966d", "repository_ids": null } ] }, "vulnerabilities": { "BKayPoTvokswEjzKttUQKg==": { "id": "BKayPoTvokswEjzKttUQKg==", "updater": "alpine-main-v3.23-updater", "name": "CVE-2026-33416", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2026-33416", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "libpng", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.23", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" }, "repository": { "cpe": "" }, "fixed_in_version": "1.6.56-r0" }, "UVCBofm+ODDjIfLQtvFKtg==": { "id": "UVCBofm+ODDjIfLQtvFKtg==", "updater": "alpine-main-v3.23-updater", "name": "CVE-2026-27171", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2026-27171", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "zlib", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.23", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" }, "repository": { "cpe": "" }, "fixed_in_version": "1.3.2-r0" }, "YfO2CL4l5bVZcyCIvaWhRw==": { "id": "YfO2CL4l5bVZcyCIvaWhRw==", "updater": "alpine-main-v3.23-updater", "name": "CVE-2026-33636", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2026-33636", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "libpng", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.23", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" }, "repository": { "cpe": "" }, "fixed_in_version": "1.6.56-r0" }, "w53yA/YljYhaLAhmVtNe4Q==": { "id": "w53yA/YljYhaLAhmVtNe4Q==", "updater": "alpine-main-v3.23-updater", "name": "CVE-2026-22184", "description": "", "issued": "0001-01-01T00:00:00Z", "links": "https://security.alpinelinux.org/vuln/CVE-2026-22184", "severity": "", "normalized_severity": "Unknown", "package": { "id": "", "name": "zlib", "version": "", "kind": "source", "normalized_version": "", "cpe": "" }, "distribution": { "id": "", "did": "alpine", "name": "Alpine Linux", "version": "", "version_code_name": "", "version_id": "3.23", "arch": "", "cpe": "", "pretty_name": "Alpine Linux v3.23" }, "repository": { "cpe": "" }, "fixed_in_version": "1.3.2-r0" } }, "package_vulnerabilities": { "4BS4GwloVgpzJeTKVsjysA==": [ "w53yA/YljYhaLAhmVtNe4Q==", "UVCBofm+ODDjIfLQtvFKtg==" ], "ZEt8sKQkMkSKlniBOF7I7Q==": [ "BKayPoTvokswEjzKttUQKg==", "YfO2CL4l5bVZcyCIvaWhRw==" ] }, "enrichments": {} } pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clair-scan-pod | container step-oci-attach-report: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd Attaching clair-report-amd64.json to quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 Executing: oras attach --no-tty --format go-template={{.digest}} --registry-config /home/oras/auth.json --artifact-type application/vnd.redhat.clair-report+json quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 clair-report-amd64.json:application/vnd.redhat.clair-report+json pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clair-scan-pod | container step-conftest-vulnerabilities: [ { "filename": "/tekton/home/clair-result-amd64.json", "namespace": "required_checks", "successes": 10 } ] {"vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0},"unpatched_vulnerabilities":{"critical":0,"high":0,"medium":0,"low":0,"unknown":0}} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575", "digests": ["sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21"]}} {"result":"SUCCESS","timestamp":"2026-04-04T08:14:48+00:00","note":"Task clair-scan completed: Refer to Tekton task result SCAN_OUTPUT for vulnerabilities scanned by Clair.","namespace":"default","successes":0,"failures":0,"warnings":0} pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clone-repository-pod | init container: prepare 2026/04/04 08:13:12 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clone-repository-pod | init container: place-scripts 2026/04/04 08:13:13 Decoded script /tekton/scripts/script-0-j5t6r 2026/04/04 08:13:13 Decoded script /tekton/scripts/script-1-kxl4s pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clone-repository-pod | container step-clone: INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt {"level":"info","ts":1775290396.4008307,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1775290397.1422033,"caller":"git/git.go:223","msg":"Successfully cloned https://gitlab.com/konflux-qe/devfile-sample-hello-world-jcmptl @ 642b700b01121711be60df7e9d09e55bc3fe5575 (grafted, HEAD) in path /workspace/output/source"} {"level":"info","ts":1775290397.142251,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"} {"level":"info","ts":1775290397.1726756,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /workspace/output/source"} Merge option disabled. Using checked-out revision 642b700b01121711be60df7e9d09e55bc3fe5575 directly. pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-clone-repository-pod | container step-symlink-check: Running symlink check pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-init-pod | init container: prepare 2026/04/04 08:13:07 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-init-pod | container step-init: time="2026-04-04T08:13:10Z" level=info msg="Using in-cluster config" logger=KubeClient time="2026-04-04T08:13:10Z" level=info msg="[param] ENABLE: false" time="2026-04-04T08:13:10Z" level=info msg="[param] DEFAULT HTTP PROXY: squid.caching.svc.cluster.local:3128" time="2026-04-04T08:13:10Z" level=info msg="[param] DEFAULT NO PROXY: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai" time="2026-04-04T08:13:10Z" level=info msg="[param] HTTP PROXY RESULT PATH: /tekton/results/http-proxy" time="2026-04-04T08:13:10Z" level=info msg="[param] NO PROXY RESULT PATH: /tekton/results/no-proxy" time="2026-04-04T08:13:10Z" level=info msg="Cache proxy is disabled in param or in backend" time="2026-04-04T08:13:10Z" level=info msg="[result] HTTP PROXY: " time="2026-04-04T08:13:10Z" level=info msg="[result] NO PROXY: " pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-push-dockerfile-pod | init container: prepare 2026/04/04 08:14:31 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-push-dockerfile-pod | init container: working-dir-initializer pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-push-dockerfile-pod | container step-push: time="2026-04-04T08:14:36Z" level=info msg="[param] Image URL: quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575" time="2026-04-04T08:14:36Z" level=info msg="[param] Image digest: sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21" time="2026-04-04T08:14:36Z" level=info msg="[param] Tag suffix: .dockerfile" time="2026-04-04T08:14:36Z" level=info msg="[param] Containerfile: docker/Dockerfile" time="2026-04-04T08:14:36Z" level=info msg="[param] Context: ." time="2026-04-04T08:14:36Z" level=info msg="[param] Artifact type: application/vnd.konflux.dockerfile" time="2026-04-04T08:14:36Z" level=info msg="[param] Source directory: source" time="2026-04-04T08:14:36Z" level=info msg="[param] Image Reference result file: /tekton/results/IMAGE_REF" time="2026-04-04T08:14:36Z" level=info msg="[param] Alternative file name: Dockerfile" time="2026-04-04T08:14:37Z" level=info msg="oras [stdout] quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd@sha256:b2e8fb7e1708c108b0be5af222c907956d889faa6ffaea576c07703cdafd3f2b" logger=CliExecutor time="2026-04-04T08:14:37Z" level=info msg="Containerfile '/workspace/workspace/source/docker/Dockerfile' is pushed to registry with tag: sha256-5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21.dockerfile" {"image_ref":"quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd@sha256:b2e8fb7e1708c108b0be5af222c907956d889faa6ffaea576c07703cdafd3f2b"} pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-sast-shell-check-pod | init container: prepare 2026/04/04 08:14:31 Entrypoint initialization pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-sast-shell-check-pod | init container: place-scripts 2026/04/04 08:14:32 Decoded script /tekton/scripts/script-0-f26j6 2026/04/04 08:14:32 Decoded script /tekton/scripts/script-1-z5cc4 pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-sast-shell-check-pod | init container: working-dir-initializer pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-sast-shell-check-pod | container step-sast-shell-check: + source /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] INFO: The PROJECT_NAME used is: gl-test-custom-branch-fsinbd + PROJECT_NAME=gl-test-custom-branch-fsinbd + echo 'INFO: The PROJECT_NAME used is: gl-test-custom-branch-fsinbd' + ca_bundle=/mnt/trusted-ca/ca-bundle.crt + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust ++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck + PACKAGE_VERSION=ShellCheck-0.10.0-3.el9 + OUTPUT_FILE=shellcheck-results.json + SOURCE_CODE_DIR=/workspace/workspace/source + declare -a ALL_TARGETS + IFS=, + read -ra TARGET_ARRAY + for d in "${TARGET_ARRAY[@]}" + potential_path=/workspace/workspace/source/. ++ realpath -m /workspace/workspace/source/. + resolved_path=/workspace/workspace/source + [[ /workspace/workspace/source == \/\w\o\r\k\s\p\a\c\e\/\w\o\r\k\s\p\a\c\e\/\s\o\u\r\c\e* ]] + ALL_TARGETS+=("$resolved_path") + '[' -z '' ']' + '[' -r /sys/fs/cgroup/cpu.max ']' + read -r quota period + '[' 800000 '!=' max ']' + '[' -n 100000 ']' + '[' 100000 -gt 0 ']' + export SC_JOBS=8 + SC_JOBS=8 + echo 'INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh' + /usr/share/csmock/scripts/run-shellcheck.sh /workspace/workspace/source INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh Looking for shell scripts................ done + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/applypatch-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/post-update.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/prepare-commit-msg.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-applypatch.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-merge-commit.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-push.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-rebase.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/pre-receive.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/push-to-checkout.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/sendemail-validate.sample + timeout 30 shellcheck --format=json1 --external-sources --source-path=/workspace/workspace/source /workspace/workspace/source/.git/hooks/update.sample + CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}") + [[ true == \t\r\u\e ]] + CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|' + CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|' + CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$' + CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER") + csgrep --mode=json --strip-path-prefix=/workspace/workspace/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-119.json ./shellcheck-results/sc-130.json ./shellcheck-results/sc-131.json ./shellcheck-results/sc-133.json ./shellcheck-results/sc-86.json ./shellcheck-results/sc-89.json ./shellcheck-results/sc-90.json ./shellcheck-results/sc-92.json ./shellcheck-results/sc-95.json ./shellcheck-results/sc-98.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' + echo 'ShellCheck results have been saved to shellcheck-results.json' + csgrep --mode=evtstat shellcheck-results.json INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered ShellCheck results have been saved to shellcheck-results.json + csgrep --mode=sarif shellcheck-results.json + TEST_OUTPUT= + parse_test_output sast-shell-check sarif shellcheck-results.sarif + TEST_NAME=sast-shell-check + TEST_RESULT_FORMAT=sarif + TEST_RESULT_FILE=shellcheck-results.sarif + '[' -z sast-shell-check ']' + '[' -z sarif ']' + '[' -z shellcheck-results.sarif ']' + '[' '!' -f shellcheck-results.sarif ']' + '[' sarif = sarif ']' +++ jq -rce '(if (.runs[].results | length > 0) then "FAILURE" else "SUCCESS" end)' shellcheck-results.sarif +++ jq -rce '(.runs[].results | length)' shellcheck-results.sarif ++ make_result_json -r SUCCESS -f 0 ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ FAILURES=0 ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-04-04T08:14:38+00:00 --arg result SUCCESS --arg note 'For details, check Tekton task log.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ jq .failures + '[' 0 -gt 0 ']' + echo '{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: gl-test-custom-branch-fsinbd-on-push-bxvqb-sast-shell-check-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd Attaching to quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 shellcheck-results.sarif:application/sarif+json Preparing shellcheck-results.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Exists 3b606a9dd3a1 shellcheck-results.sarif Uploading 273aebc9a39d application/vnd.oci.image.manifest.v1+json Uploaded 273aebc9a39d application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 Digest: sha256:273aebc9a39dfb5335ae3cc5f7c4e77deabe298fb65ff0b865912743a65b0632 No excluded-findings.json exists. Skipping upload. pod: gl-test-custom-branch-fsinbda7355e11cbefa06db9f670f962f796d-pod | init container: prepare 2026/04/04 08:14:31 Entrypoint initialization pod: gl-test-custom-branch-fsinbda7355e11cbefa06db9f670f962f796d-pod | init container: place-scripts 2026/04/04 08:14:32 Decoded script /tekton/scripts/script-0-56bh2 2026/04/04 08:14:32 Decoded script /tekton/scripts/script-1-kb48d pod: gl-test-custom-branch-fsinbda7355e11cbefa06db9f670f962f796d-pod | init container: working-dir-initializer pod: gl-test-custom-branch-fsinbda7355e11cbefa06db9f670f962f796d-pod | container step-sast-unicode-check: + . /utils.sh ++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache ++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index + trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT + [[ -z '' ]] + PROJECT_NAME=gl-test-custom-branch-fsinbd + echo 'INFO: The PROJECT_NAME used is: gl-test-custom-branch-fsinbd' + ca_bundle=/mnt/trusted-ca/ca-bundle.crt INFO: The PROJECT_NAME used is: gl-test-custom-branch-fsinbd + '[' -f /mnt/trusted-ca/ca-bundle.crt ']' + echo 'INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt' + cp -vf /mnt/trusted-ca/ca-bundle.crt /etc/pki/ca-trust/source/anchors INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' + update-ca-trust + SCAN_PROP=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 + FUC_EXIT_CODE=0 + LANG=en_US.utf8 + find_unicode_control.py -p bidi -v -d -t /workspace/workspace/source + [[ 0 -ne 0 ]] + sed -i raw_sast_unicode_check_out.txt -E -e 's|(.*:[0-9]+)(.*)|\1: warning:\2|' -e 's|^|Error: UNICONTROL_WARNING:\n|' + CSGERP_OPTS=(--mode=json --remove-duplicates --embed-context=3 --set-scan-prop="${SCAN_PROP}" --strip-path-prefix="${SOURCE_CODE_DIR}"/source/) + csgrep --mode=json --remove-duplicates --embed-context=3 --set-scan-prop=https://github.com/siddhesh/find-unicode-control.git#c2accbfbba7553a8bc1ebd97089ae08ad8347e58 --strip-path-prefix=/workspace/workspace/source/ raw_sast_unicode_check_out.txt + csgrep --mode=evtstat processed_sast_unicode_check_out.json + [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]] + KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git + PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives + KFP_DIR=known-false-positives + KFP_CLONED=0 + mkdir known-false-positives + [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]] + echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... ' + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives ++ head -1 curl: (6) Could not resolve host: gitlab.cee.redhat.com + [[ 0 -eq 0 ]] + echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered' + mv processed_sast_unicode_check_out.json sast_unicode_check_out.json INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered + csgrep --mode=sarif sast_unicode_check_out.json + [[ 0 -eq 0 ]] + note='Task sast-unicode-check success: No finding was detected' ++ make_result_json -r SUCCESS -t 'Task sast-unicode-check success: No finding was detected' ++ local RESULT= ++ local SUCCESSES=0 ++ local FAILURES=0 ++ local WARNINGS=0 ++ local 'NOTE=For details, check Tekton task log.' ++ local NAMESPACE=default ++ local OUTPUT ++ local OPTIND opt ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ RESULT=SUCCESS ++ getopts :r:s:f:w:t:n: opt ++ case "${opt}" in ++ NOTE='Task sast-unicode-check success: No finding was detected' ++ getopts :r:s:f:w:t:n: opt ++ shift 4 ++ '[' -z SUCCESS ']' ++ case "${RESULT}" in ++++ date -u --iso-8601=seconds +++ jq -rce --arg date 2026-04-04T08:14:38+00:00 --arg result SUCCESS --arg note 'Task sast-unicode-check success: No finding was detected' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{ result: $result, timestamp: $date, note: $note, namespace: $namespace, successes: $successes|tonumber, failures: $failures|tonumber, warnings: $warnings|tonumber }' ++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' ++ echo '{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + ERROR_OUTPUT='{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + echo '{"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0}' + tee /tekton/results/TEST_OUTPUT {"result":"SUCCESS","timestamp":"2026-04-04T08:14:38+00:00","note":"Task sast-unicode-check success: No finding was detected","namespace":"default","successes":0,"failures":0,"warnings":0} + handle_error /tekton/results/TEST_OUTPUT + exit_code=0 + '[' 0 -ne 0 ']' + exit 0 pod: gl-test-custom-branch-fsinbda7355e11cbefa06db9f670f962f796d-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd Attaching to quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/sarif+json quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 sast_unicode_check_out.sarif:application/sarif+json Preparing sast_unicode_check_out.sarif Exists 44136fa355b3 application/vnd.oci.empty.v1+json Exists 1da9b99b8b41 sast_unicode_check_out.sarif Uploading 2f42a263527e application/vnd.oci.image.manifest.v1+json Uploaded 2f42a263527e application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:642b700b01121711be60df7e9d09e55bc3fe5575@sha256:5346b085f9c0456496a4e7fa6bfcf29a777bbc1b85469079fd3d9d940e4b4f21 Digest: sha256:2f42a263527e28deea6f83ffc7415f9b1b3115841b4ed7dff20ff270a5cc5736 No excluded-findings.json exists. Skipping upload. pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | init container: prepare 2026/04/04 08:07:34 Entrypoint initialization pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | init container: place-scripts 2026/04/04 08:07:35 Decoded script /tekton/scripts/script-0-f4l5d 2026/04/04 08:07:35 Decoded script /tekton/scripts/script-1-dhzw6 2026/04/04 08:07:35 Decoded script /tekton/scripts/script-2-9vbzr 2026/04/04 08:07:35 Decoded script /tekton/scripts/script-3-576ft 2026/04/04 08:07:35 Decoded script /tekton/scripts/script-4-dhfwl 2026/04/04 08:07:35 Decoded script /tekton/scripts/script-5-z5j8k pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | container step-introspect: Artifact type will be determined by introspection. Checking the media type of the OCI artifact... [retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22 The media type of the OCI artifact is application/vnd.docker.distribution.manifest.v2+json. Looking for image labels that indicate this might be an operator bundle... [retry] executing: skopeo inspect --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22 Found 0 matching labels. Expecting 3 or more to identify this image as an operator bundle. Introspection concludes that this artifact is of type "application". pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | container step-generate-container-auth: Selecting auth for quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22 Using token for quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd Auth json written to "/auth/auth.json". pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | container step-set-skip-for-bundles: 2026/04/04 08:07:47 INFO Step was skipped due to when expressions were evaluated to false. pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | container step-app-check: time="2026-04-04T08:07:48Z" level=info msg="certification library version" version="1.16.0 " time="2026-04-04T08:07:49Z" level=info msg="running checks for quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22 for platform amd64" time="2026-04-04T08:07:49Z" level=info msg="target image" image="quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22" time="2026-04-04T08:07:52Z" level=error msg="could not get rpm list, continuing without it" error="could not find rpm db/packages: stat /tmp/preflight-2188084521/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-2188084521/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-2188084521/fs/var/lib/rpm/Packages: no such file or directory" time="2026-04-04T08:07:52Z" level=info msg="check completed" check=HasLicense result=FAILED time="2026-04-04T08:07:52Z" level=info msg="check completed" check=HasUniqueTag result=PASSED time="2026-04-04T08:07:52Z" level=info msg="check completed" check=LayerCountAcceptable result=PASSED time="2026-04-04T08:07:52Z" level=info msg="check completed" check=HasNoProhibitedPackages err="unable to get a list of all packages in the image: could not get rpm list: could not find rpm db/packages: stat /tmp/preflight-2188084521/fs/usr/lib/sysimage/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-2188084521/fs/var/lib/rpm/rpmdb.sqlite: no such file or directory\nstat /tmp/preflight-2188084521/fs/var/lib/rpm/Packages: no such file or directory" result=ERROR time="2026-04-04T08:07:52Z" level=info msg="check completed" check=HasRequiredLabel result=FAILED time="2026-04-04T08:07:52Z" level=info msg="detected empty USER. Presumed to be running as root" check=RunAsNonRoot time="2026-04-04T08:07:52Z" level=info msg="USER value must be provided and be a non-root value for this check to pass" check=RunAsNonRoot time="2026-04-04T08:07:52Z" level=info msg="check completed" check=RunAsNonRoot result=FAILED time="2026-04-04T08:07:54Z" level=info msg="check completed" check=HasModifiedFiles result=PASSED time="2026-04-04T08:07:55Z" level=info msg="check completed" check=BasedOnUbi result=PASSED time="2026-04-04T08:07:55Z" level=info msg="This image's tag on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22 will be paired with digest sha256:f226a8135e094f4a0c6901a98253368d54e55b714ed9166f542dd220fa5dc1e9 once this image has been published in accordance with Red Hat Certification policy. You may then add or remove any supplemental tags through your Red Hat Connect portal as you see fit." { "image": "quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22", "passed": false, "test_library": { "name": "github.com/redhat-openshift-ecosystem/openshift-preflight", "version": "1.16.0", "commit": "b4a231cf9d50c5471eed598b3b48906eb5b9f3f7" }, "results": { "passed": [ { "name": "HasUniqueTag", "elapsed_time": 0, "description": "Checking if container has a tag other than 'latest', so that the image can be uniquely identified." }, { "name": "LayerCountAcceptable", "elapsed_time": 0, "description": "Checking if container has less than 40 layers. Too many layers within the container images can degrade container performance." }, { "name": "HasModifiedFiles", "elapsed_time": 1739, "description": "Checks that no files installed via RPM in the base Red Hat layer have been modified" }, { "name": "BasedOnUbi", "elapsed_time": 739, "description": "Checking if the container's base image is based upon the Red Hat Universal Base Image (UBI)" } ], "failed": [ time="2026-04-04T08:07:55Z" level=info msg="Preflight result: FAILED" { "name": "HasLicense", "elapsed_time": 0, "description": "Checking if terms and conditions applicable to the software including open source licensing information are present. The license must be at /licenses", "help": "Check HasLicense encountered an error. Please review the preflight.log file for more information.", "suggestion": "Create a directory named /licenses and include all relevant licensing and/or terms and conditions as text file(s) in that directory.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "HasRequiredLabel", "elapsed_time": 0, "description": "Checking if the required labels (name, vendor, version, release, summary, description, maintainer) are present in the container metadata", "help": "Check HasRequiredLabel encountered an error. Please review the preflight.log file for more information.", "suggestion": "Add the following labels to your Dockerfile or Containerfile: name, vendor, version, release, summary, description, maintainer.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" }, { "name": "RunAsNonRoot", "elapsed_time": 0, "description": "Checking if container runs as the root user because a container that does not specify a non-root user will fail the automatic certification, and will be subject to a manual review before the container can be approved for publication", "help": "Check RunAsNonRoot encountered an error. Please review the preflight.log file for more information.", "suggestion": "Indicate a specific USER in the dockerfile or containerfile", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" } ], "errors": [ { "name": "HasNoProhibitedPackages", "elapsed_time": 0, "description": "Checks to ensure that the image in use does not include prohibited packages, such as Red Hat Enterprise Linux (RHEL) kernel packages.", "help": "Check HasNoProhibitedPackages encountered an error. Please review the preflight.log file for more information." } ] } } pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | container step-app-set-outcome: [retry] executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/build-e2e-rsmz/gl-test-custom-branch-fsinbd:on-pr-a63bb953b65d96fca7ef21256a4cf513e029bd22 {"result":"ERROR","timestamp":"1775290075","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":4,"failures":3,"warnings":0} pod: gl-test-custom-branch-fsinbdf41313985a917206b1f170ad57342b2-pod | container step-final-outcome: + [[ ! -f /mount/konflux.results.json ]] + tee /tekton/steps/step-final-outcome/results/test-output {"result":"ERROR","timestamp":"1775290075","note":"Task preflight is a ERROR: Refer to Tekton task logs for more information","successes":4,"failures":3,"warnings":0}