pod: gh-test-custom-branch-ogsyzk-on-pull-request-kpvxm-init-pod | init container: prepare 2025/12/25 10:11:33 Entrypoint initialization pod: gh-test-custom-branch-ogsyzk-on-pull-request-kpvxm-init-pod | init container: place-scripts 2025/12/25 10:11:34 Decoded script /tekton/scripts/script-0-vs672 pod: gh-test-custom-branch-ogsyzk-on-pull-request-kpvxm-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:on-pr-2e06ed315440c12c6bfb4f85747f0645e37b039f Determine if Image Already Exists Fetching cluster-config from konflux-info namespace... Warning: Failed to fetch cluster-config ConfigMap. Proceeding with defaults. Cache proxy disabled (cluster-enabled: true, task-enable: false) Setting HTTP_PROXY to Setting NO_PROXY to pod: gh-test-custom-branch-ogsyzk-on-pull-request-q99pw-init-pod | init container: prepare 2025/12/25 10:00:45 Entrypoint initialization pod: gh-test-custom-branch-ogsyzk-on-pull-request-q99pw-init-pod | init container: place-scripts 2025/12/25 10:00:46 Decoded script /tekton/scripts/script-0-hr7bj pod: gh-test-custom-branch-ogsyzk-on-pull-request-q99pw-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:on-pr-73515c59472aee81da0ec43a98c54cb9afaf4010 Determine if Image Already Exists Fetching cluster-config from konflux-info namespace... Warning: Failed to fetch cluster-config ConfigMap. Proceeding with defaults. Cache proxy disabled (cluster-enabled: true, task-enable: false) Setting HTTP_PROXY to Setting NO_PROXY to pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-apply-tags-pod | init container: prepare 2025/12/25 10:14:47 Entrypoint initialization pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-apply-tags-pod | init container: place-scripts 2025/12/25 10:14:48 Decoded script /tekton/scripts/script-0-ts5l7 2025/12/25 10:14:48 Decoded script /tekton/scripts/script-1-mmpl6 pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-apply-tags-pod | container step-apply-additional-tags-from-parameter: No additional tags parameter specified pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-apply-tags-pod | container step-apply-additional-tags-from-image-label: Applying tag test-tag1 Getting image source signatures Copying blob sha256:cb5665d617c5a0fc2c8328ef6b7e84a2a07fe33d29e5790c02f1e0f059fd339d Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying blob sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251 Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3 Copying config sha256:ce34c4d1c9502010548a518dd6c7b186d6cc2fee111bbdc9afd30298b805cb98 Writing manifest to image destination Applying tag test-tag2 Getting image source signatures Copying blob sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251 Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3 Copying blob sha256:cb5665d617c5a0fc2c8328ef6b7e84a2a07fe33d29e5790c02f1e0f059fd339d Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b Copying config sha256:ce34c4d1c9502010548a518dd6c7b186d6cc2fee111bbdc9afd30298b805cb98 Writing manifest to image destination pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | init container: prepare 2025/12/25 10:13:57 Entrypoint initialization pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | init container: place-scripts 2025/12/25 10:13:58 Decoded script /tekton/scripts/script-0-jpqvh 2025/12/25 10:13:58 Decoded script /tekton/scripts/script-1-mb6jx 2025/12/25 10:13:58 Decoded script /tekton/scripts/script-2-8x9jt 2025/12/25 10:13:58 Decoded script /tekton/scripts/script-3-p768x 2025/12/25 10:13:58 Decoded script /tekton/scripts/script-4-mqz4g pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | init container: working-dir-initializer pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | container step-build: [2025-12-25T10:14:02,624776031+00:00] Validate context path [2025-12-25T10:14:02,630377765+00:00] Update CA trust [2025-12-25T10:14:02,632155078+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-12-25T10:14:06,061350305+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2025-12-25T10:14:06,072933140+00:00] Prepare system (architecture: x86_64) [2025-12-25T10:14:06,262827577+00:00] Setup prefetched Trying to pull quay.io/jitesoft/nginx:latest... Getting image source signatures Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 Copying blob sha256:2d35ebdb57d9971fea0cac1582aa78935adf8058b2cc32db163c98822e5dfa1b Copying blob sha256:91137199d2d3038e3d089f2b3eec98443e7838e63df8c25895d61043489a42f3 Copying blob sha256:b91d5e89f13faeb4092784d3f7c0ee8d97a4551a1b994a5abfa32fe1aa766251 Copying config sha256:e24dabc8eb375e0b081983c3d496693b7fc65a5d9d9cffdd08e6a4c5bec5b7a2 Writing manifest to image destination [2025-12-25T10:14:09,191626345+00:00] Unsetting proxy { "com.jitesoft.app.alpine.version": "3.22.2", "com.jitesoft.app.nginx.version": "1.29.4", "com.jitesoft.build.arch": "amd64", "com.jitesoft.build.platform": "linux/amd64", "com.jitesoft.project.registry.uri": "registry.gitlab.com/jitesoft/dockerfiles/nginx", "com.jitesoft.project.repo.issues": "https://gitlab.com/jitesoft/dockerfiles/nginx/issues", "com.jitesoft.project.repo.type": "git", "com.jitesoft.project.repo.uri": "https://gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.alternative-locations": "oci://index.docker.io/jitesoft/nginx,oci://ghcr.io/jitesoft/nginx,oci://registry.gitlab.com/jitesoft/dockerfiles/nginx", "io.artifacthub.package.logo-url": "https://jitesoft.com/favicon-96x96.png", "io.artifacthub.package.readme-url": "https://gitlab.com/jitesoft/dockerfiles/nginx/-/raw/master/README.md", "maintainer": "Johannes Tegnér ", "maintainer.org": "Jitesoft", "maintainer.org.uri": "https://jitesoft.com", "org.opencontainers.image.created": "2025-12-25T10:14:06Z", "org.opencontainers.image.description": "Nginx on Alpine linux", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/devfile-sample-hello-world", "org.opencontainers.image.vendor": "Jitesoft", "org.opencontainers.image.version": "1.29.4", "architecture": "x86_64", "vcs-type": "git", "vcs-ref": "ac04835c9e28fafbbd9602bf35b1b21d000c07ff", "org.opencontainers.image.revision": "ac04835c9e28fafbbd9602bf35b1b21d000c07ff", "build-date": "2025-12-25T10:14:06Z", "io.buildah.version": "1.41.4", "konflux.additional-tags": "test-tag1, test-tag2" } [2025-12-25T10:14:09,251290804+00:00] Register sub-man Adding the entitlement to the build [2025-12-25T10:14:09,256570912+00:00] Add secrets [2025-12-25T10:14:09,276921820+00:00] Run buildah build [2025-12-25T10:14:09,278654682+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=ac04835c9e28fafbbd9602bf35b1b21d000c07ff --label org.opencontainers.image.revision=ac04835c9e28fafbbd9602bf35b1b21d000c07ff --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world --label build-date=2025-12-25T10:14:06Z --label org.opencontainers.image.created=2025-12-25T10:14:06Z --annotation org.opencontainers.image.revision=ac04835c9e28fafbbd9602bf35b1b21d000c07ff --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/devfile-sample-hello-world --annotation org.opencontainers.image.created=2025-12-25T10:14:06Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.cw8CRw -t quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff . STEP 1/6: FROM quay.io/jitesoft/nginx:latest STEP 2/6: ENV PORT="8080" STEP 3/6: LABEL konflux.additional-tags="test-tag1, test-tag2" STEP 4/6: COPY labels.json /usr/share/buildinfo/labels.json STEP 5/6: COPY labels.json /root/buildinfo/labels.json STEP 6/6: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="ac04835c9e28fafbbd9602bf35b1b21d000c07ff" "org.opencontainers.image.revision"="ac04835c9e28fafbbd9602bf35b1b21d000c07ff" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/devfile-sample-hello-world" "build-date"="2025-12-25T10:14:06Z" "org.opencontainers.image.created"="2025-12-25T10:14:06Z" COMMIT quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff time="2025-12-25T10:14:09Z" level=warning msg="HEALTHCHECK is not supported for OCI image format and will be ignored. Must use `docker` format" --> ce34c4d1c950 Successfully tagged quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff ce34c4d1c9502010548a518dd6c7b186d6cc2fee111bbdc9afd30298b805cb98 [2025-12-25T10:14:10,142681223+00:00] Unsetting proxy [2025-12-25T10:14:10,144720941+00:00] Add metadata Recording base image digests used quay.io/jitesoft/nginx:latest quay.io/jitesoft/nginx:latest@sha256:55e0a6080d67575d30ce5a0205d9ac61e98c10422c5f834b486c239912d154aa Getting image source signatures Copying blob sha256:875cea31e8ed0fb85f07052e9795bbe1ccd5a626e5aeadf4f4c7e3db0604cea8 Copying blob sha256:256f393e029fa2063d8c93720da36a74a032bed3355a2bc3e313ad12f8bde9d1 Copying blob sha256:f8e7ccd03afcc9d0564cf87f00b053027fa490a67b32d7088092f33362e5c501 Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef Copying blob sha256:683da8936dc2e3176f2b8fc355341c803e903d0d4eebb4ced7291814ee0cb737 Copying config sha256:ce34c4d1c9502010548a518dd6c7b186d6cc2fee111bbdc9afd30298b805cb98 Writing manifest to image destination [2025-12-25T10:14:10,717381950+00:00] End build pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | container step-push: [2025-12-25T10:14:10,750525946+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-12-25T10:14:13,823681677+00:00] Convert image [2025-12-25T10:14:13,825576962+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff docker://quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container [2025-12-25T10:14:18,378243878+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff docker://quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff sha256:990b959d97821f94721af13f9a724d2e42e790364b91c01db2f1ba78d00ee816quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff [2025-12-25T10:14:19,888273180+00:00] End push pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | container step-sbom-syft-generate: [2025-12-25T10:14:19,900131041+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2025-12-25T10:14:23,077281884+00:00] End sbom-syft-generate pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | container step-prepare-sboms: [2025-12-25T10:14:24,073219246+00:00] Prepare SBOM [2025-12-25T10:14:24,080003743+00:00] Generate SBOM with mobster Skipping SBOM validation 2025-12-25 10:14:25,861 [INFO] mobster.log: Logging level set to 20 2025-12-25 10:14:25,907 [INFO] mobster.oci: Fetching manifest for quay.io/jitesoft/nginx@sha256:55e0a6080d67575d30ce5a0205d9ac61e98c10422c5f834b486c239912d154aa 2025-12-25 10:14:29,071 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM. 2025-12-25 10:14:29,071 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully. 2025-12-25 10:14:29,071 [INFO] mobster.log: Contextual workflow completed in 3.17s 2025-12-25 10:14:29,083 [INFO] mobster.main: Exiting with code 0. [2025-12-25T10:14:29,144121990+00:00] End prepare-sboms pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-build-container-pod | container step-upload-sbom: [2025-12-25T10:14:29,223968233+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk Pushing sbom to registry Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk:ac04835c9e28fafbbd9602bf35b1b21d000c07ff@sha256:990b959d97821f94721af13f9a724d2e42e790364b91c01db2f1ba78d00ee816 quay.io/redhat-appstudio-qe/build-e2e-xdtr/gh-test-custom-branch-ogsyzk@sha256:8b21f39e4848106c07a3d745bae930b7341a05a1e37c1bc736d35b1c10b23d38 [2025-12-25T10:14:32,552802474+00:00] End upload-sbom pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-clair-scan-pod | init container: prepare 2025/12/25 10:14:43 Entrypoint initialization pod: gh-test-custom-branch-ogsyzk-on-push-qlglt-clair-scan-pod | init container: place-scripts