[2026-08-14T14:47:36,621503666+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-fmli/python-component-ffyp1p
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-fmli/python-component-ffyp1p:a7c1ca19463f40bab26bf16665f9fe6a642bcc84@sha256:a43fb2e71dc80485a7fae8529d210628d0f9cdad29b609c4b4b07779ce2ad20c
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-fmli/python-component-ffyp1p@sha256:a43fb2e71dc80485a7fae8529d210628d0f9cdad29b609c4b4b07779ce2ad20c] to [quay.io/redhat-appstudio-qe/group-fmli/python-component-ffyp1p:sha256-a43fb2e71dc80485a7fae8529d210628d0f9cdad29b609c4b4b07779ce2ad20c.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-fmli/python-component-ffyp1p@sha256:13e15f9e8cb80a294ebd5b54e016396f906ecc9a5eb8dcc6d2211bab96b1d476
[2026-08-14T14:48:06,192393660+00:00] End upload-sbom