Using token for quay.io/redhat-appstudio-qe/group-6kj3/konflux-test-integration-clone-2328kb WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation '. Found SBOM of media type: text/spdx+json Detected base images from amd64 SBOM: registry.access.redhat.com/ubi8/openjdk-17 registry.access.redhat.com/ubi8/openjdk-17-runtime Images to be checked: registry.access.redhat.com/ubi8/openjdk-17 registry.access.redhat.com/ubi8/openjdk-17-runtime Querying Red Hat Catalog for registry.access.redhat.com/ubi8/openjdk-17. Running conftest using /project/repository/ policy, required_checks namespace. [ { "filename": "/tmp/ubi8/openjdk-17/repository_data.json", "namespace": "required_checks", "successes": 1 } ] [SUCCESS] Image registry.access.redhat.com/ubi8/openjdk-17 is valid Querying Red Hat Catalog for registry.access.redhat.com/ubi8/openjdk-17-runtime. Running conftest using /project/repository/ policy, required_checks namespace. [ { "filename": "/tmp/ubi8/openjdk-17-runtime/repository_data.json", "namespace": "required_checks", "successes": 1 } ] [SUCCESS] Image registry.access.redhat.com/ubi8/openjdk-17-runtime is valid {"result":"SUCCESS","timestamp":"2026-10-06T16:27:36+00:00","note":"Task deprecated-image-check completed: Check result for task result.","namespace":"required_checks","successes":2,"failures":0,"warnings":0} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/group-6kj3/konflux-test-integration-clone-2328kb:on-pr-f610d2f7f13477dab652ca726ee0e9cdc6bad04e", "digests": ["sha256:30e24dbea31fdfacd1b5b3902c83ce96e6c8613c4f2897a21bc029eaa8401077"]}}