[2026-08-22T07:49:22,920949162+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-vrmu/konflux-test-integration-clone-2r0kew
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-vrmu/konflux-test-integration-clone-2r0kew:c883c683c7acffe5f4712e97fa9a603d8f6a172c@sha256:ac72ddc472a762dade4823c330df7e496b29e5c4731a4079f22c7dc081f69e24
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-vrmu/konflux-test-integration-clone-2r0kew@sha256:ac72ddc472a762dade4823c330df7e496b29e5c4731a4079f22c7dc081f69e24] to [quay.io/redhat-appstudio-qe/group-vrmu/konflux-test-integration-clone-2r0kew:sha256-ac72ddc472a762dade4823c330df7e496b29e5c4731a4079f22c7dc081f69e24.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-vrmu/konflux-test-integration-clone-2r0kew@sha256:dbbb2e4abf6258468914f68637e3a1e6653d84563334b3c49d70967adc22d847
[2026-08-22T07:49:49,980237164+00:00] End upload-sbom