[2026-04-21T21:00:23,372682802+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-plyy/python-component-krbdcn
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-plyy/python-component-krbdcn:on-pr-6c60b2c4a8e46786bb5192f25f60815db434641e@sha256:87fcba16d25e8a66fffeb53d666a8ec4bb146e4e5f6ab707061f0e4b09f198d8
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-plyy/python-component-krbdcn@sha256:87fcba16d25e8a66fffeb53d666a8ec4bb146e4e5f6ab707061f0e4b09f198d8] to [quay.io/redhat-appstudio-qe/group-plyy/python-component-krbdcn:sha256-87fcba16d25e8a66fffeb53d666a8ec4bb146e4e5f6ab707061f0e4b09f198d8.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-plyy/python-component-krbdcn@sha256:e4c42db474862a3a88f490f1d78f6c7219e3f0d9b1203e3b53bcc7939b40e16b
[2026-04-21T21:00:28,116740119+00:00] End upload-sbom