[2026-08-21T04:57:12,662355486+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-762i/python-component-bhyoqs
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-762i/python-component-bhyoqs:on-pr-45d7a0597c6cbdc17c1b4c0a28e1d8e0a4cca041@sha256:2dac06ac87503bf7899ef342237e652f8aea43056f0fe5c27beca61605699e32
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-762i/python-component-bhyoqs@sha256:2dac06ac87503bf7899ef342237e652f8aea43056f0fe5c27beca61605699e32] to [quay.io/redhat-appstudio-qe/group-762i/python-component-bhyoqs:sha256-2dac06ac87503bf7899ef342237e652f8aea43056f0fe5c27beca61605699e32.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-762i/python-component-bhyoqs@sha256:bd36cb5622f1a171b29eafe8947d2f47e24f8eb532923dc302b8f59d6b044e36
[2026-08-21T04:57:40,406850001+00:00] End upload-sbom