[2026-05-06T17:59:57,596967377+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-b7ow/python-component-04plav
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-b7ow/python-component-04plav:e5448ed8780b32f076cca1e4864b218ee4825b43@sha256:c121a12fa23aa5a3ebee91f9b361db23dd10bbf11ed4983824a141396e837ec0
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-b7ow/python-component-04plav@sha256:c121a12fa23aa5a3ebee91f9b361db23dd10bbf11ed4983824a141396e837ec0] to [quay.io/redhat-appstudio-qe/group-b7ow/python-component-04plav:sha256-c121a12fa23aa5a3ebee91f9b361db23dd10bbf11ed4983824a141396e837ec0.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-b7ow/python-component-04plav@sha256:80cbad35445b4a981c41015aeb76b1b0cc2c8e34b51f5ed0da12cafd2ffd3bb5
[2026-05-06T18:00:24,875126079+00:00] End upload-sbom