[2026-05-11T17:20:25,944686052+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-rdkt/python-component-ztm7e0
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-rdkt/python-component-ztm7e0:on-pr-de0dd2f4524df3b415a75ab41a1daa66cf09bee4@sha256:1b8742e2d9ed4b4dd87b6d46316217c0858a21909642353a1680c0c1fae3710b
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-rdkt/python-component-ztm7e0@sha256:1b8742e2d9ed4b4dd87b6d46316217c0858a21909642353a1680c0c1fae3710b] to [quay.io/redhat-appstudio-qe/group-rdkt/python-component-ztm7e0:sha256-1b8742e2d9ed4b4dd87b6d46316217c0858a21909642353a1680c0c1fae3710b.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-rdkt/python-component-ztm7e0@sha256:eabaa44ec708e368ee1e7404d797fb0fc9b21bc016aeb55b42ec3d047982d21a
[2026-05-11T17:21:06,299493322+00:00] End upload-sbom