[2026-08-14T10:34:45,891981383+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-sqmg/konflux-test-integration-clone-fzvq0u
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-sqmg/konflux-test-integration-clone-fzvq0u:e4ce15db5f2da5e2ea648b1b06f6df0b033fff2a@sha256:54d0554b08396cb7d25bcf965ce4177af05a664cd554d83dcd92c4e49e7c17d6
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-sqmg/konflux-test-integration-clone-fzvq0u@sha256:54d0554b08396cb7d25bcf965ce4177af05a664cd554d83dcd92c4e49e7c17d6] to [quay.io/redhat-appstudio-qe/group-sqmg/konflux-test-integration-clone-fzvq0u:sha256-54d0554b08396cb7d25bcf965ce4177af05a664cd554d83dcd92c4e49e7c17d6.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-sqmg/konflux-test-integration-clone-fzvq0u@sha256:73f2a4ff05cf6b2d0c1b0d8d6d69adce05dcfb9bf12d352055935aa6143c09f3
[2026-08-14T10:35:14,041650146+00:00] End upload-sbom