[2026-08-19T14:15:30,656472518+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-7wvj/konflux-test-integration-clone-0ka33i
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-7wvj/konflux-test-integration-clone-0ka33i:on-pr-6c29137730fd8c634faca3baa84ccfb471d954de@sha256:f62f9d721e4999e1f4189850291cd711af61d859ac5e2e34641dcf6faaba5fad
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-7wvj/konflux-test-integration-clone-0ka33i@sha256:f62f9d721e4999e1f4189850291cd711af61d859ac5e2e34641dcf6faaba5fad] to [quay.io/redhat-appstudio-qe/group-7wvj/konflux-test-integration-clone-0ka33i:sha256-f62f9d721e4999e1f4189850291cd711af61d859ac5e2e34641dcf6faaba5fad.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-7wvj/konflux-test-integration-clone-0ka33i@sha256:8defac16ca02025d72eb208e78d668ec8c6ace42b9f2ac718cfef87f4f94366c
[2026-08-19T14:16:10,619646816+00:00] End upload-sbom