[2026-08-19T14:50:52,237662622+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-q0v0/konflux-test-integration-clone-o72xct
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-q0v0/konflux-test-integration-clone-o72xct:on-pr-fe1e4325a5fa727898629024272379545fc11c26@sha256:1d05761d6cfa80bde6543260eb5ec5a0dd93ea9a2e9d859c8870c950bd00e1c3
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-q0v0/konflux-test-integration-clone-o72xct@sha256:1d05761d6cfa80bde6543260eb5ec5a0dd93ea9a2e9d859c8870c950bd00e1c3] to [quay.io/redhat-appstudio-qe/group-q0v0/konflux-test-integration-clone-o72xct:sha256-1d05761d6cfa80bde6543260eb5ec5a0dd93ea9a2e9d859c8870c950bd00e1c3.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-q0v0/konflux-test-integration-clone-o72xct@sha256:20053e070745c67467ad2421561c5e83bb8d4c3dfa92a810aa0dc85da4624cfa
[2026-08-19T14:51:31,790892439+00:00] End upload-sbom