[2026-08-19T14:44:47,296012503+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-q0v0/python-component-wtdcdx
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-q0v0/python-component-wtdcdx:fa117bcf197abd0668b259132d7441ac453fa2b8@sha256:7c61f1c3aac51d759226346644269df585996d65c33c1d3b7220e4f8600bd424
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-q0v0/python-component-wtdcdx@sha256:7c61f1c3aac51d759226346644269df585996d65c33c1d3b7220e4f8600bd424] to [quay.io/redhat-appstudio-qe/group-q0v0/python-component-wtdcdx:sha256-7c61f1c3aac51d759226346644269df585996d65c33c1d3b7220e4f8600bd424.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-q0v0/python-component-wtdcdx@sha256:55c6c24fb712a4fc5b43c13845d9f24bca4963d8f3fcf91b0c41f45c27a554de
[2026-08-19T14:45:29,545469522+00:00] End upload-sbom