[2026-08-14T06:04:39,364926166+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-2ulu/konflux-test-integration-clone-iqvdev
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-2ulu/konflux-test-integration-clone-iqvdev:on-pr-1d1673fbe121ada42dd62b66e8a6702aec729e56@sha256:e92ea669014013e0596def0be9e4b6ebda52e6493c72924dbc6c36396d0ff1df
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-2ulu/konflux-test-integration-clone-iqvdev@sha256:e92ea669014013e0596def0be9e4b6ebda52e6493c72924dbc6c36396d0ff1df] to [quay.io/redhat-appstudio-qe/group-2ulu/konflux-test-integration-clone-iqvdev:sha256-e92ea669014013e0596def0be9e4b6ebda52e6493c72924dbc6c36396d0ff1df.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-2ulu/konflux-test-integration-clone-iqvdev@sha256:0d7797e03ba66fe4ec516684559c4e7850e12ac6b6bf6d73304441e94f6d1afe
[2026-08-14T06:05:08,804743187+00:00] End upload-sbom