[2026-10-06T17:42:26,813356329+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-rojh/python-component-2uipms
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-rojh/python-component-2uipms:on-pr-2f8505fc6f9959f2ef20803c8f4200e47d530d49@sha256:6a877336b8391c4f0377495238ddc0bce344de3ed34e134ecf519591c7a09969
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-rojh/python-component-2uipms@sha256:6a877336b8391c4f0377495238ddc0bce344de3ed34e134ecf519591c7a09969] to [quay.io/redhat-appstudio-qe/group-rojh/python-component-2uipms:sha256-6a877336b8391c4f0377495238ddc0bce344de3ed34e134ecf519591c7a09969.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-rojh/python-component-2uipms@sha256:cc2d4b61c7cb5ec0889089dec8737021615442f8a03ede63086f284239bffe14
[2026-10-06T17:42:49,973768810+00:00] End upload-sbom