Inspecting raw image manifest quay.io/redhat-appstudio-qe/forgejo-rep-0wkg/test-comp-pac-forgejo-2oalck@sha256:227ab9ea91d7e1083460516163fc8eba8574768ae339967a2f61a63934f27199. Selecting auth Using token for quay.io/redhat-appstudio-qe/forgejo-rep-0wkg/test-comp-pac-forgejo-2oalck Selecting auth Using token for quay.io/redhat-appstudio-qe/forgejo-rep-0wkg/test-comp-pac-forgejo-2oalck WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation '. Found SBOM of media type: text/spdx+json Running TPA scan on amd64 image manifest... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 360k 0 0 100 360k 0 297k 0:00:01 0:00:01 --:--:-- 297k 100 365k 0 5191 100 360k 3524 245k 0:00:01 0:00:01 --:--:-- 248k { "scanned" : { "total" : 166, "direct" : 39, "transitive" : 127 }, "providers" : { "rhtpa" : { "status" : { "ok" : false, "name" : "rhtpa", "code" : 503, "message" : "Service Unavailable: {\"error\":\"ReadOnly\",\"message\":\"This instance is in read-only mode. Mutating operations are not available.\"}", "warnings" : { } }, "sources" : { }, "recommendations" : { } } }, "licenses" : [ { "status" : { "ok" : false, "name" : "deps.dev", "code" : 400, "message" : "Bad Request: invalid purl \"pkg:maven/io.github.stuartwdouglas.hacbstest.Main/hacbs-test\" at request index 86", "warnings" : { } }, "summary" : { "total" : 0, "concluded" : 47, "permissive" : 0, "weakCopyleft" : 0, "strongCopyleft" : 0, "unknown" : 0, "deprecated" : 0, "osiApproved" : 0, "fsfLibre" : 0 }, "packages" : { "pkg:rpm/redhat/libksba@1.3.5-9.el8_7" : { "evidence" : [ ] }, "pkg:rpm/redhat/libdb-utils@5.3.28-42.el8_4" : { "evidence" : [ ] }, "pkg:rpm/redhat/expat@2.5.0-2.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/libcom_err@1.45.6-7.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/libcurl@7.61.1-34.el8_10.11" : { "evidence" : [ ] }, "pkg:rpm/redhat/shadow-utils@4.6-23.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/cyrus-sasl-lib@2.1.27-6.el8_5" : { "evidence" : [ ] }, "pkg:rpm/redhat/gobject-introspection@1.56.1-1.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/librhsm@0.0.3-5.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/libcap-ng@0.7.11-1.el8" : { "evidence" : [ ] }, "pkg:github/actions/checkout@v4" : { "evidence" : [ ] }, "pkg:rpm/redhat/libidn2@2.2.0-1.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/tzdata-java@2026b-1.el8" : { "evidence" : [ ] }, "pkg:github/beatlabs/delete-old-branches-action@v0.0.10" : { "evidence" : [ ] }, "pkg:rpm/redhat/gpg-pubkey@d4082792-5b32db75" : { "evidence" : [ ] }, "pkg:rpm/redhat/json-glib@1.4.4-1.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/platform-python-setuptools@39.2.0-9.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/basesystem@11-5.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/bash@4.4.20-6.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/java-17-openjdk-headless@17.0.20.0.8-1.1.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/libffi@3.1-24.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/setup@2.12.2-9.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/crypto-policies-scripts@20230731-1.git3177e06.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/dbus-libs@1.12.8-28.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/xz-libs@5.2.4-4.el8_6" : { "evidence" : [ ] }, "pkg:rpm/redhat/alsa-lib@1.2.10-2.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/readline@7.0-10.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/libdnf@0.63.0-21.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/gdbm-libs@1.18-2.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/mpfr@3.1.6-1.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/publicsuffix-list-dafsa@20180723-1.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/librepo@1.14.2-5.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/javapackages-filesystem@5.3.0-1.module%2Bel8%2B2447%2B6f56d9a6" : { "evidence" : [ ] }, "pkg:oci/openjdk-17-runtime@sha256%3A481a3d9ce2017d7a0757a11b3b1c27ae8f8eb0f549cf8a959045aa46316adc3d" : { "evidence" : [ ] }, "pkg:rpm/redhat/gnupg2@2.2.20-4.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/nss-sysinit@3.112.0-8.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/curl@7.61.1-34.el8_10.11" : { "evidence" : [ ] }, "pkg:rpm/redhat/sqlite-libs@3.26.0-20.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/nss@3.112.0-8.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/libassuan@2.5.1-3.el8" : { "evidence" : [ ] }, "pkg:rpm/redhat/sed@4.5-5.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/bzip2-libs@1.0.6-28.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/glibc-minimal-langpack@2.28-251.el8_10.40" : { "evidence" : [ ] }, "pkg:rpm/redhat/gpg-pubkey@fd431d51-4ae0493b" : { "evidence" : [ ] }, "pkg:rpm/redhat/libselinux@2.9-11.el8_10" : { "evidence" : [ ] }, "pkg:rpm/redhat/pcre2@10.32-3.el8_6" : { "evidence" : [ ] }, "pkg:rpm/redhat/avahi-libs@0.7-27.el8_10.1" : { "evidence" : [ ] } } } ] }