[2026-08-22T03:22:01,733219907+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-0l5q/konflux-test-integration-clone-vo7gca
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-0l5q/konflux-test-integration-clone-vo7gca:2d1bbc80f46cd82b1618afa659224f53aa163b40@sha256:c70c690e66f676b3fa0713ccf3d87d893d6a3be572c352d8ea2ae129f8c28b3d
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-0l5q/konflux-test-integration-clone-vo7gca@sha256:c70c690e66f676b3fa0713ccf3d87d893d6a3be572c352d8ea2ae129f8c28b3d] to [quay.io/redhat-appstudio-qe/group-0l5q/konflux-test-integration-clone-vo7gca:sha256-c70c690e66f676b3fa0713ccf3d87d893d6a3be572c352d8ea2ae129f8c28b3d.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-0l5q/konflux-test-integration-clone-vo7gca@sha256:3f3da421efa9227cde8360711965fd20f57ff8d66758caae5c483a7fe90f6c31
[2026-08-22T03:22:28,101560302+00:00] End upload-sbom