pod: test-comp-pac-gitlab-tuhvia-on-pull-request-2wmnv-init-pod | init container: prepare 2025/10/23 17:13:02 Entrypoint initialization pod: test-comp-pac-gitlab-tuhvia-on-pull-request-2wmnv-init-pod | init container: place-scripts 2025/10/23 17:13:02 Decoded script /tekton/scripts/script-0-5n9d5 pod: test-comp-pac-gitlab-tuhvia-on-pull-request-2wmnv-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08 Determine if Image Already Exists pod: test-comp-pac-gitlab-tuhvia-on-pull-request-rc4zq-init-pod | init container: prepare 2025/10/23 17:12:22 Entrypoint initialization pod: test-comp-pac-gitlab-tuhvia-on-pull-request-rc4zq-init-pod | init container: place-scripts 2025/10/23 17:12:23 Decoded script /tekton/scripts/script-0-phg69 pod: test-comp-pac-gitlab-tuhvia-on-pull-request-rc4zq-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-607ab2516e64b9625d5654b7792110613f7a0553 Determine if Image Already Exists pod: test-comp-pac-gitlab-tuhvia8b3f5bad2c5b24d4c89ee6e7f8a4b683-pod | init container: prepare 2025/10/23 17:16:04 Entrypoint initialization pod: test-comp-pac-gitlab-tuhvia8b3f5bad2c5b24d4c89ee6e7f8a4b683-pod | init container: place-scripts 2025/10/23 17:16:06 Decoded script /tekton/scripts/script-0-ggj98 2025/10/23 17:16:06 Decoded script /tekton/scripts/script-1-ppshh pod: test-comp-pac-gitlab-tuhvia8b3f5bad2c5b24d4c89ee6e7f8a4b683-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Extracting image(s). Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 22.957 sec (0 m 22 s) Start Date: 2025:10:23 17:17:17 End Date: 2025:10:23 17:17:40 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27800/Wed Oct 22 09:44:05 2025 Database version: 27800 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1761239860","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1761239860","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1761239860","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08", "digests": ["sha256:8f987d4e152e1ca58506a32233ea8df6e8aa8f103bd31af3207e22e61e2a7e33"]}} pod: test-comp-pac-gitlab-tuhvia8b3f5bad2c5b24d4c89ee6e7f8a4b683-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia Attaching to quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08 Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08@sha256:8f987d4e152e1ca58506a32233ea8df6e8aa8f103bd31af3207e22e61e2a7e33 clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Uploading 75a8ba3f48a9 clamscan-ec-test-amd64.json Uploading befa08f5f0e2 clamscan-result-amd64.log Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploaded befa08f5f0e2 clamscan-result-amd64.log Uploaded 75a8ba3f48a9 clamscan-ec-test-amd64.json Uploading f112f0a7fad4 application/vnd.oci.image.manifest.v1+json Uploaded f112f0a7fad4 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08@sha256:8f987d4e152e1ca58506a32233ea8df6e8aa8f103bd31af3207e22e61e2a7e33 Digest: sha256:f112f0a7fad49f4ebdd41fcbffbefa4bffd5257252ca44c6a55ce874800b2e38 pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | init container: prepare 2025/10/23 17:15:55 Entrypoint initialization pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | init container: place-scripts 2025/10/23 17:15:56 Decoded script /tekton/scripts/script-0-kbpz4 2025/10/23 17:15:56 Decoded script /tekton/scripts/script-1-wpm84 2025/10/23 17:15:56 Decoded script /tekton/scripts/script-2-hpkzj 2025/10/23 17:15:56 Decoded script /tekton/scripts/script-3-smbw7 2025/10/23 17:15:56 Decoded script /tekton/scripts/script-4-2qt7f 2025/10/23 17:15:56 Decoded script /tekton/scripts/script-5-8d7nw pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | container step-introspect: Artifact type will be determined by introspection. Checking the media type of the OCI artifact... Executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08 The media type of the OCI artifact is application/vnd.docker.distribution.manifest.v2+json. Looking for image labels that indicate this might be an operator bundle... Executing: skopeo inspect --retry-times 3 docker://quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08 Found 0 matching labels. Expecting 3 or more to identify this image as an operator bundle. Introspection concludes that this artifact is of type "application". pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | container step-generate-container-auth: Selecting auth for quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08 Using token for quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia Auth json written to "/auth/auth.json". pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | container step-set-skip-for-bundles: 2025/10/23 17:16:43 INFO Step was skipped due to when expressions were evaluated to false. pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | container step-app-check: time="2025-10-23T17:16:43Z" level=info msg="certification library version" version="1.14.1 " time="2025-10-23T17:16:44Z" level=info msg="running checks for quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08 for platform amd64" time="2025-10-23T17:16:44Z" level=info msg="target image" image="quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08" time="2025-10-23T17:16:58Z" level=info msg="check completed" check=HasLicense result=FAILED time="2025-10-23T17:16:58Z" level=info msg="check completed" check=HasUniqueTag result=PASSED time="2025-10-23T17:16:58Z" level=info msg="check completed" check=LayerCountAcceptable result=PASSED time="2025-10-23T17:16:58Z" level=info msg="check completed" check=HasNoProhibitedPackages result=PASSED time="2025-10-23T17:16:58Z" level=info msg="check completed" check=HasRequiredLabel result=PASSED time="2025-10-23T17:16:58Z" level=info msg="USER 185 specified that is non-root" check=RunAsNonRoot time="2025-10-23T17:16:58Z" level=info msg="check completed" check=RunAsNonRoot result=PASSED time="2025-10-23T17:17:10Z" level=info msg="check completed" check=HasModifiedFiles result=PASSED time="2025-10-23T17:17:11Z" level=info msg="check completed" check=BasedOnUbi result=PASSED time="2025-10-23T17:17:11Z" level=info msg="This image's tag on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08 will be paired with digest sha256:8f987d4e152e1ca58506a32233ea8df6e8aa8f103bd31af3207e22e61e2a7e33 once this image has been published in accordance with Red Hat Certification policy. You may then add or remove any supplemental tags through your Red Hat Connect portal as you see fit." { "image": "quay.io/redhat-appstudio-qe/gitlab-rep-udvv/test-comp-pac-gitlab-tuhvia:on-pr-3b35c261600e787d909b8c7a9208d8cd2d83cd08", "passed": false, "test_library": { "name": "github.com/redhat-openshift-ecosystem/openshift-preflight", "version": "1.14.1", "commit": "436b6cd740f4144eba59ad1378be00383c7b0269" }, "results": { "passed": [ { "name": "HasUniqueTag", "elapsed_time": 0, "description": "Checking if container has a tag other than 'latest', so that the image can be uniquely identified." }, { "name": "LayerCountAcceptable", "elapsed_time": 0, "description": "Checking if container has less than 40 layers. Too many layers within the container images can degrade container performance." }, { "name": "HasNoProhibitedPackages", "elapsed_time": 52, "description": "Checks to ensure that the image in use does not include prohibited packages, such as Red Hat Enterprise Linux (RHEL) kernel packages." }, { "name": "HasRequiredLabel", "elapsed_time": 0, "description": "Checking if the required labels (name, vendor, version, release, summary, description, maintainer) are present in the container metadata" }, { "name": "RunAsNonRoot", "elapsed_time": 0, "description": "Checking if container runs as the root user because a container that does not specify a non-root user will fail the automatic certification, and will be subject to a manual review before the container can be approved for publication" }, { "name": "HasModifiedFiles", "elapsed_time": 11692, "description": "Checks that no files installed via RPM in the base Red Hat layer have been modified" }, { "name": "BasedOnUbi", "elapsed_time": 1229, "description": "Checking if the container's base image is based upon the Red Hat Universal Base Image (UBI)" } ], "failed": [ { "name": "HasLicense", "elapsed_time": 0, time="2025-10-23T17:17:11Z" level=info msg="Preflight result: FAILED" "description": "Checking if terms and conditions applicable to the software including open source licensing information are present. The license must be at /licenses", "help": "Check HasLicense encountered an error. Please review the preflight.log file for more information.", "suggestion": "Create a directory named /licenses and include all relevant licensing and/or terms and conditions as text file(s) in that directory.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" } ], "errors": [] } } pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | container step-app-set-outcome: {"result":"FAILURE","timestamp":"1761239832","note":"Task preflight is a FAILURE: Refer to Tekton task logs for more information","successes":7,"failures":1,"warnings":0} pod: test-comp-pac-gitlab-tuhviac5705944f86113e6351e2fb679d8f37f-pod | container step-final-outcome: + [[ ! -f /mount/konflux.results.json ]] + tee /tekton/steps/step-final-outcome/results/test-output {"result":"FAILURE","timestamp":"1761239832","note":"Task preflight is a FAILURE: Refer to Tekton task logs for more information","successes":7,"failures":1,"warnings":0} pod: test-comp-pac-gitlab-tuhviae119707040c017e9bb7d96684f3a2d3a-pod | init container: prepare 2025/10/23 17:16:18 Entrypoint initialization pod: test-comp-pac-gitlab-tuhviae119707040c017e9bb7d96684f3a2d3a-pod | init container: place-scripts 2025/10/23 17:16:20 Decoded script /tekton/scripts/script-0-s5v2c 2025/10/23 17:16:20 Decoded script /tekton/scripts/script-1-hs6ld pod: test-comp-pac-gitlab-tuhviae119707040c017e9bb7d96684f3a2d3a-pod | container step-apply-additional-tags-from-parameter: No additional tags parameter specified pod: test-comp-pac-gitlab-tuhviae119707040c017e9bb7d96684f3a2d3a-pod | container step-apply-additional-tags-from-image-label: No additional tags specified in the image labels