pod: test-comp-pac-gitlab-fwdtgy-on-pull-request-2psc9-init-pod | init container: prepare 2025/11/02 09:30:13 Entrypoint initialization pod: test-comp-pac-gitlab-fwdtgy-on-pull-request-2psc9-init-pod | init container: place-scripts 2025/11/02 09:30:15 Decoded script /tekton/scripts/script-0-6k479 pod: test-comp-pac-gitlab-fwdtgy-on-pull-request-2psc9-init-pod | container step-init: Build Initialize: quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae Determine if Image Already Exists pod: test-comp-pac-gitlab-fwdtgy1174011c882d2307aea5feb7534018da-pod | init container: prepare 2025/11/02 09:33:27 Entrypoint initialization pod: test-comp-pac-gitlab-fwdtgy1174011c882d2307aea5feb7534018da-pod | init container: place-scripts 2025/11/02 09:33:34 Decoded script /tekton/scripts/script-0-rsblt 2025/11/02 09:33:34 Decoded script /tekton/scripts/script-1-gn44w pod: test-comp-pac-gitlab-fwdtgy1174011c882d2307aea5feb7534018da-pod | container step-apply-additional-tags-from-parameter: No additional tags parameter specified pod: test-comp-pac-gitlab-fwdtgy1174011c882d2307aea5feb7534018da-pod | container step-apply-additional-tags-from-image-label: No additional tags specified in the image labels pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | init container: prepare 2025/11/02 09:33:19 Entrypoint initialization pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | init container: place-scripts 2025/11/02 09:33:27 Decoded script /tekton/scripts/script-0-p6d6t 2025/11/02 09:33:27 Decoded script /tekton/scripts/script-1-mzf7c 2025/11/02 09:33:27 Decoded script /tekton/scripts/script-2-lrvd2 2025/11/02 09:33:27 Decoded script /tekton/scripts/script-3-cdm2f 2025/11/02 09:33:27 Decoded script /tekton/scripts/script-4-g9dzw 2025/11/02 09:33:27 Decoded script /tekton/scripts/script-5-dfbrm pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | container step-introspect: Artifact type will be determined by introspection. Checking the media type of the OCI artifact... Executing: skopeo inspect --raw --retry-times 3 docker://quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae The media type of the OCI artifact is application/vnd.docker.distribution.manifest.v2+json. Looking for image labels that indicate this might be an operator bundle... Executing: skopeo inspect --retry-times 3 docker://quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae Found 0 matching labels. Expecting 3 or more to identify this image as an operator bundle. Introspection concludes that this artifact is of type "application". pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | container step-generate-container-auth: Selecting auth for quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae Using token for quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy Auth json written to "/auth/auth.json". pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | container step-set-skip-for-bundles: 2025/11/02 09:35:06 INFO Step was skipped due to when expressions were evaluated to false. pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | container step-app-check: time="2025-11-02T09:35:06Z" level=info msg="certification library version" version="1.14.1 " time="2025-11-02T09:35:07Z" level=info msg="running checks for quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae for platform amd64" time="2025-11-02T09:35:07Z" level=info msg="target image" image="quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae" time="2025-11-02T09:35:28Z" level=info msg="check completed" check=HasLicense result=FAILED time="2025-11-02T09:35:28Z" level=info msg="check completed" check=HasUniqueTag result=PASSED time="2025-11-02T09:35:28Z" level=info msg="check completed" check=LayerCountAcceptable result=PASSED time="2025-11-02T09:35:28Z" level=info msg="check completed" check=HasNoProhibitedPackages result=PASSED time="2025-11-02T09:35:28Z" level=info msg="check completed" check=HasRequiredLabel result=PASSED time="2025-11-02T09:35:28Z" level=info msg="USER 185 specified that is non-root" check=RunAsNonRoot time="2025-11-02T09:35:28Z" level=info msg="check completed" check=RunAsNonRoot result=PASSED time="2025-11-02T09:35:40Z" level=info msg="check completed" check=HasModifiedFiles result=PASSED time="2025-11-02T09:35:42Z" level=info msg="check completed" check=BasedOnUbi result=PASSED time="2025-11-02T09:35:42Z" level=info msg="This image's tag on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae will be paired with digest sha256:6a297ac6697073d66c31aeab61bffc77ed7a92a14f96465e002a68320cc0cf2c once this image has been published in accordance with Red Hat Certification policy. You may then add or remove any supplemental tags through your Red Hat Connect portal as you see fit." { time="2025-11-02T09:35:42Z" level=info msg="Preflight result: FAILED" "image": "quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae", "passed": false, "test_library": { "name": "github.com/redhat-openshift-ecosystem/openshift-preflight", "version": "1.14.1", "commit": "436b6cd740f4144eba59ad1378be00383c7b0269" }, "results": { "passed": [ { "name": "HasUniqueTag", "elapsed_time": 0, "description": "Checking if container has a tag other than 'latest', so that the image can be uniquely identified." }, { "name": "LayerCountAcceptable", "elapsed_time": 0, "description": "Checking if container has less than 40 layers. Too many layers within the container images can degrade container performance." }, { "name": "HasNoProhibitedPackages", "elapsed_time": 66, "description": "Checks to ensure that the image in use does not include prohibited packages, such as Red Hat Enterprise Linux (RHEL) kernel packages." }, { "name": "HasRequiredLabel", "elapsed_time": 0, "description": "Checking if the required labels (name, vendor, version, release, summary, description, maintainer) are present in the container metadata" }, { "name": "RunAsNonRoot", "elapsed_time": 0, "description": "Checking if container runs as the root user because a container that does not specify a non-root user will fail the automatic certification, and will be subject to a manual review before the container can be approved for publication" }, { "name": "HasModifiedFiles", "elapsed_time": 11866, "description": "Checks that no files installed via RPM in the base Red Hat layer have been modified" }, { "name": "BasedOnUbi", "elapsed_time": 1282, "description": "Checking if the container's base image is based upon the Red Hat Universal Base Image (UBI)" } ], "failed": [ { "name": "HasLicense", "elapsed_time": 0, "description": "Checking if terms and conditions applicable to the software including open source licensing information are present. The license must be at /licenses", "help": "Check HasLicense encountered an error. Please review the preflight.log file for more information.", "suggestion": "Create a directory named /licenses and include all relevant licensing and/or terms and conditions as text file(s) in that directory.", "knowledgebase_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction", "check_url": "https://access.redhat.com/documentation/en-us/red_hat_software_certification/2024/html-single/red_hat_openshift_software_certification_policy_guide/index#assembly-requirements-for-container-images_openshift-sw-cert-policy-introduction" } ], "errors": [] } } pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | container step-app-set-outcome: {"result":"FAILURE","timestamp":"1762076142","note":"Task preflight is a FAILURE: Refer to Tekton task logs for more information","successes":7,"failures":1,"warnings":0} pod: test-comp-pac-gitlab-fwdtgy37fb59469e922ad312ba9b11af963bdf-pod | container step-final-outcome: + [[ ! -f /mount/konflux.results.json ]] + tee /tekton/steps/step-final-outcome/results/test-output {"result":"FAILURE","timestamp":"1762076142","note":"Task preflight is a FAILURE: Refer to Tekton task logs for more information","successes":7,"failures":1,"warnings":0} pod: test-comp-pac-gitlab-fwdtgy7e48b278aad5b1a0ae45d224909b0ff4-pod | init container: prepare 2025/11/02 09:33:21 Entrypoint initialization pod: test-comp-pac-gitlab-fwdtgy7e48b278aad5b1a0ae45d224909b0ff4-pod | init container: place-scripts 2025/11/02 09:33:29 Decoded script /tekton/scripts/script-0-7l94d 2025/11/02 09:33:29 Decoded script /tekton/scripts/script-1-5v2qp pod: test-comp-pac-gitlab-fwdtgy7e48b278aad5b1a0ae45d224909b0ff4-pod | container step-extract-and-scan-image: Starting clamd ... clamd is ready! Extracting image(s). Running "oc image extract" on image of arch amd64 Scanning image for arch amd64. This operation may take a while. ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 25.196 sec (0 m 25 s) Start Date: 2025:11:02 09:34:46 End Date: 2025:11:02 09:35:11 Executed-on: Scan was executed on clamsdcan version - ClamAV 1.4.3/27810/Sat Nov 1 09:43:56 2025 Database version: 27810 [ { "filename": "/work/logs/clamscan-result-log-amd64.json", "namespace": "required_checks", "successes": 2 } ] {"timestamp":"1762076111","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1762076111","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"timestamp":"1762076111","namespace":"required_checks","successes":2,"failures":0,"warnings":0,"result":"SUCCESS","note":"All checks passed successfully"} {"image": {"pullspec": "quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae", "digests": ["sha256:6a297ac6697073d66c31aeab61bffc77ed7a92a14f96465e002a68320cc0cf2c"]}} pod: test-comp-pac-gitlab-fwdtgy7e48b278aad5b1a0ae45d224909b0ff4-pod | container step-upload: Selecting auth Using token for quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy Attaching to quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae Executing: oras attach --no-tty --registry-config /home/oras/auth.json --artifact-type application/vnd.clamav quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae@sha256:6a297ac6697073d66c31aeab61bffc77ed7a92a14f96465e002a68320cc0cf2c clamscan-result-amd64.log:text/vnd.clamav clamscan-ec-test-amd64.json:application/vnd.konflux.test_output+json Preparing clamscan-result-amd64.log Preparing clamscan-ec-test-amd64.json Uploading d5f1026b8427 clamscan-result-amd64.log Uploading 5788073e6165 clamscan-ec-test-amd64.json Exists 44136fa355b3 application/vnd.oci.empty.v1+json Uploaded d5f1026b8427 clamscan-result-amd64.log Uploaded 5788073e6165 clamscan-ec-test-amd64.json Uploading 2765485a0888 application/vnd.oci.image.manifest.v1+json Uploaded 2765485a0888 application/vnd.oci.image.manifest.v1+json Attached to [registry] quay.io/redhat-appstudio-qe/gitlab-rep-lmyn/test-comp-pac-gitlab-fwdtgy:on-pr-7815edac4045fda2c3e68aadb38249ee6c5c7cae@sha256:6a297ac6697073d66c31aeab61bffc77ed7a92a14f96465e002a68320cc0cf2c Digest: sha256:2765485a08887ad516288ea04763d5458047a132b4d14812548dbf2591a437d2