pod: go-component-wrjatm-on-pull-request-dhkwl-apply-tags-pod | init container: prepare 2025/11/04 08:07:08 Entrypoint initialization pod: go-component-wrjatm-on-pull-request-dhkwl-apply-tags-pod | init container: place-scripts 2025/11/04 08:07:11 Decoded script /tekton/scripts/script-0-782j6 2025/11/04 08:07:11 Decoded script /tekton/scripts/script-1-d6p4t pod: go-component-wrjatm-on-pull-request-dhkwl-apply-tags-pod | container step-apply-additional-tags-from-parameter: No additional tags parameter specified pod: go-component-wrjatm-on-pull-request-dhkwl-apply-tags-pod | container step-apply-additional-tags-from-image-label: No additional tags specified in the image labels pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | init container: prepare 2025/11/04 08:04:48 Entrypoint initialization pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | init container: place-scripts 2025/11/04 08:04:48 Decoded script /tekton/scripts/script-0-hwpzz 2025/11/04 08:04:48 Decoded script /tekton/scripts/script-1-gh2kd 2025/11/04 08:04:48 Decoded script /tekton/scripts/script-2-rl6jw 2025/11/04 08:04:48 Decoded script /tekton/scripts/script-3-tct9t 2025/11/04 08:04:49 Decoded script /tekton/scripts/script-4-tffrh pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | init container: working-dir-initializer pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | container step-build: [2025-11-04T08:04:52,937080240+00:00] Validate context path [2025-11-04T08:04:52,941971002+00:00] Update CA trust [2025-11-04T08:04:52,943558294+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-11-04T08:04:56,070023191+00:00] Prepare Dockerfile Checking if /var/workdir/cachi2/output/bom.json exists. Could not find prefetched sbom. No content_sets found for ICM [2025-11-04T08:04:56,079284152+00:00] Prepare system (architecture: x86_64) [2025-11-04T08:04:56,170074699+00:00] Setup prefetched Trying to pull registry.access.redhat.com/ubi9/go-toolset:1.18.9-14... Getting image source signatures Checking if image destination supports signatures Copying blob sha256:e76793d6902ad1adb19ede3d720024cf0cd8427b3ff606554a4bcafba03dddf4 Copying blob sha256:4a13c0e9217d70e608f2d5f5d3c5ffa6d9cd16908b3f83a7a97492d355d25a09 Copying blob sha256:2a625e4afab51b49edb0e5f4ff37d8afbb20ec644ed1e68641358a6305557de3 Copying blob sha256:0ab0ba77295aca9b12f463cb7198f0b8b6990b41151dbbd4e1b224fe85244b83 Copying config sha256:391a2eac28d98dc72726df1faa77db28f6899a77c91ad40f2bdad62baf041301 Writing manifest to image destination Storing signatures [2025-11-04T08:05:15,484553851+00:00] Unsetting proxy { "architecture": "x86_64", "build-date": "2025-11-04T08:04:56Z", "com.redhat.component": "go-toolset-container", "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI", "description": "Go Toolset available as a container is a base platform for building and running various Go applications and frameworks. Go is an easy to learn, powerful, statically typed language in the C/C++ tradition with garbage collection, concurrent programming support, and memory safety features.", "distribution-scope": "public", "io.buildah.version": "1.41.4", "io.k8s.description": "Go Toolset available as a container is a base platform for building and running various Go applications and frameworks. Go is an easy to learn, powerful, statically typed language in the C/C++ tradition with garbage collection, concurrent programming support, and memory safety features.", "io.k8s.display-name": "Go 1.18.9", "io.openshift.expose-services": "", "io.openshift.s2i.scripts-url": "image:///usr/libexec/s2i", "io.openshift.tags": "builder,golang,golang118,rh-golang118,go", "io.s2i.scripts-url": "image:///usr/libexec/s2i", "maintainer": "Red Hat, Inc.", "name": "rhel9/go-toolset", "release": "14", "summary": "Platform for building and running Go Applications", "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/rhel9/go-toolset/images/1.18.9-14", "vcs-ref": "ed50087b5c1130a449a301802d36cc8feb97e28a", "vcs-type": "git", "vendor": "Red Hat, Inc.", "version": "1.18.9", "org.opencontainers.image.revision": "ed50087b5c1130a449a301802d36cc8feb97e28a", "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/group-snapshot-multi-component", "quay.expires-after": "5d" } [2025-11-04T08:05:15,555118119+00:00] Register sub-man Adding the entitlement to the build [2025-11-04T08:05:15,559932338+00:00] Add secrets [2025-11-04T08:05:15,582456283+00:00] Run buildah build [2025-11-04T08:05:15,584106560+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=ed50087b5c1130a449a301802d36cc8feb97e28a --label org.opencontainers.image.revision=ed50087b5c1130a449a301802d36cc8feb97e28a --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/group-snapshot-multi-component --label quay.expires-after=5d --label build-date=2025-11-04T08:04:56Z --annotation org.opencontainers.image.revision=ed50087b5c1130a449a301802d36cc8feb97e28a --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/group-snapshot-multi-component --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.wiGMEv -t quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a . STEP 1/10: FROM registry.access.redhat.com/ubi9/go-toolset:1.18.9-14 STEP 2/10: COPY . . STEP 3/10: RUN go mod download go: no module dependencies to download STEP 4/10: RUN go build -o ./main STEP 5/10: ENV PORT 8081 STEP 6/10: EXPOSE 8081 STEP 7/10: CMD [ "./main" ] STEP 8/10: COPY labels.json /usr/share/buildinfo/labels.json STEP 9/10: COPY labels.json /root/buildinfo/labels.json STEP 10/10: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="ed50087b5c1130a449a301802d36cc8feb97e28a" "org.opencontainers.image.revision"="ed50087b5c1130a449a301802d36cc8feb97e28a" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/group-snapshot-multi-component" "quay.expires-after"="5d" "build-date"="2025-11-04T08:04:56Z" COMMIT quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a --> b58f99761c6a Successfully tagged quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a b58f99761c6a66162a9de4e5809d86e5f3a891dc144f4418d1ccb35dc1aa408f [2025-11-04T08:05:19,031725097+00:00] Unsetting proxy [2025-11-04T08:05:19,033419790+00:00] Add metadata Recording base image digests used registry.access.redhat.com/ubi9/go-toolset:1.18.9-14 registry.access.redhat.com/ubi9/go-toolset:1.18.9-14@sha256:4e320bd8b62e406dfc567886aeab4914db125c73fe9ec308b306c72883101d51 Getting image source signatures Copying blob sha256:e1d5bc1df5dd873ecbeaed1895bfd0a8124087ae19526a033bee820bba568eaf Copying blob sha256:db77b3de17313a3fab2620178c01a4ef8eb60cbe722a6e9390f3cbb1132a7d22 Copying blob sha256:314640f419c581ddcac8f3618af39342a4571d5dc7a4e1f5b64d60f37e630b49 Copying blob sha256:d3f6a420cbadfb30033dc481690b39191ce6d2d841ccd54434c352f474ea54c3 Copying blob sha256:a653a5ff4eaef6037f4f354414ab251ac7218d2d42fc8326743fc63ecf2cabd5 Copying config sha256:b58f99761c6a66162a9de4e5809d86e5f3a891dc144f4418d1ccb35dc1aa408f Writing manifest to image destination [2025-11-04T08:05:28,485131854+00:00] End build pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | container step-push: [2025-11-04T08:05:29,087374527+00:00] Update CA trust INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' [2025-11-04T08:05:32,156207810+00:00] Convert image [2025-11-04T08:05:32,157721871+00:00] Push image with unique tag Pushing to quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:go-component-wrjatm-on-pull-request-dhkwl-build-container Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a docker://quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:go-component-wrjatm-on-pull-request-dhkwl-build-container [2025-11-04T08:05:45,997295018+00:00] Push image with git revision Pushing to quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a docker://quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a sha256:b3621c2a0d2556cc5b47b517bf172e6f34fc9974dabb1c6429cdea3473562485quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a [2025-11-04T08:05:48,763981252+00:00] End push pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | container step-sbom-syft-generate: [2025-11-04T08:05:49,240664306+00:00] Generate SBOM Running syft on the image Running syft on the source code [0000] WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal) [2025-11-04T08:06:19,118697577+00:00] End sbom-syft-generate pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | container step-prepare-sboms: [2025-11-04T08:06:19,423795716+00:00] Prepare SBOM [2025-11-04T08:06:19,429663184+00:00] Generate SBOM with mobster 2025-11-04 08:06:28,843 [INFO] mobster.log: Logging level set to 20 2025-11-04 08:06:31,012 [INFO] mobster.main: Exiting with code 0. [2025-11-04T08:06:31,163752959+00:00] End prepare-sboms pod: go-component-wrjatm-on-pull-request-dhkwl-build-container-pod | container step-upload-sbom: [2025-11-04T08:06:31,573956829+00:00] Upload SBOM INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt '/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt' Using token for quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm Pushing sbom to registry Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-ed50087b5c1130a449a301802d36cc8feb97e28a@sha256:b3621c2a0d2556cc5b47b517bf172e6f34fc9974dabb1c6429cdea3473562485 quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm@sha256:565147147948cded047d8188d6620a08f470b293cee4196f3424d476c43cf70b [2025-11-04T08:06:36,371750044+00:00] End upload-sbom pod: go-component-wrjatm-on-pull-request-dhkwl-build-image-index-pod | init container: prepare 2025/11/04 08:06:39 Entrypoint initialization pod: go-component-wrjatm-on-pull-request-dhkwl-build-image-index-pod | init container: place-scripts 2025/11/04 08:06:40 Decoded script /tekton/scripts/script-0-fhpn6 2025/11/04 08:06:40 Decoded script /tekton/scripts/script-1-dfs58 2025/11/04 08:06:40 Decoded script /tekton/scripts/script-2-5qc4f pod: go-component-wrjatm-on-pull-request-dhkwl-build-image-index-pod | container step-build: 622b933b97b00e3e2f6b0003a89c8b15557d6188fe2b79cb914dd0931531f626 Skipping image index generation. Returning results for quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm@sha256:b3621c2a0d2556cc5b47b517bf172e6f34fc9974dabb1c6429cdea3473562485. pod: go-component-wrjatm-on-pull-request-dhkwl-build-image-index-pod | container step-create-sbom: The manifest_data.json file does not exist. Skipping the SBOM creation... pod: go-component-wrjatm-on-pull-request-dhkwl-build-image-index-pod | container step-upload-sbom: The index.spdx.json file does not exists. Skipping the SBOM upload... pod: go-component-wrjatm-on-pull-request-dhkwl-clair-scan-pod | init container: prepare 2025/11/04 08:06:52 Entrypoint initialization pod: go-component-wrjatm-on-pull-request-dhkwl-clair-scan-pod | init container: place-scripts