pod: go-component-wrjatm-on-pull-request-ghc2k-apply-tags-pod | init container: prepare
2025/11/04 08:00:11 Entrypoint initialization

 pod: go-component-wrjatm-on-pull-request-ghc2k-apply-tags-pod | init container: place-scripts
2025/11/04 08:00:12 Decoded script /tekton/scripts/script-0-m5qn6
2025/11/04 08:00:12 Decoded script /tekton/scripts/script-1-crmw4

pod: go-component-wrjatm-on-pull-request-ghc2k-apply-tags-pod | container step-apply-additional-tags-from-parameter: 
No additional tags parameter specified

pod: go-component-wrjatm-on-pull-request-ghc2k-apply-tags-pod | container step-apply-additional-tags-from-image-label: 
No additional tags specified in the image labels

 pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | init container: prepare
2025/11/04 07:56:50 Entrypoint initialization

 pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | init container: place-scripts
2025/11/04 07:56:51 Decoded script /tekton/scripts/script-0-xmlzv
2025/11/04 07:56:51 Decoded script /tekton/scripts/script-1-4vzlr
2025/11/04 07:56:51 Decoded script /tekton/scripts/script-2-xpgqn
2025/11/04 07:56:51 Decoded script /tekton/scripts/script-3-pcqqp
2025/11/04 07:56:51 Decoded script /tekton/scripts/script-4-z9pwp

 pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | init container: working-dir-initializer

pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | container step-build: 
[2025-11-04T07:57:26,796896916+00:00] Validate context path
[2025-11-04T07:57:26,801761563+00:00] Update CA trust
[2025-11-04T07:57:26,803478449+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2025-11-04T07:57:29,811004569+00:00] Prepare Dockerfile
Checking if /var/workdir/cachi2/output/bom.json exists.
Could not find prefetched sbom. No content_sets found for ICM
[2025-11-04T07:57:29,821884768+00:00] Prepare system (architecture: x86_64)
[2025-11-04T07:57:29,929341299+00:00] Setup prefetched
Trying to pull registry.access.redhat.com/ubi9/go-toolset:1.18.9-14...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:e76793d6902ad1adb19ede3d720024cf0cd8427b3ff606554a4bcafba03dddf4
Copying blob sha256:2a625e4afab51b49edb0e5f4ff37d8afbb20ec644ed1e68641358a6305557de3
Copying blob sha256:4a13c0e9217d70e608f2d5f5d3c5ffa6d9cd16908b3f83a7a97492d355d25a09
Copying blob sha256:0ab0ba77295aca9b12f463cb7198f0b8b6990b41151dbbd4e1b224fe85244b83
Copying config sha256:391a2eac28d98dc72726df1faa77db28f6899a77c91ad40f2bdad62baf041301
Writing manifest to image destination
Storing signatures
[2025-11-04T07:57:55,102185267+00:00] Unsetting proxy
{
  "architecture": "x86_64",
  "build-date": "2025-11-04T07:57:29Z",
  "com.redhat.component": "go-toolset-container",
  "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI",
  "description": "Go Toolset available as a container is a base platform for building and running various Go applications and frameworks. Go is an easy to learn, powerful, statically typed language in the C/C++ tradition with garbage collection, concurrent programming support, and memory safety features.",
  "distribution-scope": "public",
  "io.buildah.version": "1.41.4",
  "io.k8s.description": "Go Toolset available as a container is a base platform for building and running various Go applications and frameworks. Go is an easy to learn, powerful, statically typed language in the C/C++ tradition with garbage collection, concurrent programming support, and memory safety features.",
  "io.k8s.display-name": "Go 1.18.9",
  "io.openshift.expose-services": "",
  "io.openshift.s2i.scripts-url": "image:///usr/libexec/s2i",
  "io.openshift.tags": "builder,golang,golang118,rh-golang118,go",
  "io.s2i.scripts-url": "image:///usr/libexec/s2i",
  "maintainer": "Red Hat, Inc.",
  "name": "rhel9/go-toolset",
  "release": "14",
  "summary": "Platform for building and running Go Applications",
  "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/rhel9/go-toolset/images/1.18.9-14",
  "vcs-ref": "d479212b729395d5464c0d27ef8b5b2151f96c2a",
  "vcs-type": "git",
  "vendor": "Red Hat, Inc.",
  "version": "1.18.9",
  "org.opencontainers.image.revision": "d479212b729395d5464c0d27ef8b5b2151f96c2a",
  "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/group-snapshot-multi-component",
  "quay.expires-after": "5d"
}
[2025-11-04T07:57:55,166708670+00:00] Register sub-man
Adding the entitlement to the build
[2025-11-04T07:57:55,171529800+00:00] Add secrets
[2025-11-04T07:57:55,194111906+00:00] Run buildah build
[2025-11-04T07:57:55,195821955+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=d479212b729395d5464c0d27ef8b5b2151f96c2a --label org.opencontainers.image.revision=d479212b729395d5464c0d27ef8b5b2151f96c2a --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/group-snapshot-multi-component --label quay.expires-after=5d --label build-date=2025-11-04T07:57:29Z --annotation org.opencontainers.image.revision=d479212b729395d5464c0d27ef8b5b2151f96c2a --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/group-snapshot-multi-component --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.xTBzKA -t quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a . 
STEP 1/10: FROM registry.access.redhat.com/ubi9/go-toolset:1.18.9-14
STEP 2/10: COPY . .
STEP 3/10: RUN go mod download
go: no module dependencies to download
STEP 4/10: RUN go build -o ./main
STEP 5/10: ENV PORT 8081
STEP 6/10: EXPOSE 8081
STEP 7/10: CMD [ "./main" ]
STEP 8/10: COPY labels.json /usr/share/buildinfo/labels.json
STEP 9/10: COPY labels.json /root/buildinfo/labels.json
STEP 10/10: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="d479212b729395d5464c0d27ef8b5b2151f96c2a" "org.opencontainers.image.revision"="d479212b729395d5464c0d27ef8b5b2151f96c2a" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/group-snapshot-multi-component" "quay.expires-after"="5d" "build-date"="2025-11-04T07:57:29Z"
COMMIT quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a
--> 602d275a5166
Successfully tagged quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a
602d275a51666506b73393c1e00c20dfffc1d2268d8a43be910c9688ae6f5cf5
[2025-11-04T07:57:58,520132921+00:00] Unsetting proxy
[2025-11-04T07:57:58,521940062+00:00] Add metadata
Recording base image digests used
registry.access.redhat.com/ubi9/go-toolset:1.18.9-14 registry.access.redhat.com/ubi9/go-toolset:1.18.9-14@sha256:4e320bd8b62e406dfc567886aeab4914db125c73fe9ec308b306c72883101d51
Getting image source signatures
Copying blob sha256:54482125048391433acf56ad9c3d5e76439876a523771c96452f6a66622df3cd
Copying blob sha256:314640f419c581ddcac8f3618af39342a4571d5dc7a4e1f5b64d60f37e630b49
Copying blob sha256:a653a5ff4eaef6037f4f354414ab251ac7218d2d42fc8326743fc63ecf2cabd5
Copying blob sha256:d3f6a420cbadfb30033dc481690b39191ce6d2d841ccd54434c352f474ea54c3
Copying blob sha256:db77b3de17313a3fab2620178c01a4ef8eb60cbe722a6e9390f3cbb1132a7d22
Copying config sha256:602d275a51666506b73393c1e00c20dfffc1d2268d8a43be910c9688ae6f5cf5
Writing manifest to image destination
[2025-11-04T07:58:07,621086749+00:00] End build

pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | container step-push: 
[2025-11-04T07:58:07,987668518+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2025-11-04T07:58:11,218458832+00:00] Convert image
[2025-11-04T07:58:11,219974077+00:00] Push image with unique tag
Pushing to quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:go-component-wrjatm-on-pull-request-ghc2k-build-container
Executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a docker://quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:go-component-wrjatm-on-pull-request-ghc2k-build-container
[2025-11-04T07:58:28,420340930+00:00] Push image with git revision
Pushing to quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a
Executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a docker://quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a
sha256:3f05f8ce1d702ff85c4f68776513b60ed0acea52e6fbff40d8688c00be00218cquay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a
[2025-11-04T07:58:30,700923865+00:00] End push

pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | container step-sbom-syft-generate: 
[2025-11-04T07:58:31,177951450+00:00] Generate SBOM
Running syft on the image
Running syft on the source code
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
[2025-11-04T07:59:00,334242338+00:00] End sbom-syft-generate

pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | container step-prepare-sboms: 
[2025-11-04T07:59:01,247647980+00:00] Prepare SBOM
[2025-11-04T07:59:01,253484524+00:00] Generate SBOM with mobster
2025-11-04 07:59:03,024 [INFO] mobster.log: Logging level set to 20
2025-11-04 07:59:05,064 [INFO] mobster.main: Exiting with code 0.
[2025-11-04T07:59:05,143397270+00:00] End prepare-sboms

pod: go-component-wrjatm-on-pull-request-ghc2k-build-container-pod | container step-upload-sbom: 
[2025-11-04T07:59:05,332426807+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm
Pushing sbom to registry
Executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm:on-pr-d479212b729395d5464c0d27ef8b5b2151f96c2a@sha256:3f05f8ce1d702ff85c4f68776513b60ed0acea52e6fbff40d8688c00be00218c
quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm@sha256:6d12d5b8a21335124609a41e763bd4dd8afd708315209d5161b2cd0253a5628a
[2025-11-04T07:59:09,523709637+00:00] End upload-sbom

 pod: go-component-wrjatm-on-pull-request-ghc2k-build-image-index-pod | init container: prepare
2025/11/04 07:59:36 Entrypoint initialization

 pod: go-component-wrjatm-on-pull-request-ghc2k-build-image-index-pod | init container: place-scripts
2025/11/04 07:59:40 Decoded script /tekton/scripts/script-0-j6hwh
2025/11/04 07:59:40 Decoded script /tekton/scripts/script-1-c248j
2025/11/04 07:59:40 Decoded script /tekton/scripts/script-2-mgd4x

pod: go-component-wrjatm-on-pull-request-ghc2k-build-image-index-pod | container step-build: 
0c630cb9e3d86ac98b20893f9544a4d52179dcbea4d860ab826556348b0f7db0
Skipping image index generation. Returning results for quay.io/redhat-appstudio-qe/group-pewy/go-component-wrjatm@sha256:3f05f8ce1d702ff85c4f68776513b60ed0acea52e6fbff40d8688c00be00218c.

pod: go-component-wrjatm-on-pull-request-ghc2k-build-image-index-pod | container step-create-sbom: 
The manifest_data.json file does not exist. Skipping the SBOM creation...

pod: go-component-wrjatm-on-pull-request-ghc2k-build-image-index-pod | container step-upload-sbom: 
The index.spdx.json file does not exists. Skipping the SBOM upload...

 pod: go-component-wrjatm-on-pull-request-ghc2k-clair-scan-pod | init container: prepare
2025/11/04 07:59:49 Entrypoint initialization

 pod: go-component-wrjatm-on-pull-request-ghc2k-clair-scan-pod | init container: place-scripts