[2026-08-21T05:34:54,825748502+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-bsua/python-component-0szzih
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-bsua/python-component-0szzih:on-pr-038244115406fa6dba461ac572bec1567034bf44@sha256:aeccc4b5687232ee2f5c81ccd431a5c940cdc5eec871af31f5d9332eb8b73ef4
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-bsua/python-component-0szzih@sha256:aeccc4b5687232ee2f5c81ccd431a5c940cdc5eec871af31f5d9332eb8b73ef4] to [quay.io/redhat-appstudio-qe/group-bsua/python-component-0szzih:sha256-aeccc4b5687232ee2f5c81ccd431a5c940cdc5eec871af31f5d9332eb8b73ef4.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-bsua/python-component-0szzih@sha256:9fb3800f23d8d215a1bb6efdf7321c36f6a52bd44f821a3ef59912d1637f2f05
[2026-08-21T05:35:21,787637519+00:00] End upload-sbom