[2026-06-30T20:03:51,240316511+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-r9c5/konflux-test-integration-clone-b0j7bx
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-r9c5/konflux-test-integration-clone-b0j7bx:on-pr-59b43c3085fcaea677c6bda9b03cdad98c8a457d@sha256:dc42863da1a7a29dcc42e2ab06bf57ba74c6494e3c22877f606f8a16d221f55e
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-r9c5/konflux-test-integration-clone-b0j7bx@sha256:dc42863da1a7a29dcc42e2ab06bf57ba74c6494e3c22877f606f8a16d221f55e] to [quay.io/redhat-appstudio-qe/group-r9c5/konflux-test-integration-clone-b0j7bx:sha256-dc42863da1a7a29dcc42e2ab06bf57ba74c6494e3c22877f606f8a16d221f55e.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-r9c5/konflux-test-integration-clone-b0j7bx@sha256:d3f8085f2591d6af618fb8112637bbbb6881b6373e2f6825dc5e70e8a6c4d40a
[2026-06-30T20:04:17,303416819+00:00] End upload-sbom