pod: python-component-sdvudq-on-9173ab755b5d6aae233c7b6ddf911268-pod | init container: prepare
2026/08/15 03:03:46 Entrypoint initialization

 pod: python-component-sdvudq-on-9173ab755b5d6aae233c7b6ddf911268-pod | init container: place-scripts
2026/08/15 03:03:46 Decoded script /tekton/scripts/script-0-qm5m6
2026/08/15 03:03:46 Decoded script /tekton/scripts/script-1-r4w4b

pod: python-component-sdvudq-on-9173ab755b5d6aae233c7b6ddf911268-pod | container step-clone: 
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
{"level":"info","ts":1786763029.978418,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"}
{"level":"info","ts":1786763030.8900282,"caller":"git/git.go:223","msg":"Successfully cloned https://github.com/redhat-appstudio-qe/group-snapshot-multi-component @ 9f5c13d97546f3e09f506fc3d28dd64114053bfb (grafted, HEAD) in path /workspace/output/source"}
{"level":"info","ts":1786763030.89007,"caller":"git/git.go:394","msg":"Retrying operation (attempt 1)"}
{"level":"info","ts":1786763030.9165337,"caller":"git/git.go:277","msg":"Successfully initialized and updated submodules in path /workspace/output/source"}
Merge option disabled. Using checked-out revision 9f5c13d97546f3e09f506fc3d28dd64114053bfb directly.

pod: python-component-sdvudq-on-9173ab755b5d6aae233c7b6ddf911268-pod | container step-symlink-check: 
Running symlink check

 pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | init container: prepare
2026/08/15 03:04:10 Entrypoint initialization

 pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | init container: place-scripts
2026/08/15 03:04:13 Decoded script /tekton/scripts/script-0-n7pgj
2026/08/15 03:04:13 Decoded script /tekton/scripts/script-1-9fgck
2026/08/15 03:04:13 Decoded script /tekton/scripts/script-2-6q9px
2026/08/15 03:04:13 Decoded script /tekton/scripts/script-3-sx4bx
2026/08/15 03:04:13 Decoded script /tekton/scripts/script-4-zs82m

 pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | init container: working-dir-initializer

pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | container step-build: 
[2026-08-15T03:04:18,139626333+00:00] Validate context path
[2026-08-15T03:04:18,143328525+00:00] Update CA trust
[2026-08-15T03:04:18,144612211+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2026-08-15T03:04:21,247990307+00:00] Prepare Dockerfile
Checking if /var/workdir/cachi2/output/bom.json exists.
Could not find prefetched sbom. No content_sets found for ICM
[2026-08-15T03:04:21,308744559+00:00] Prepare system (architecture: x86_64)
[2026-08-15T03:04:21,381566864+00:00] Setup prefetched
Trying to pull registry.access.redhat.com/ubi9/python-39:1-117.1684741281...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:8a2e9815396eaa57b0dfe27b2dfc442417f06aa70974c358f198980b533c7942
Copying blob sha256:a07d808ddf4404b3885fef6100142a973cc667b2c3c4abcf4db96508795b1efb
Copying blob sha256:085efe85e9dfb0b3d5d2392e4b78660a3091bf1ded336315117a627fbdd0567d
Copying blob sha256:5465449a2ea5d8a7e05fa498c8ba35f0ce7714b0ad37e716961fca17dfa1ef13
Copying config sha256:45c8f23c11bb64f238236aaf5cbe05595778e1d4fb6c06109c6fcc0a6b57a45b
Writing manifest to image destination
Storing signatures
[2026-08-15T03:04:36,828442785+00:00] Unsetting proxy
{
  "architecture": "x86_64",
  "build-date": "2026-08-15T03:04:21Z",
  "com.redhat.component": "python-39-container",
  "com.redhat.license_terms": "https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI",
  "description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.",
  "distribution-scope": "public",
  "io.buildah.version": "1.42.2",
  "io.buildpacks.stack.id": "com.redhat.stacks.ubi9-python-39",
  "io.k8s.description": "Python 3.9 available as container is a base platform for building and running various Python 3.9 applications and frameworks. Python is an easy to learn, powerful programming language. It has efficient high-level data structures and a simple but effective approach to object-oriented programming. Python's elegant syntax and dynamic typing, together with its interpreted nature, make it an ideal language for scripting and rapid application development in many areas on most platforms.",
  "io.k8s.display-name": "Python 3.9",
  "io.openshift.expose-services": "8080:http",
  "io.openshift.s2i.scripts-url": "image:///usr/libexec/s2i",
  "io.openshift.tags": "builder,python,python39,python-39,rh-python39",
  "io.s2i.scripts-url": "image:///usr/libexec/s2i",
  "maintainer": "SoftwareCollections.org <sclorg@redhat.com>",
  "name": "ubi9/python-39",
  "release": "117.1684741281",
  "summary": "Platform for building and running Python 3.9 applications",
  "url": "https://access.redhat.com/containers/#/registry.access.redhat.com/ubi9/python-39/images/1-117.1684741281",
  "usage": "s2i build https://github.com/sclorg/s2i-python-container.git --context-dir=3.9/test/setup-test-app/ ubi9/python-39 python-sample-app",
  "vcs-ref": "9f5c13d97546f3e09f506fc3d28dd64114053bfb",
  "vcs-type": "git",
  "vendor": "Red Hat, Inc.",
  "version": "1",
  "org.opencontainers.image.revision": "9f5c13d97546f3e09f506fc3d28dd64114053bfb",
  "org.opencontainers.image.source": "https://github.com/redhat-appstudio-qe/group-snapshot-multi-component",
  "quay.expires-after": "5d",
  "org.opencontainers.image.created": "2026-08-15T03:04:21Z"
}
[2026-08-15T03:04:36,877644975+00:00] Register sub-man
Adding the entitlement to the build
[2026-08-15T03:04:36,881215062+00:00] Add secrets
[2026-08-15T03:04:36,894122968+00:00] Run buildah build
[2026-08-15T03:04:36,895352747+00:00] buildah build --volume /tmp/entitlement:/etc/pki/entitlement --security-opt=unmask=/proc/interrupts --label architecture=x86_64 --label vcs-type=git --label vcs-ref=9f5c13d97546f3e09f506fc3d28dd64114053bfb --label org.opencontainers.image.revision=9f5c13d97546f3e09f506fc3d28dd64114053bfb --label org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/group-snapshot-multi-component --label quay.expires-after=5d --label build-date=2026-08-15T03:04:21Z --label org.opencontainers.image.created=2026-08-15T03:04:21Z --annotation org.opencontainers.image.revision=9f5c13d97546f3e09f506fc3d28dd64114053bfb --annotation org.opencontainers.image.source=https://github.com/redhat-appstudio-qe/group-snapshot-multi-component --annotation org.opencontainers.image.created=2026-08-15T03:04:21Z --tls-verify=true --no-cache --ulimit nofile=4096:4096 --http-proxy=false -f /tmp/Dockerfile.VBY7jR -t quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb . 
STEP 1/10: FROM registry.access.redhat.com/ubi9/python-39:1-117.1684741281
STEP 2/10: EXPOSE 8081/tcp
STEP 3/10: ENV FLASK_PORT=8081
STEP 4/10: WORKDIR /projects
STEP 5/10: COPY . .
STEP 6/10: RUN   if [ -f requirements.txt ];     then pip install -r requirements.txt;   elif [ `ls -1q *.txt | wc -l` == 1 ];     then pip install -r *.txt;   fi
Collecting Flask==2.3.3
  Downloading flask-2.3.3-py3-none-any.whl (96 kB)
Collecting Jinja2>=3.1.2
  Downloading jinja2-3.1.6-py3-none-any.whl (134 kB)
Collecting Werkzeug>=2.3.7
  Downloading werkzeug-3.1.8-py3-none-any.whl (226 kB)
Collecting itsdangerous>=2.1.2
  Downloading itsdangerous-2.2.0-py3-none-any.whl (16 kB)
Collecting importlib-metadata>=3.6.0
  Downloading importlib_metadata-8.7.1-py3-none-any.whl (27 kB)
Collecting click>=8.1.3
  Downloading click-8.1.8-py3-none-any.whl (98 kB)
Collecting blinker>=1.6.2
  Downloading blinker-1.9.0-py3-none-any.whl (8.5 kB)
Collecting zipp>=3.20
  Downloading zipp-3.23.1-py3-none-any.whl (10 kB)
Collecting MarkupSafe>=2.0
  Downloading markupsafe-3.0.3-cp39-cp39-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl (20 kB)
Installing collected packages: zipp, MarkupSafe, Werkzeug, Jinja2, itsdangerous, importlib-metadata, click, blinker, Flask
Successfully installed Flask-2.3.3 Jinja2-3.1.6 MarkupSafe-3.0.3 Werkzeug-3.1.8 blinker-1.9.0 click-8.1.8 importlib-metadata-8.7.1 itsdangerous-2.2.0 zipp-3.23.1
WARNING: You are using pip version 21.3.1; however, version 26.0.1 is available.
You should consider upgrading via the '/opt/app-root/bin/python3.9 -m pip install --upgrade pip' command.
STEP 7/10: CMD [ "python", "./app.py" ]
STEP 8/10: COPY labels.json /usr/share/buildinfo/labels.json
STEP 9/10: COPY labels.json /root/buildinfo/labels.json
STEP 10/10: LABEL "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="9f5c13d97546f3e09f506fc3d28dd64114053bfb" "org.opencontainers.image.revision"="9f5c13d97546f3e09f506fc3d28dd64114053bfb" "org.opencontainers.image.source"="https://github.com/redhat-appstudio-qe/group-snapshot-multi-component" "quay.expires-after"="5d" "build-date"="2026-08-15T03:04:21Z" "org.opencontainers.image.created"="2026-08-15T03:04:21Z"
COMMIT quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb
--> f6f7f028abe8
Successfully tagged quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb
f6f7f028abe86488590a53a7ca135f419fb902615fd4b016457dadcda75e6537
[2026-08-15T03:04:40,143458193+00:00] Unsetting proxy
[2026-08-15T03:04:40,144885431+00:00] Add metadata
Recording base image digests used
registry.access.redhat.com/ubi9/python-39:1-117.1684741281 registry.access.redhat.com/ubi9/python-39:1-117.1684741281@sha256:40a58935b9c22664927b22bf256f53a3d744ddb7316f3af18061099e199526ee
Getting image source signatures
Copying blob sha256:d93d3cc0bc0c5ed9655bcdcf31183ed0b570076c0e6a13e0d7cb907d0b877b00
Copying blob sha256:d082af86f5af0dcc44dec4209565ef1fcc8a19099d92282df0b05fa462fed2b1
Copying blob sha256:d661a108c347030c3ef626a0e0020e084fba1e1023193824f5395fa90ef40bde
Copying blob sha256:629980bfa23ec05ce5acc61ed2866ddf8713f40bb2a61f0850395082f1457220
Copying blob sha256:bc8a0003b3470be53e5cf295daf38c287d3f20ab90e8f5c2b6f17406b158d323
Copying config sha256:f6f7f028abe86488590a53a7ca135f419fb902615fd4b016457dadcda75e6537
Writing manifest to image destination
[2026-08-15T03:04:45,128358110+00:00] End build

pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | container step-push: 
[2026-08-15T03:04:45,298004971+00:00] Update CA trust
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2026-08-15T03:04:49,322993187+00:00] Convert image
[2026-08-15T03:04:49,324213953+00:00] Push image with unique tag
Pushing to quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:python-component-sdvudq-on-pull-request-bll6h-build-container
[retry] executing: buildah push --format=docker --retry 3 --tls-verify=true quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb docker://quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:python-component-sdvudq-on-pull-request-bll6h-build-container
Getting image source signatures
Copying blob sha256:d082af86f5af0dcc44dec4209565ef1fcc8a19099d92282df0b05fa462fed2b1
Copying blob sha256:bc8a0003b3470be53e5cf295daf38c287d3f20ab90e8f5c2b6f17406b158d323
Copying blob sha256:d93d3cc0bc0c5ed9655bcdcf31183ed0b570076c0e6a13e0d7cb907d0b877b00
Copying blob sha256:d661a108c347030c3ef626a0e0020e084fba1e1023193824f5395fa90ef40bde
Copying blob sha256:629980bfa23ec05ce5acc61ed2866ddf8713f40bb2a61f0850395082f1457220
Copying config sha256:f6f7f028abe86488590a53a7ca135f419fb902615fd4b016457dadcda75e6537
Writing manifest to image destination
[2026-08-15T03:05:21,367698911+00:00] Push image with git revision
Pushing to quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb
[retry] executing: buildah push --format=docker --retry 3 --tls-verify=true --digestfile /workspace/source/image-digest quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb docker://quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb
Getting image source signatures
Copying blob sha256:d082af86f5af0dcc44dec4209565ef1fcc8a19099d92282df0b05fa462fed2b1
Copying blob sha256:d661a108c347030c3ef626a0e0020e084fba1e1023193824f5395fa90ef40bde
Copying blob sha256:bc8a0003b3470be53e5cf295daf38c287d3f20ab90e8f5c2b6f17406b158d323
Copying blob sha256:629980bfa23ec05ce5acc61ed2866ddf8713f40bb2a61f0850395082f1457220
Copying blob sha256:d93d3cc0bc0c5ed9655bcdcf31183ed0b570076c0e6a13e0d7cb907d0b877b00
Copying config sha256:f6f7f028abe86488590a53a7ca135f419fb902615fd4b016457dadcda75e6537
Writing manifest to image destination
sha256:60965af70c4cbf9d5048fa53cb73850ce6d9cbc0e9d560195d839fa1c97af81equay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb
[retry] executing: kubectl get configmap cluster-config -n konflux-info -o json
Keyless signing is disabled (none of rekorInternalUrl, fulcioInternalUrl, defaultOIDCIssuer, tufInternalUrl are configured in the konflux-info/cluster-config configmap)
[2026-08-15T03:05:22,341211176+00:00] End push

pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | container step-sbom-syft-generate: 
[2026-08-15T03:05:22,495864133+00:00] Generate SBOM
Running syft on the image
Running syft on the source code
[0000]  WARN no explicit name and version provided for directory source, deriving artifact ID from the given path (which is not ideal)
[2026-08-15T03:05:44,058309143+00:00] End sbom-syft-generate

pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | container step-prepare-sboms: 
[2026-08-15T03:05:44,161291699+00:00] Prepare SBOM
[2026-08-15T03:05:44,240662809+00:00] Generate SBOM with mobster
Skipping SBOM validation
2026-08-15 03:05:55,647 [INFO] mobster.log: Logging level set to 20
2026-08-15 03:06:00,541 [INFO] mobster.oci: Fetching manifest for registry.access.redhat.com/ubi9/python-39@sha256:40a58935b9c22664927b22bf256f53a3d744ddb7316f3af18061099e199526ee
2026-08-15 03:06:04,132 [INFO] mobster.cmd.generate.oci_image.contextual_sbom.contextualize: Contextual mechanism won't be used, there is no parent image SBOM.
2026-08-15 03:06:04,132 [INFO] mobster.cmd.generate.oci_image: Contextual SBOM workflow finished successfully.
2026-08-15 03:06:04,135 [INFO] mobster.log: Contextual workflow completed in 4.79s
2026-08-15 03:06:05,640 [INFO] mobster.main: Exiting with code 0.
[2026-08-15T03:06:06,645903889+00:00] End prepare-sboms

pod: python-component-sdvudq-on-f5b8d3ae9e43ed8f387b2d2f8035da99-pod | container step-upload-sbom: 
[2026-08-15T03:06:07,678603924+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:on-pr-9f5c13d97546f3e09f506fc3d28dd64114053bfb@sha256:60965af70c4cbf9d5048fa53cb73850ce6d9cbc0e9d560195d839fa1c97af81e
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq@sha256:60965af70c4cbf9d5048fa53cb73850ce6d9cbc0e9d560195d839fa1c97af81e] to [quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq:sha256-60965af70c4cbf9d5048fa53cb73850ce6d9cbc0e9d560195d839fa1c97af81e.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-daon/python-component-sdvudq@sha256:00c49ca5cea6d27ad9bb0b60ac5933a4b76f9b696537c2554754e2d920f0e1f1
[2026-08-15T03:06:36,863420547+00:00] End upload-sbom

 pod: python-component-sdvudq-on-pull-request-bll6h-init-pod | init container: prepare
2026/08/15 03:03:40 Entrypoint initialization

pod: python-component-sdvudq-on-pull-request-bll6h-init-pod | container step-init: 
time="2026-08-15T03:03:43Z" level=info msg="Using in-cluster config" logger=KubeClient
time="2026-08-15T03:03:43Z" level=info msg="[param] ENABLE: false"
time="2026-08-15T03:03:43Z" level=info msg="[param] DEFAULT HTTP PROXY: squid.caching.svc.cluster.local:3128"
time="2026-08-15T03:03:43Z" level=info msg="[param] DEFAULT NO PROXY: brew.registry.redhat.io,docker.io,gcr.io,ghcr.io,images.paas.redhat.com,mirror.gcr.io,nvcr.io,quay.io,registry-proxy.engineering.redhat.com,registry.access.redhat.com,registry.ci.openshift.org,registry.fedoraproject.org,registry.redhat.io,registry.stage.redhat.io,vault.habana.ai"
time="2026-08-15T03:03:43Z" level=info msg="[param] HTTP PROXY RESULT PATH: /tekton/results/http-proxy"
time="2026-08-15T03:03:43Z" level=info msg="[param] NO PROXY RESULT PATH: /tekton/results/no-proxy"
time="2026-08-15T03:03:43Z" level=info msg="Cache proxy is disabled in param or in backend"
time="2026-08-15T03:03:43Z" level=info msg="[result] HTTP PROXY: "
time="2026-08-15T03:03:43Z" level=info msg="[result] NO PROXY: "