[2026-08-18T04:16:17,720483074+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-d695/python-component-rx5693
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-d695/python-component-rx5693:on-pr-ce464f64d0c4e970df1b216126e96a34f9e31afe@sha256:3e48dd964b51758987f1c54545b285b8b410b17885b3bff6ce9df63effbb096b
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-d695/python-component-rx5693@sha256:3e48dd964b51758987f1c54545b285b8b410b17885b3bff6ce9df63effbb096b] to [quay.io/redhat-appstudio-qe/group-d695/python-component-rx5693:sha256-3e48dd964b51758987f1c54545b285b8b410b17885b3bff6ce9df63effbb096b.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-d695/python-component-rx5693@sha256:57712e7b6d02dba2df04f9802602f5ba942fe73bb403aa876112f32352d12fdb
[2026-08-18T04:16:46,987349727+00:00] End upload-sbom