[2026-08-20T20:03:41,686512818+00:00] Upload SBOM
INFO: Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
'/mnt/trusted-ca/ca-bundle.crt' -> '/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
Using token for quay.io/redhat-appstudio-qe/group-mw7t/konflux-test-integration-clone-zqn8qb
Pushing sbom to registry
[retry] executing: cosign attach sbom --sbom sbom.json --type spdx quay.io/redhat-appstudio-qe/group-mw7t/konflux-test-integration-clone-zqn8qb:on-pr-207ec618bacf18a603be02072b460b5ae71922dc@sha256:c9f18bb5ae87f5416e697a405e3092fb7a8493d2fa45105a61442668e58680af
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom.json --key <key path>'.
Uploading SBOM file for [quay.io/redhat-appstudio-qe/group-mw7t/konflux-test-integration-clone-zqn8qb@sha256:c9f18bb5ae87f5416e697a405e3092fb7a8493d2fa45105a61442668e58680af] to [quay.io/redhat-appstudio-qe/group-mw7t/konflux-test-integration-clone-zqn8qb:sha256-c9f18bb5ae87f5416e697a405e3092fb7a8493d2fa45105a61442668e58680af.sbom] with mediaType [text/spdx+json].

quay.io/redhat-appstudio-qe/group-mw7t/konflux-test-integration-clone-zqn8qb@sha256:d4533ce89edc2de57a09ceef01025f433c1d2967092674b68b4dae775008feb0
[2026-08-20T20:04:21,893118881+00:00] End upload-sbom