Container: step-upload-sbom
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom-cyclonedx.json --key <key path>'.
Uploading SBOM file for [quay.io/rhtap_qe/rhtap-qe-java-springboot:cd63397f700f5fc657ce9867ec2c5ebd99501ba1] to [quay.io/rhtap_qe/rhtap-qe-java-springboot:sha256-972f249c99b8f7751b346d06bbb2f413509cc43432c9d42dc20f07b67f784c1f.sbom] with mediaType [application/vnd.cyclonedx+json].