Container: step-upload-sbom WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate sbom-cyclonedx.json --key '. Uploading SBOM file for [quay.io/rhtap_qe/rhtap-qe-java-quarkus:f6e7aa45f16da8b1a46c46d8e7667c6bfe3a10e0] to [quay.io/rhtap_qe/rhtap-qe-java-quarkus:sha256-30f3a1071e7ed8015466b0e9becfa81fce223d52dd036eb3edbc645cbe782fa0.sbom] with mediaType [application/vnd.cyclonedx+json].