{
13 | try {
> 14 | expect(pipeline.isSuccessful()).toBe(true);
| ^
15 | } catch (error) {
16 | // If the assertion failed, get and print the logs
17 | console.log('🚨 Pipeline failed! Fetching pipeline logs...');
at expectPipelineSuccess (/workspace/e2e-test/src/utils/test/assertionHelpers.ts:14:37)
at getPipelineAndWaitForCompletion (/workspace/e2e-test/src/utils/test/common.ts:221:32)
at buildApplicationImageWithPR (/workspace/e2e-test/src/utils/test/common.ts:351:5)
at handleSourceRepoCodeChanges (/workspace/e2e-test/src/utils/test/common.ts:281:5)
at /workspace/e2e-test/tests/tssc/full_workflow.test.ts:80:7
]]>
'/etc/pki/ca-trust/source/anchors/ca-bundle.crt'
[2025-12-22T22:17:54,887973326+00:00] Validate context path
[1/2] STEP 1/4: FROM registry.access.redhat.com/ubi9/go-toolset:9.6-1755074415
Trying to pull registry.access.redhat.com/ubi9/go-toolset:9.6-1755074415...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:6eb532dd029d78a4b2ad069d69a804af2be4435a89d2cb6792bf5f334ae36fd5
Copying blob sha256:8dc3dd507e8f2ab81205758f892eb03ba642c80b7c6395bdbc1155ff99bd98e3
Copying blob sha256:ae922b28c8268663e64c0eebc1e114d2bab81f3b7c9efeb323d008bb4f0f0507
Copying blob sha256:56dd0a75a416c35f133fffa426764f20298a1b7020dd80fd4636fd9ebd4ee4a2
Copying config sha256:f0449ca339310f07c5eaf0d85af76230b574a673f58034ddb046d50ef0cf3e57
Writing manifest to image destination
Storing signatures
[1/2] STEP 2/4: COPY . .
[1/2] STEP 3/4: RUN go mod download
error running subprocess: masking non-directory "/var/tmp/buildah2698211765/mnt/rootfs/proc/interrupts" in mount namespace: permission denied
Error: building at STEP "RUN go mod download": exit status 1
--- Container: step-generate-sboms ---
2025/12/22 22:18:34 Skipping step because a previous step failed
--- Container: step-merge-sboms ---
2025/12/22 22:18:35 Skipping step because a previous step failed
--- Container: step-upload-sbom ---
2025/12/22 22:18:35 Skipping step because a previous step failed
--- TaskRun: show-summary (backend-tests-go-cjcuopuc-on-pull-request-dtrcf-show-summary) ---
--- Container: prepare ---
2025/12/22 22:18:37 Entrypoint initialization
--- Container: place-scripts ---
2025/12/22 22:18:37 Decoded script /tekton/scripts/script-0-n27lx
--- Container: step-appstudio-summary ---
Build Summary:
Build repository: https://github.com/rhtap-rhdh-qe/backend-tests-go-cjcuopuc?rev=ecfeece937c263a51f9ac27b435538586a65eef2
End Summary
----- END PIPELINE LOGS -----
]]>
{
13 | try {
> 14 | expect(pipeline.isSuccessful()).toBe(true);
| ^
15 | } catch (error) {
16 | // If the assertion failed, get and print the logs
17 | console.log('🚨 Pipeline failed! Fetching pipeline logs...');
at expectPipelineSuccess (/workspace/e2e-test/src/utils/test/assertionHelpers.ts:14:37)
at getPipelineAndWaitForCompletion (/workspace/e2e-test/src/utils/test/common.ts:221:32)
at promoteWithPRAndGetPipeline (/workspace/e2e-test/src/utils/test/common.ts:55:22)
at handlePromotionToEnvironmentandGetPipeline (/workspace/e2e-test/src/utils/test/common.ts:402:12)
at /workspace/e2e-test/tests/tssc/full_workflow.test.ts:119:31
]]>
{
if (value.length === 0) {
core.error(`Variable "${name}" is not set`);
return true;
}
core.info(`✔️ Variable "${name}" is set`);
return false;
});
const secrets = {
TRUSTIFICATION_OIDC_CLIENT_SECRET: `***`,
/* Set this password for your specific registry */
IMAGE_REGISTRY_PASSWORD: `***`,
/*QUAY_IO_CREDS_PSW: ``,*/
/*ARTIFACTORY_IO_CREDS_PSW: ``,*/
/*NEXUS_IO_CREDS_PSW: ``,*/
};
const missingSecrets = Object.entries(secrets).filter(([ name, value ]) => {
if (value.length === 0) {
core.error(`Secret "${name}" is not set`);
return true;
}
core.info(`✔️ Secret "${name}" is set`);
return false;
});
if (missingVars.length > 0) {
core.error(`❌ At least one required variable is not set in the repository. \n` +
"You can add it using:\n" +
"GitHub UI: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#creating-configuration-variables-for-a-repository \n" +
"GitHub CLI: https://cli.github.com/manual/gh_variable_set \n" +
"Also, refer to https://github.com/redhat-actions/oc-login#getting-started-with-the-action-or-see-example");
}
if (missingSecrets.length > 0) {
core.error(`❌ At least one required secret is not set in the repository. \n` +
"You can add it using:\n" +
"GitHub UI: https://docs.github.com/en/actions/reference/encrypted-secrets#creating-encrypted-secrets-for-a-repository \n" +
"GitHub CLI: https://cli.github.com/manual/gh_secret_set \n" +
"Also, refer to https://github.com/redhat-actions/oc-login#getting-started-with-the-action-or-see-example");
}
if (missingVars.length > 0 || missingSecrets.length > 0) {
core.setFailed()
} else {
core.info(`✅ All the required variables and secrets are set`);
}
2025-12-22T22:20:26.8597006Z github-token: ***
2025-12-22T22:20:26.8597255Z debug: false
2025-12-22T22:20:26.8597489Z user-agent: actions/github-script
2025-12-22T22:20:26.8597952Z result-encoding: json
2025-12-22T22:20:26.8598201Z retries: 0
2025-12-22T22:20:26.8598442Z retry-exempt-status-codes: 400,401,403,404,422
2025-12-22T22:20:26.8599056Z env:
2025-12-22T22:20:26.8599280Z CI_TYPE: github
2025-12-22T22:20:26.8599511Z IMAGE_REGISTRY:
2025-12-22T22:20:26.8601181Z COSIGN_PUBLIC_KEY: LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNjBaQjU4ZFdvU29yb09BZDZXYVpYSDF2UEZoeQpxSmlzZlVWT2tDK2dubTg3aWpYL0VMKzI3TVY0RC85Nks3bUtOcUZxb0hveDRSdE4wMzU5dFp6K1lnPT0KLS0tLS1FTkQgUFVCTElDIEtFWS0tLS0tCg==
2025-12-22T22:20:26.8602982Z TRUSTIFICATION_BOMBASTIC_API_URL: https://server-tssc-tpa.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:26.8603757Z TRUSTIFICATION_OIDC_ISSUER_URL: https://sso.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com/realms/tssc-iam
2025-12-22T22:20:26.8604276Z TRUSTIFICATION_OIDC_CLIENT_ID: cli
2025-12-22T22:20:26.8604594Z TRUSTIFICATION_SUPPORTED_CYCLONEDX_VERSION: 1.4
2025-12-22T22:20:26.8604910Z IMAGE_REGISTRY_USER: admin
2025-12-22T22:20:26.8605366Z REKOR_HOST: https://rekor-server-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:26.8606003Z TUF_MIRROR: https://tuf-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:26.8606603Z TRUSTIFICATION_OIDC_CLIENT_SECRET: ***
2025-12-22T22:20:26.8606959Z IMAGE_REGISTRY_PASSWORD: ***
2025-12-22T22:20:26.8607211Z IMAGE_TAGS:
2025-12-22T22:20:26.8607427Z IMAGE_TAG:
2025-12-22T22:20:26.8607656Z DEFAULT_UPDATE_VIA_PUSH: true
2025-12-22T22:20:26.8608063Z APP_NAME:
2025-12-22T22:20:26.8608274Z ##[endgroup]
2025-12-22T22:20:26.8671288Z ##[command]/usr/bin/docker exec fdfed1e4ff14e0246725cc3b0277aa7d888820ba5c7f99ab330469bc90b0ac2a sh -c "cat /etc/*release | grep ^ID"
2025-12-22T22:20:27.0278642Z ✔️ Variable "IMAGE_REGISTRY" is set
2025-12-22T22:20:27.0279477Z ✔️ Variable "COSIGN_PUBLIC_KEY" is set
2025-12-22T22:20:27.0280299Z ✔️ Variable "TRUSTIFICATION_BOMBASTIC_API_URL" is set
2025-12-22T22:20:27.0281045Z ✔️ Variable "TRUSTIFICATION_OIDC_ISSUER_URL" is set
2025-12-22T22:20:27.0281763Z ✔️ Variable "TRUSTIFICATION_OIDC_CLIENT_ID" is set
2025-12-22T22:20:27.0282574Z ✔️ Variable "TRUSTIFICATION_SUPPORTED_CYCLONEDX_VERSION" is set
2025-12-22T22:20:27.0285685Z ✔️ Variable "IMAGE_REGISTRY_USER" is set
2025-12-22T22:20:27.0287079Z ✔️ Variable "REKOR_HOST" is set
2025-12-22T22:20:27.0287976Z ✔️ Variable "TUF_MIRROR" is set
2025-12-22T22:20:27.0288828Z ✔️ Secret "TRUSTIFICATION_OIDC_CLIENT_SECRET" is set
2025-12-22T22:20:27.0290088Z ✔️ Secret "IMAGE_REGISTRY_PASSWORD" is set
2025-12-22T22:20:27.0290754Z ✅ All the required variables and secrets are set
2025-12-22T22:20:27.0546603Z ##[group]Run actions/checkout@v4
2025-12-22T22:20:27.0546922Z with:
2025-12-22T22:20:27.0547136Z fetch-depth: 2
2025-12-22T22:20:27.0547463Z repository: rhtap-rhdh-qe/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:27.0548130Z token: ***
2025-12-22T22:20:27.0548360Z ssh-strict: true
2025-12-22T22:20:27.0548585Z ssh-user: git
2025-12-22T22:20:27.0548820Z persist-credentials: true
2025-12-22T22:20:27.0549073Z clean: true
2025-12-22T22:20:27.0549299Z sparse-checkout-cone-mode: true
2025-12-22T22:20:27.0549571Z fetch-tags: false
2025-12-22T22:20:27.0549799Z show-progress: true
2025-12-22T22:20:27.0550024Z lfs: false
2025-12-22T22:20:27.0550237Z submodules: false
2025-12-22T22:20:27.0550474Z set-safe-directory: true
2025-12-22T22:20:27.0550713Z env:
2025-12-22T22:20:27.0550911Z CI_TYPE: github
2025-12-22T22:20:27.0551164Z IMAGE_REGISTRY:
2025-12-22T22:20:27.0552661Z COSIGN_PUBLIC_KEY: LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNjBaQjU4ZFdvU29yb09BZDZXYVpYSDF2UEZoeQpxSmlzZlVWT2tDK2dubTg3aWpYL0VMKzI3TVY0RC85Nks3bUtOcUZxb0hveDRSdE4wMzU5dFp6K1lnPT0KLS0tLS1FTkQgUFVCTElDIEtFWS0tLS0tCg==
2025-12-22T22:20:27.0554453Z TRUSTIFICATION_BOMBASTIC_API_URL: https://server-tssc-tpa.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:27.0555230Z TRUSTIFICATION_OIDC_ISSUER_URL: https://sso.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com/realms/tssc-iam
2025-12-22T22:20:27.0555762Z TRUSTIFICATION_OIDC_CLIENT_ID: cli
2025-12-22T22:20:27.0556084Z TRUSTIFICATION_SUPPORTED_CYCLONEDX_VERSION: 1.4
2025-12-22T22:20:27.0556402Z IMAGE_REGISTRY_USER: admin
2025-12-22T22:20:27.0556881Z REKOR_HOST: https://rekor-server-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:27.0557575Z TUF_MIRROR: https://tuf-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:27.0558338Z TRUSTIFICATION_OIDC_CLIENT_SECRET: ***
2025-12-22T22:20:27.0558711Z IMAGE_REGISTRY_PASSWORD: ***
2025-12-22T22:20:27.0558972Z IMAGE_TAGS:
2025-12-22T22:20:27.0559190Z IMAGE_TAG:
2025-12-22T22:20:27.0559417Z DEFAULT_UPDATE_VIA_PUSH: true
2025-12-22T22:20:27.0559671Z APP_NAME:
2025-12-22T22:20:27.0559886Z ##[endgroup]
2025-12-22T22:20:27.0564649Z ##[command]/usr/bin/docker exec fdfed1e4ff14e0246725cc3b0277aa7d888820ba5c7f99ab330469bc90b0ac2a sh -c "cat /etc/*release | grep ^ID"
2025-12-22T22:20:27.2295613Z Syncing repository: rhtap-rhdh-qe/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:27.2298213Z ##[group]Getting Git version info
2025-12-22T22:20:27.2299204Z Working directory is '/__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops'
2025-12-22T22:20:27.2300526Z [command]/usr/bin/git version
2025-12-22T22:20:27.2301077Z git version 2.47.3
2025-12-22T22:20:27.2325848Z ##[endgroup]
2025-12-22T22:20:27.2339637Z Temporarily overriding HOME='/__w/_temp/6d019932-0229-4f63-a084-2daaf094466c' before making global git config changes
2025-12-22T22:20:27.2340812Z Adding repository directory to the temporary git global config as a safe directory
2025-12-22T22:20:27.2346939Z [command]/usr/bin/git config --global --add safe.directory /__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:27.2383778Z Deleting the contents of '/__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops'
2025-12-22T22:20:27.2387114Z ##[group]Initializing the repository
2025-12-22T22:20:27.2391168Z [command]/usr/bin/git init /__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:27.2429453Z hint: Using 'master' as the name for the initial branch. This default branch name
2025-12-22T22:20:27.2431171Z hint: is subject to change. To configure the initial branch name to use in all
2025-12-22T22:20:27.2432149Z hint: of your new repositories, which will suppress this warning, call:
2025-12-22T22:20:27.2433237Z hint:
2025-12-22T22:20:27.2433797Z hint: git config --global init.defaultBranch
2025-12-22T22:20:27.2434423Z hint:
2025-12-22T22:20:27.2435322Z hint: Names commonly chosen instead of 'master' are 'main', 'trunk' and
2025-12-22T22:20:27.2436346Z hint: 'development'. The just-created branch can be renamed via this command:
2025-12-22T22:20:27.2437132Z hint:
2025-12-22T22:20:27.2437568Z hint: git branch -m
2025-12-22T22:20:27.2438849Z Initialized empty Git repository in /__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops/.git/
2025-12-22T22:20:27.2444913Z [command]/usr/bin/git remote add origin https://github.com/rhtap-rhdh-qe/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:27.2477529Z ##[endgroup]
2025-12-22T22:20:27.2478466Z ##[group]Disabling automatic garbage collection
2025-12-22T22:20:27.2482402Z [command]/usr/bin/git config --local gc.auto 0
2025-12-22T22:20:27.2513449Z ##[endgroup]
2025-12-22T22:20:27.2514211Z ##[group]Setting up auth
2025-12-22T22:20:27.2520881Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2025-12-22T22:20:27.2552846Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
2025-12-22T22:20:27.2889643Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2025-12-22T22:20:27.2921776Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
2025-12-22T22:20:27.3256070Z [command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
2025-12-22T22:20:27.3289924Z [command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
2025-12-22T22:20:27.3624146Z [command]/usr/bin/git config --local http.https://github.com/.extraheader AUTHORIZATION: basic ***
2025-12-22T22:20:27.3662463Z ##[endgroup]
2025-12-22T22:20:27.3663317Z ##[group]Fetching the repository
2025-12-22T22:20:27.3670957Z [command]/usr/bin/git -c protocol.version=2 fetch --no-tags --prune --no-recurse-submodules --depth=2 origin +2f5cb37741ab68c17a47ef3d9c0a458de81c4940:refs/remotes/pull/2/merge
2025-12-22T22:20:30.7183900Z From https://github.com/rhtap-rhdh-qe/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:30.7184527Z * [new ref] 2f5cb37741ab68c17a47ef3d9c0a458de81c4940 -> pull/2/merge
2025-12-22T22:20:30.7211682Z ##[endgroup]
2025-12-22T22:20:30.7213725Z ##[group]Determining the checkout info
2025-12-22T22:20:30.7214576Z ##[endgroup]
2025-12-22T22:20:30.7220158Z [command]/usr/bin/git sparse-checkout disable
2025-12-22T22:20:30.7260046Z [command]/usr/bin/git config --local --unset-all extensions.worktreeConfig
2025-12-22T22:20:30.7288842Z ##[group]Checking out the ref
2025-12-22T22:20:30.7292607Z [command]/usr/bin/git checkout --progress --force refs/remotes/pull/2/merge
2025-12-22T22:20:30.7354875Z Note: switching to 'refs/remotes/pull/2/merge'.
2025-12-22T22:20:30.7355314Z
2025-12-22T22:20:30.7355678Z You are in 'detached HEAD' state. You can look around, make experimental
2025-12-22T22:20:30.7356472Z changes and commit them, and you can discard any commits you make in this
2025-12-22T22:20:30.7357331Z state without impacting any branches by switching back to a branch.
2025-12-22T22:20:30.7357925Z
2025-12-22T22:20:30.7358265Z If you want to create a new branch to retain commits you create, you may
2025-12-22T22:20:30.7358955Z do so (now or later) by using -c with the switch command. Example:
2025-12-22T22:20:30.7359370Z
2025-12-22T22:20:30.7359539Z git switch -c
2025-12-22T22:20:30.7359814Z
2025-12-22T22:20:30.7359986Z Or undo this operation with:
2025-12-22T22:20:30.7360244Z
2025-12-22T22:20:30.7360387Z git switch -
2025-12-22T22:20:30.7360536Z
2025-12-22T22:20:30.7360748Z Turn off this advice by setting config variable advice.detachedHead to false
2025-12-22T22:20:30.7361357Z
2025-12-22T22:20:30.7361861Z HEAD is now at 2f5cb37 Merge 78dcdd773017ec44e6f1e28f850a064b279add03 into 13b20dd6174be7979c9d5ccdf6491f416793a11b
2025-12-22T22:20:30.7365051Z ##[endgroup]
2025-12-22T22:20:30.7401209Z [command]/usr/bin/git log -1 --format=%H
2025-12-22T22:20:30.7425334Z 2f5cb37741ab68c17a47ef3d9c0a458de81c4940
2025-12-22T22:20:30.7586336Z ##[group]Run buildah --version
2025-12-22T22:20:30.7586680Z [36;1mbuildah --version[0m
2025-12-22T22:20:30.7586904Z [36;1msyft --version[0m
2025-12-22T22:20:30.7587122Z [36;1mcosign version[0m
2025-12-22T22:20:30.7587315Z [36;1mec version[0m
2025-12-22T22:20:30.7587593Z [36;1mgit config --global --add safe.directory $(pwd)[0m
2025-12-22T22:20:30.7588225Z [36;1mcat tssc/env.sh[0m
2025-12-22T22:20:30.7591681Z shell: sh -e {0}
2025-12-22T22:20:30.7591901Z env:
2025-12-22T22:20:30.7592069Z CI_TYPE: github
2025-12-22T22:20:30.7592261Z IMAGE_REGISTRY:
2025-12-22T22:20:30.7593720Z COSIGN_PUBLIC_KEY: LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNjBaQjU4ZFdvU29yb09BZDZXYVpYSDF2UEZoeQpxSmlzZlVWT2tDK2dubTg3aWpYL0VMKzI3TVY0RC85Nks3bUtOcUZxb0hveDRSdE4wMzU5dFp6K1lnPT0KLS0tLS1FTkQgUFVCTElDIEtFWS0tLS0tCg==
2025-12-22T22:20:30.7595523Z TRUSTIFICATION_BOMBASTIC_API_URL: https://server-tssc-tpa.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:30.7596286Z TRUSTIFICATION_OIDC_ISSUER_URL: https://sso.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com/realms/tssc-iam
2025-12-22T22:20:30.7596815Z TRUSTIFICATION_OIDC_CLIENT_ID: cli
2025-12-22T22:20:30.7597096Z TRUSTIFICATION_SUPPORTED_CYCLONEDX_VERSION: 1.4
2025-12-22T22:20:30.7597372Z IMAGE_REGISTRY_USER: admin
2025-12-22T22:20:30.7598090Z REKOR_HOST: https://rekor-server-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:30.7598702Z TUF_MIRROR: https://tuf-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:30.7599338Z TRUSTIFICATION_OIDC_CLIENT_SECRET: ***
2025-12-22T22:20:30.7599666Z IMAGE_REGISTRY_PASSWORD: ***
2025-12-22T22:20:30.7599879Z IMAGE_TAGS:
2025-12-22T22:20:30.7600056Z IMAGE_TAG:
2025-12-22T22:20:30.7600241Z DEFAULT_UPDATE_VIA_PUSH: true
2025-12-22T22:20:30.7600461Z APP_NAME:
2025-12-22T22:20:30.7600639Z ##[endgroup]
2025-12-22T22:20:30.8095340Z buildah version 1.41.4 (image-spec 1.1.1, runtime-spec 1.2.1)
2025-12-22T22:20:30.8343123Z syft [not provided]
2025-12-22T22:20:30.8591151Z ______ ______ _______. __ _______ .__ __.
2025-12-22T22:20:30.8591709Z / | / __ \ / || | / _____|| \ | |
2025-12-22T22:20:30.8592201Z | ,----'| | | | | (----`| | | | __ | \| |
2025-12-22T22:20:30.8592642Z | | | | | | \ \ | | | | |_ | | . ` |
2025-12-22T22:20:30.8593072Z | `----.| `--' | .----) | | | | |__| | | |\ |
2025-12-22T22:20:30.8593524Z \______| \______/ |_______/ |__| \______| |__| \__|
2025-12-22T22:20:30.8594206Z cosign: A tool for Container Signing, Verification and Storage in an OCI registry.
2025-12-22T22:20:30.8594785Z
2025-12-22T22:20:30.8594926Z GitVersion: 227f0ec0
2025-12-22T22:20:30.8595353Z GitCommit: 227f0ec052425a1f57768575684ca01c6aa02932
2025-12-22T22:20:30.8595831Z GitTreeState: clean
2025-12-22T22:20:30.8596186Z BuildDate: 2025-09-29T11:02:26Z
2025-12-22T22:20:30.8596763Z GoVersion: go1.24.6 (Red Hat 1.24.6-1.el9_6) X:strictfipsruntime
2025-12-22T22:20:30.8597314Z Compiler: gc
2025-12-22T22:20:30.8597677Z Platform: linux/amd64
2025-12-22T22:20:30.8598115Z
2025-12-22T22:20:30.8918858Z Version v0.6.233+redhat
2025-12-22T22:20:30.8919408Z Source ID 17c436886996f4c42d59a09f4082da2852a4cf13
2025-12-22T22:20:30.8920008Z Change date 2025-11-12 20:22:29 +0000 UTC (5 weeks ago)
2025-12-22T22:20:30.8920517Z ECC v0.1.79
2025-12-22T22:20:30.8920865Z OPA v0.70.0
2025-12-22T22:20:30.8921225Z Conftest v0.55.0
2025-12-22T22:20:30.8921912Z Cosign v2.4.1
2025-12-22T22:20:30.8922259Z Sigstore v1.8.15
2025-12-22T22:20:30.8922614Z Rekor v1.3.6
2025-12-22T22:20:30.8922972Z Tekton Pipeline v0.70.0
2025-12-22T22:20:30.8923341Z Kubernetes Client v0.31.6
2025-12-22T22:20:30.8982202Z # from init
2025-12-22T22:20:30.8982625Z export REBUILD=${REBUILD-true}
2025-12-22T22:20:30.8983390Z export SKIP_CHECKS=${SKIP_CHECKS-true}
2025-12-22T22:20:30.8983726Z
2025-12-22T22:20:30.8983882Z CI_TYPE=${CI_TYPE:-jenkins}
2025-12-22T22:20:30.8984129Z
2025-12-22T22:20:30.8984275Z # from buildah-tssc
2025-12-22T22:20:30.8984610Z TAG=$(git rev-parse HEAD)
2025-12-22T22:20:30.8985377Z export IMAGE_URL=${IMAGE_URL-quay.io/redhat-tssc/task-runner:1.8:$CI_TYPE-$TAG}
2025-12-22T22:20:30.8986164Z export IMAGE=${IMAGE-$IMAGE_URL}
2025-12-22T22:20:30.8986440Z
2025-12-22T22:20:30.8986548Z export DOCKERFILE=${DOCKERFILE-}
2025-12-22T22:20:30.8986806Z export CONTEXT=${CONTEXT-}
2025-12-22T22:20:30.8987114Z export TLSVERIFY=${TLSVERIFY-true}
2025-12-22T22:20:30.8987558Z export BUILD_ARGS=${BUILD_ARGS-""}
2025-12-22T22:20:30.8988130Z export BUILD_ARGS_FILE=${BUILD_ARGS_FILE-""}
2025-12-22T22:20:30.8988423Z
2025-12-22T22:20:30.8988547Z # from ACS_*.*
2025-12-22T22:20:30.8988867Z export DISABLE_ACS=${DISABLE_ACS-false}
2025-12-22T22:20:30.8989499Z # Optionally set ROX_CENTRAL_ENDPOINT here instead of configuring a Jenkins secret
2025-12-22T22:20:30.8990397Z # export ROX_CENTRAL_ENDPOINT=central-acs.apps.user.cluster.domain.com:443
2025-12-22T22:20:30.8991270Z export INSECURE_SKIP_TLS_VERIFY=${INSECURE_SKIP_TLS_VERIFY-true}
2025-12-22T22:20:30.8991714Z
2025-12-22T22:20:30.8991996Z # for gitops, if acs scans are set, we still may not want that repo
2025-12-22T22:20:30.8992541Z # to be updates so include an option to disable
2025-12-22T22:20:30.8992847Z
2025-12-22T22:20:30.8993120Z export DISABLE_GITOPS_UPDATE=${DISABLE_GITOPS_UPDATE-false}
2025-12-22T22:20:30.8993961Z export GITOPS_REPO_URL=https://github.com/rhtap-rhdh-qe/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:30.8994513Z
2025-12-22T22:20:30.8994637Z export PARAM_IMAGE=${PARAM_IMAGE-$IMAGE}
2025-12-22T22:20:30.8995256Z # Recompute this every time, otherwise it will be set BEFORE the file exists
2025-12-22T22:20:30.8995941Z # and be stuck at latest
2025-12-22T22:20:30.8996692Z export PARAM_IMAGE_DIGEST=$(cat "$BASE_RESULTS/buildah-tssc/IMAGE_DIGEST" 2>/dev/null || echo "latest")
2025-12-22T22:20:30.8997322Z
2025-12-22T22:20:30.8997406Z # From Summary
2025-12-22T22:20:30.8997926Z export SOURCE_BUILD_RESULT_FILE=${SOURCE_BUILD_RESULT_FILE-""}
2025-12-22T22:20:30.8998381Z
2025-12-22T22:20:30.8998547Z # gather images params
2025-12-22T22:20:30.8998821Z
2025-12-22T22:20:30.8999012Z export TARGET_BRANCH=${TARGET_BRANCH-""}
2025-12-22T22:20:30.8999460Z # conforma
2025-12-22T22:20:30.9000103Z export POLICY_CONFIGURATION=${POLICY_CONFIGURATION-"github.com/conforma/config//rhtap-v0.6"}
2025-12-22T22:20:30.9000973Z #internal, assumes jenkins is local openshift
2025-12-22T22:20:30.9001682Z export REKOR_HOST=${REKOR_HOST-http://rekor-server.tssc-tas.svc}
2025-12-22T22:20:30.9002383Z export IGNORE_REKOR=${IGNORE_REKOR-false}
2025-12-22T22:20:30.9002805Z export INFO=${INFO-true}
2025-12-22T22:20:30.9003197Z export STRICT=${STRICT-true}
2025-12-22T22:20:30.9003680Z export EFFECTIVE_TIME=${EFFECTIVE_TIME-now}
2025-12-22T22:20:30.9004232Z export HOMEDIR=${HOMEDIR-$(pwd)}
2025-12-22T22:20:30.9004735Z export TUF_MIRROR=${TUF_MIRROR-http://tuf.tssc-tas.svc}
2025-12-22T22:20:30.9005138Z
2025-12-22T22:20:30.9005349Z export CUSTOM_ROOT_CA=${CUSTOM_ROOT_CA-""}
2025-12-22T22:20:30.9005592Z
2025-12-22T22:20:30.9005774Z # Allow PR to succeed even if TAS vars not configured
2025-12-22T22:20:30.9006341Z export FAIL_IF_TRUSTIFICATION_NOT_CONFIGURED=false
2025-12-22T22:20:30.9006559Z
2025-12-22T22:20:30.9015342Z export SBOMS_DIR=results/sboms
2025-12-22T22:20:30.9052474Z ##[group]Run echo "• gather-deploy-images"
2025-12-22T22:20:30.9052841Z [36;1mecho "• gather-deploy-images"[0m
2025-12-22T22:20:30.9053351Z [36;1mbash /work/tssc/gather-deploy-images.sh[0m
2025-12-22T22:20:30.9053635Z [36;1mecho "• verify-conforma"[0m
2025-12-22T22:20:30.9053898Z [36;1mbash /work/tssc/verify-conforma.sh[0m
2025-12-22T22:20:30.9054239Z shell: sh -e {0}
2025-12-22T22:20:30.9054414Z env:
2025-12-22T22:20:30.9054587Z CI_TYPE: github
2025-12-22T22:20:30.9054779Z IMAGE_REGISTRY:
2025-12-22T22:20:30.9056209Z COSIGN_PUBLIC_KEY: LS0tLS1CRUdJTiBQVUJMSUMgS0VZLS0tLS0KTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFNjBaQjU4ZFdvU29yb09BZDZXYVpYSDF2UEZoeQpxSmlzZlVWT2tDK2dubTg3aWpYL0VMKzI3TVY0RC85Nks3bUtOcUZxb0hveDRSdE4wMzU5dFp6K1lnPT0KLS0tLS1FTkQgUFVCTElDIEtFWS0tLS0tCg==
2025-12-22T22:20:30.9058414Z TRUSTIFICATION_BOMBASTIC_API_URL: https://server-tssc-tpa.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:30.9059540Z TRUSTIFICATION_OIDC_ISSUER_URL: https://sso.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com/realms/tssc-iam
2025-12-22T22:20:30.9060044Z TRUSTIFICATION_OIDC_CLIENT_ID: cli
2025-12-22T22:20:30.9060349Z TRUSTIFICATION_SUPPORTED_CYCLONEDX_VERSION: 1.4
2025-12-22T22:20:30.9060630Z IMAGE_REGISTRY_USER: admin
2025-12-22T22:20:30.9061055Z REKOR_HOST: https://rekor-server-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:30.9061651Z TUF_MIRROR: https://tuf-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:30.9062254Z TRUSTIFICATION_OIDC_CLIENT_SECRET: ***
2025-12-22T22:20:30.9062571Z IMAGE_REGISTRY_PASSWORD: ***
2025-12-22T22:20:30.9062789Z IMAGE_TAGS:
2025-12-22T22:20:30.9062955Z IMAGE_TAG:
2025-12-22T22:20:30.9063142Z DEFAULT_UPDATE_VIA_PUSH: true
2025-12-22T22:20:30.9063366Z APP_NAME:
2025-12-22T22:20:30.9063534Z ##[endgroup]
2025-12-22T22:20:30.9393308Z • gather-deploy-images
2025-12-22T22:20:30.9495969Z
2025-12-22T22:20:30.9496537Z Step: gather-deploy-images
2025-12-22T22:20:30.9497582Z Results: /__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops/results/gather-deploy-images
2025-12-22T22:20:30.9541472Z Custom root CA variable is not set. Make sure CA trust is established
2025-12-22T22:20:30.9543813Z Running gather-deploy-images:get-images-per-env
2025-12-22T22:20:30.9747903Z {"components":[{"containerImage":"artifactory-docker-artifactory-jcr2.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/backend-tests-go-qjmtzfas:github-07aa27fd69ef16538feb813a41024b3005fc5acf"}]}
2025-12-22T22:20:30.9773547Z {
2025-12-22T22:20:30.9774012Z "components": [
2025-12-22T22:20:30.9774349Z {
2025-12-22T22:20:30.9775379Z "containerImage": "artifactory-docker-artifactory-jcr2.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/backend-tests-go-qjmtzfas:github-07aa27fd69ef16538feb813a41024b3005fc5acf"
2025-12-22T22:20:30.9776191Z }
2025-12-22T22:20:30.9776361Z ]
2025-12-22T22:20:30.9776566Z }
2025-12-22T22:20:30.9779081Z • verify-conforma
2025-12-22T22:20:30.9874983Z
2025-12-22T22:20:30.9875307Z Step: verify-conforma
2025-12-22T22:20:30.9876067Z Results: /__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops/results/verify-conforma
2025-12-22T22:20:30.9920116Z Custom root CA variable is not set. Make sure CA trust is established
2025-12-22T22:20:30.9922421Z Running verify-conforma:version
2025-12-22T22:20:31.0217120Z Version v0.6.233+redhat
2025-12-22T22:20:31.0217707Z Source ID 17c436886996f4c42d59a09f4082da2852a4cf13
2025-12-22T22:20:31.0218379Z Change date 2025-11-12 20:22:29 +0000 UTC (5 weeks ago)
2025-12-22T22:20:31.0218706Z ECC v0.1.79
2025-12-22T22:20:31.0218947Z OPA v0.70.0
2025-12-22T22:20:31.0219164Z Conftest v0.55.0
2025-12-22T22:20:31.0219387Z Cosign v2.4.1
2025-12-22T22:20:31.0219607Z Sigstore v1.8.15
2025-12-22T22:20:31.0219823Z Rekor v1.3.6
2025-12-22T22:20:31.0220055Z Tekton Pipeline v0.70.0
2025-12-22T22:20:31.0220764Z Kubernetes Client v0.31.6
2025-12-22T22:20:31.0241148Z Running verify-conforma:initialize-tuf
2025-12-22T22:20:31.0241889Z Initializing TUF root...
2025-12-22T22:20:31.0452852Z WARNING: Fetching initial root from URL without providing its checksum is deprecated and will be disallowed in a future Cosign release. Please provide the initial root checksum via the --root-checksum argument.
2025-12-22T22:20:31.4064415Z Root status:
2025-12-22T22:20:31.4064667Z {
2025-12-22T22:20:31.4064866Z "local": "/github/home/.sigstore/root",
2025-12-22T22:20:31.4065342Z "remote": "https://tuf-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com",
2025-12-22T22:20:31.4065766Z "metadata": {
2025-12-22T22:20:31.4065939Z "root.json": {
2025-12-22T22:20:31.4066118Z "version": 1,
2025-12-22T22:20:31.4066286Z "len": 4128,
2025-12-22T22:20:31.4066476Z "expiration": "21 Dec 26 22:07 UTC",
2025-12-22T22:20:31.4066701Z "error": ""
2025-12-22T22:20:31.4066860Z },
2025-12-22T22:20:31.4067043Z "snapshot.json": {
2025-12-22T22:20:31.4067229Z "version": 1,
2025-12-22T22:20:31.4067394Z "len": 994,
2025-12-22T22:20:31.4067567Z "expiration": "21 Dec 26 22:07 UTC",
2025-12-22T22:20:31.4068041Z "error": ""
2025-12-22T22:20:31.4068213Z },
2025-12-22T22:20:31.4068363Z "targets.json": {
2025-12-22T22:20:31.4068544Z "version": 1,
2025-12-22T22:20:31.4068701Z "len": 2071,
2025-12-22T22:20:31.4068886Z "expiration": "21 Dec 26 22:07 UTC",
2025-12-22T22:20:31.4069101Z "error": ""
2025-12-22T22:20:31.4069248Z },
2025-12-22T22:20:31.4069406Z "timestamp.json": {
2025-12-22T22:20:31.4069591Z "version": 1,
2025-12-22T22:20:31.4069747Z "len": 995,
2025-12-22T22:20:31.4069919Z "expiration": "21 Dec 26 22:07 UTC",
2025-12-22T22:20:31.4070134Z "error": ""
2025-12-22T22:20:31.4070280Z }
2025-12-22T22:20:31.4070438Z },
2025-12-22T22:20:31.4070585Z "targets": [
2025-12-22T22:20:31.4070745Z "rekor.pub",
2025-12-22T22:20:31.4070923Z "fulcio_v1.crt.pem",
2025-12-22T22:20:31.4071134Z "trusted_root.json",
2025-12-22T22:20:31.4071311Z "ctfe.pub"
2025-12-22T22:20:31.4071473Z ]
2025-12-22T22:20:31.4071616Z }
2025-12-22T22:20:31.4088357Z Done!
2025-12-22T22:20:31.4088699Z Running verify-conforma:login
2025-12-22T22:20:31.4138768Z Using IMAGE_REGISTRY_USER and IMAGE_REGISTRY_PASSWORD secrets for registry auth
2025-12-22T22:20:31.4340972Z
2025-12-22T22:20:31.4341844Z WARNING! Your credentials are stored unencrypted in '/github/home/.docker/config.json'.
2025-12-22T22:20:31.4342657Z Configure a credential helper to remove this warning. See
2025-12-22T22:20:31.4343124Z https://docs.docker.com/go/credential-store/
2025-12-22T22:20:31.4343386Z
2025-12-22T22:20:31.4343566Z logged in via /github/home/.docker/config.json
2025-12-22T22:20:31.4363601Z Running verify-conforma:validate
2025-12-22T22:20:31.4380113Z Images to verify:
2025-12-22T22:20:31.4406354Z {
2025-12-22T22:20:31.4406644Z "components": [
2025-12-22T22:20:31.4406953Z {
2025-12-22T22:20:31.4408088Z "containerImage": "artifactory-docker-artifactory-jcr2.apps.rosa.rhtap-services.xmdt.p3.openshiftapps.com/rhtap/backend-tests-go-qjmtzfas:github-07aa27fd69ef16538feb813a41024b3005fc5acf"
2025-12-22T22:20:31.4409555Z }
2025-12-22T22:20:31.4409807Z ]
2025-12-22T22:20:31.4410049Z }
2025-12-22T22:20:31.4410401Z Policy used: github.com/conforma/config//rhtap-v0.6
2025-12-22T22:20:31.4410904Z Rekor URL: https://rekor-server-tssc-tas.apps.rosa.kx-7d5eea13e5.w2rb.p3.openshiftapps.com
2025-12-22T22:20:41.6180832Z Error: error cloning repository: Get "https://github.com/conforma/config.git/info/refs?service=git-upload-pack": net/http: TLS handshake timeout
2025-12-22T22:20:41.6253344Z ##[error]Process completed with exit code 1.
2025-12-22T22:20:41.6380556Z Post job cleanup.
2025-12-22T22:20:41.6384338Z ##[command]/usr/bin/docker exec fdfed1e4ff14e0246725cc3b0277aa7d888820ba5c7f99ab330469bc90b0ac2a sh -c "cat /etc/*release | grep ^ID"
2025-12-22T22:20:41.7959821Z [command]/usr/bin/git version
2025-12-22T22:20:41.7997710Z git version 2.47.3
2025-12-22T22:20:41.8037226Z Copying '/github/home/.gitconfig' to '/__w/_temp/120a0aec-c378-46fd-b9e7-9d53217d9096/.gitconfig'
2025-12-22T22:20:41.8048600Z Temporarily overriding HOME='/__w/_temp/120a0aec-c378-46fd-b9e7-9d53217d9096' before making global git config changes
2025-12-22T22:20:41.8049689Z Adding repository directory to the temporary git global config as a safe directory
2025-12-22T22:20:41.8060764Z [command]/usr/bin/git config --global --add safe.directory /__w/backend-tests-go-qjmtzfas-gitops/backend-tests-go-qjmtzfas-gitops
2025-12-22T22:20:41.8096912Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2025-12-22T22:20:41.8132169Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
2025-12-22T22:20:41.8465996Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2025-12-22T22:20:41.8488422Z http.https://github.com/.extraheader
2025-12-22T22:20:41.8502136Z [command]/usr/bin/git config --local --unset-all http.https://github.com/.extraheader
2025-12-22T22:20:41.8537165Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
2025-12-22T22:20:41.8866945Z [command]/usr/bin/git config --local --name-only --get-regexp ^includeIf\.gitdir:
2025-12-22T22:20:41.8899232Z [command]/usr/bin/git submodule foreach --recursive git config --local --show-origin --name-only --get-regexp remote.origin.url
2025-12-22T22:20:41.9359465Z Stop and remove container: 67769000754741dea64906b452f15458_quayioredhattssctaskrunner18_26211a
2025-12-22T22:20:41.9364113Z ##[command]/usr/bin/docker rm --force fdfed1e4ff14e0246725cc3b0277aa7d888820ba5c7f99ab330469bc90b0ac2a
2025-12-22T22:20:42.0250923Z fdfed1e4ff14e0246725cc3b0277aa7d888820ba5c7f99ab330469bc90b0ac2a
2025-12-22T22:20:42.0279923Z Remove container network: github_network_1271dcadf78a4df09a6cb96097a40281
2025-12-22T22:20:42.0284056Z ##[command]/usr/bin/docker network rm github_network_1271dcadf78a4df09a6cb96097a40281
2025-12-22T22:20:42.1699540Z github_network_1271dcadf78a4df09a6cb96097a40281
2025-12-22T22:20:42.1764476Z Cleaning up orphan processes
==================================================
----- END PIPELINE LOGS -----
]]>