running buildah-tssc

Step: buildah-tssc
Results: /workspace/source/source/results/buildah-tssc
Custom root CA variable is not set. Make sure CA trust is established
========Running buildah-tssc:login
--- Registry Auth Bypass Active ---
========Running buildah-tssc:build
[1/2] STEP 1/3: FROM registry.access.redhat.com/ubi9/nodejs-22:latest
Trying to pull registry.access.redhat.com/ubi9/nodejs-22:latest...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:4d67b3b1393e59e19e41a218830501aca6bd77b3e6a6256d5d50d05238ae23a7
Copying blob sha256:5b6b4a422899b7c3f69297c3a1c12a35910c86075c2b21d4bb6536e9c25e5f82
Copying blob sha256:946c08bdc57e2608ec745ad376fa8ec775a2ddde72d8e704b92bc60390fb8638
Copying config sha256:987fbf5122b7adc0edf0f45dcac707eb163b0fa93e65ebc5c8ca14f72eb775ee
Writing manifest to image destination
Storing signatures
[1/2] STEP 2/3: COPY package.json package-lock.json* ./
[1/2] STEP 3/3: RUN   if [ -f package-lock.json ]; then npm ci;   else npm install;   fi

added 102 packages, and audited 103 packages in 2s

19 packages are looking for funding
  run `npm fund` for details

found 0 vulnerabilities
[2/2] STEP 1/6: FROM registry.access.redhat.com/ubi9/nodejs-22-minimal:latest
Trying to pull registry.access.redhat.com/ubi9/nodejs-22-minimal:latest...
Getting image source signatures
Checking if image destination supports signatures
Copying blob sha256:0c701d626b4bd1b49a9896c3edb3e2335bc27ad4c8d82fbc0e82be1e2151ad04
Copying blob sha256:34f4a557df8123a31168a9ed57304a4ee0a79b26712d1770dcf7c798372b100b
Copying config sha256:c7bab8fd7f910472f3fdbe0e3dac80cc0355bd0cba3c77ed9d6d0244af8ba298
Writing manifest to image destination
Storing signatures
[2/2] STEP 2/6: COPY --from=0 /opt/app-root/src/node_modules /opt/app-root/src/node_modules
[2/2] STEP 3/6: COPY . /opt/app-root/src
[2/2] STEP 4/6: ENV NODE_ENV production
[2/2] STEP 5/6: ENV PORT 3001
[2/2] STEP 6/6: CMD ["npm", "start"]
[2/2] COMMIT quay.io/rhtap_qe/e2e-tests-nodejs-htsisgsw:on-pr-a849523f3df6cb0291cfe1873af8eafb030b1184
Getting image source signatures
Copying blob sha256:04b86c83948d73ca72be6df1f4ea9f256c75a011d543c3990e53d86b1de53b78
Copying blob sha256:2856991031bee26b5494d9a04d7eb9905d9078fc09f2ffaf08a23ae78a1bc359
Copying blob sha256:e7ae4c6f466d3f8737cdc436309523f0239f0fecfac235470acb511b6ce416af
Copying config sha256:3fe6233a75d01f8c74ef5e36fce4bbf09fb245d87567e47da9b1533d66c10fe2
Writing manifest to image destination
--> 3fe6233a75d0
Successfully tagged quay.io/rhtap_qe/e2e-tests-nodejs-htsisgsw:on-pr-a849523f3df6cb0291cfe1873af8eafb030b1184
3fe6233a75d01f8c74ef5e36fce4bbf09fb245d87567e47da9b1533d66c10fe2
Getting image source signatures
Copying blob sha256:e7ae4c6f466d3f8737cdc436309523f0239f0fecfac235470acb511b6ce416af
Copying blob sha256:2856991031bee26b5494d9a04d7eb9905d9078fc09f2ffaf08a23ae78a1bc359
Copying blob sha256:04b86c83948d73ca72be6df1f4ea9f256c75a011d543c3990e53d86b1de53b78
Copying config sha256:3fe6233a75d01f8c74ef5e36fce4bbf09fb245d87567e47da9b1533d66c10fe2
Writing manifest to image destination
sha256:dfc22ad6ddf100cf78a8fc6de1b905fa4e39dd09f405ba1fdb327704e50a715aquay.io/rhtap_qe/e2e-tests-nodejs-htsisgsw:on-pr-a849523f3df6cb0291cfe1873af8eafb030b1184Getting image source signatures
Copying blob sha256:e7ae4c6f466d3f8737cdc436309523f0239f0fecfac235470acb511b6ce416af
Copying blob sha256:04b86c83948d73ca72be6df1f4ea9f256c75a011d543c3990e53d86b1de53b78
Copying blob sha256:2856991031bee26b5494d9a04d7eb9905d9078fc09f2ffaf08a23ae78a1bc359
Copying config sha256:3fe6233a75d01f8c74ef5e36fce4bbf09fb245d87567e47da9b1533d66c10fe2
Writing manifest to image destination
========Running buildah-tssc:generate-sboms
{
  "bom-ref": "af63bd4c8601b7f1",
  "type": "file",
  "name": "e2e-tests-nodejs-htsisgsw",
  "version": "a849523f3df6cb0291cfe1873af8eafb030b1184"
}
{
  "bom-ref": "87eaa37584866e6e",
  "type": "container",
  "name": "quay.io/rhtap_qe/e2e-tests-nodejs-htsisgsw:on-pr-a849523f3df6cb0291cfe1873af8eafb030b1184",
  "version": "sha256:dfc22ad6ddf100cf78a8fc6de1b905fa4e39dd09f405ba1fdb327704e50a715a"
}
========RUNNING PYTHON 
========Running buildah-tssc:upload-sbom
There is a discussion in sigstore community triggered by https://github.com/sigstore/cosign/issues/3599.
It is likely that cosign attach deprecation will be reverted. Please, ignore deprecation warning for now.
WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations.
WARNING: Attaching SBOMs this way does not sign them. To sign them, use 'cosign attest --predicate /workspace/source/source/results/temp/files/sbom-cyclonedx.json --key <key path>'.
Uploading SBOM file for [quay.io/rhtap_qe/e2e-tests-nodejs-htsisgsw:on-pr-a849523f3df6cb0291cfe1873af8eafb030b1184] to [quay.io/rhtap_qe/e2e-tests-nodejs-htsisgsw:sha256-dfc22ad6ddf100cf78a8fc6de1b905fa4e39dd09f405ba1fdb327704e50a715a.sbom] with mediaType [application/vnd.cyclonedx+json].

========