Inspecting raw image manifest quay.io/rhtap_qe/default-tenant/java-quarkus-177875135@sha256:3da50bdfe4ce12c31ad6a88c944ba0c5997f9ad22787b5096960e57529ebd9db. Selecting auth Using token for quay.io/rhtap_qe/default-tenant/java-quarkus-177875135 Selecting auth Using token for quay.io/rhtap_qe/default-tenant/java-quarkus-177875135 WARNING: SBOM attachments are deprecated and support will be removed in a Cosign release soon after 2024-02-22 (see https://github.com/sigstore/cosign/issues/2755). Instead, please use SBOM attestations. WARNING: Downloading SBOMs this way does not ensure its authenticity. If you want to ensure a tamper-proof SBOM, download it using 'cosign download attestation '. Found SBOM of media type: text/spdx+json Running TPA scan on amd64 image manifest... % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 100 84722 0 0 100 84722 0 137k --:--:-- --:--:-- --:--:-- 136k{ "scanned" : { "total" : 46, "direct" : 11, "transitive" : 35 }, "providers" : { "rhtpa" : { "status" : { "ok" : true, "name" : "rhtpa", "code" : 200, "message" : "OK", "warnings" : { } }, "sources" : { } } }, "licenses" : [ { "status" : { "ok" : true, "name" : "deps.dev", "code" : 200, "message" : "OK", "warnings" : { } }, "summary" : { "total" : 0, "concluded" : 44, "permissive" : 0, "weakCopyleft" : 0, "strongCopyleft" : 0, "unknown" : 0, "deprecated" : 0, "osiApproved" : 0, "fsfLibre" : 0 }, "packages" : { "pkg:rpm/redhat/libffi@3.5.2-2.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libffi-3.5.2-2.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/libtasn1@4.21.0-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libtasn1-4.21.0-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/gpg-pubkey@567e347ad0044ade55ba8a5f199e2f91fd431d51-4ae0493b?distro=hummingbird-20251124" : { "evidence" : [ ] }, "pkg:rpm/redhat/pam-libs@1.7.2-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=pam-1.7.2-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/bash@5.3.9-3.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=bash-5.3.9-3.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/gpg-pubkey@c6e7f081cf80e13146676e88829b606631645531-66b6dccf?distro=hummingbird-20251124" : { "evidence" : [ ] }, "pkg:rpm/redhat/setup@2.15.0-29.2.hum1?arch=noarch&distro=hummingbird-20251124&upstream=setup-2.15.0-29.2.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/grep@3.12-3.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=grep-3.12-3.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:github/actions/checkout@v4" : { "evidence" : [ ] }, "pkg:rpm/redhat/glibc-minimal-langpack@2.42-12.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.42-12.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/ncurses-base@6.6-2.hum1?arch=noarch&distro=hummingbird-20251124&upstream=ncurses-6.6-2.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/alternatives@1.33-5.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=chkconfig-1.33-5.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/libcap@2.78-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libcap-2.78-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/filesystem@3.18-56.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=filesystem-3.18-56.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/libgcc@15.2.1-7.2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-15.2.1-7.2.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/ncurses-libs@6.6-2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=ncurses-6.6-2.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/pcre2-syntax@10.47-1.1.hum1?arch=noarch&distro=hummingbird-20251124&upstream=pcre2-10.47-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/audit-libs@4.1.4-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=audit-4.1.4-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/libstdc%2B%2B@15.2.1-7.2.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=gcc-15.2.1-7.2.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/hummingbird-release@20251124-1.13.hum1?arch=noarch&distro=hummingbird-20251124&upstream=hummingbird-release-20251124-1.13.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/p11-kit-trust@0.26.2-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=p11-kit-0.26.2-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/red 100 92761 0 8039 100 84722 13331 137k --:--:-- --:--:-- --:--:-- 149k hat/libeconf@0.7.9-3.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libeconf-0.7.9-3.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:oci/java-quarkus-177875135@sha256%3A3da50bdfe4ce12c31ad6a88c944ba0c5997f9ad22787b5096960e57529ebd9db" : { "evidence" : [ ] }, "pkg:rpm/redhat/pcre2@10.47-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=pcre2-10.47-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/p11-kit@0.26.2-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=p11-kit-0.26.2-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/libcap-ng@0.9.3-1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libcap-ng-0.9.3-1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/zlib-ng-compat@2.3.3-5.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=zlib-ng-2.3.3-5.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/findutils@4.10.0-7.1.hum1?arch=x86_64&distro=hummingbird-20251124&epoch=1&upstream=findutils-4.10.0-7.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:oci/core-runtime@sha256%3Ac2b8b0a4b588ce91b058b89dc6d50b6049b11dd879e98697974c92c0c6325026?repository_url=registry.access.redhat.com%2Fhi%2Fcore-runtime" : { "evidence" : [ ] }, "pkg:rpm/redhat/coreutils-single@9.11-1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=coreutils-9.11-1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/ca-certificates@2025.2.80_v9.0.304-7.2.hum1?arch=noarch&distro=hummingbird-20251124&upstream=ca-certificates-2025.2.80_v9.0.304-7.2.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/libselinux@3.10-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libselinux-3.10-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/systemd-libs@260.1-2.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=systemd-260.1-2.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/hummingbird-repos@20251124-1.13.hum1?arch=noarch&distro=hummingbird-20251124&upstream=hummingbird-release-20251124-1.13.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/glibc@2.42-12.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.42-12.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/gpg-pubkey@fcd355b305707a62da143ab6e422397e50fe8467a2a95343d246d6276afedf8f-68e6a1f3?distro=hummingbird-20251124" : { "evidence" : [ ] }, "pkg:rpm/redhat/libsepol@3.10-1.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=libsepol-3.10-1.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/glibc-common@2.42-12.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=glibc-2.42-12.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/gpg-pubkey@7e4624258c406535d56d6f135054e4a45a6340b3-6229229e?distro=hummingbird-20251124" : { "evidence" : [ ] }, "pkg:rpm/redhat/libattr@2.5.2-8.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=attr-2.5.2-8.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/hummingbird-gpg-keys@20251124-1.13.hum1?arch=noarch&distro=hummingbird-20251124&upstream=hummingbird-release-20251124-1.13.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:oci/hummingbird-builder@sha256%3A7ba43f9d565747cf9bcab9525ad0e84bb9af026ce848dbe2f4b11ead597e063b?repository_url=quay.io%2Fhummingbird-ci%2Fhummingbird-builder" : { "evidence" : [ ] }, "pkg:rpm/redhat/libacl@2.3.2-6.1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=acl-2.3.2-6.1.hum1.src.rpm" : { "evidence" : [ ] }, "pkg:rpm/redhat/sed@4.10-1.hum1?arch=x86_64&distro=hummingbird-20251124&upstream=sed-4.10-1.hum1.src.rpm" : { "evidence" : [ ] } } } ] }