+ ca_bundle=/mnt/trusted-ca/ca-bundle.crt
+ system_bundle=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+ '[' -f /mnt/trusted-ca/ca-bundle.crt ']'
++ date --utc -Ins
+ echo '[2026-04-24T09:49:43,321423311+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt'
[2026-04-24T09:49:43,321423311+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
+ cat /mnt/trusted-ca/ca-bundle.crt
++ dirname 1aaf80a4-abc1-43af-a69e-395217338016/snapshot_spec.json
+ release_id=1aaf80a4-abc1-43af-a69e-395217338016
+ mobster_args=(--data-dir "/var/workdir/release" --snapshot-spec "1aaf80a4-abc1-43af-a69e-395217338016/snapshot_spec.json" --atlas-api-url "https://server-tsf-tpa.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com" --release-id "$release_id" --augment-concurrency "8" --upload-concurrency "8" --result-dir "1aaf80a4-abc1-43af-a69e-395217338016/results" --release-data "1aaf80a4-abc1-43af-a69e-395217338016/data.json")
+ [[ -n https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j ]]
+ [[ -n https://rekor-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com ]]
+ [[ -n https://fulcio-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com ]]
+ [[ -n https://tuf-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com ]]
+ [[ -n ^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$ ]]
+ cosign initialize --root https://tuf-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com/root.json --mirror https://tuf-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com
WARNING: Fetching initial root from URL without providing its checksum is deprecated and will be disallowed in a future Cosign release. Please provide the initial root checksum via the --root-checksum argument.
+ mobster_args+=(--oidc-token /var/run/sigstore/cosign/oidc-token --fulcio-url "https://fulcio-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com" --oidc-issuer "https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j" --oidc-identity-pattern "^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$" --rekor-url "https://rekor-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com")
+ [[ -n '' ]]
+ process_component_sboms --data-dir /var/workdir/release --snapshot-spec 1aaf80a4-abc1-43af-a69e-395217338016/snapshot_spec.json --atlas-api-url https://server-tsf-tpa.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com --release-id 1aaf80a4-abc1-43af-a69e-395217338016 --augment-concurrency 8 --upload-concurrency 8 --result-dir 1aaf80a4-abc1-43af-a69e-395217338016/results --release-data 1aaf80a4-abc1-43af-a69e-395217338016/data.json --oidc-token /var/run/sigstore/cosign/oidc-token --fulcio-url https://fulcio-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com --oidc-issuer https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j --oidc-identity-pattern '^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$' --rekor-url https://rekor-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com
2026-04-24 09:49:45,424 [INFO] mobster.log: Logging level set to 10
2026-04-24 09:49:45,426 [DEBUG] mobster.tekton.component: skip_upload=False, so no snapshot / release data upload to S3, for release_id=1aaf80a4-abc1-43af-a69e-395217338016
2026-04-24 09:49:45,426 [INFO] mobster.tekton.component: Starting SBOM augmentation
2026-04-24 09:49:45,427 [DEBUG] mobster.release: No RH release repository specified for repository quay.io/rhtap_qe/default-managed-tenant-pm9c4/default-managed-tenant-pm9c4-1e5ea0/tsf-demo-comp
2026-04-24 09:49:45,427 [INFO] mobster.oci: Fetching manifest for quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b
2026-04-24 09:49:45,535 [DEBUG] mobster.oci.cosign.keyless: Executing for quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b command 'cosign verify-attestation --rekor-url https://rekor-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com --certificate-oidc-issuer https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j --certificate-identity-regexp ^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$ --type spdxjson quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b'
2026-04-24 09:49:45,956 [DEBUG] mobster.oci.cosign.keyless: Executing for quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b command 'cosign verify-attestation --rekor-url https://rekor-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com --certificate-oidc-issuer https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j --certificate-identity-regexp ^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$ --type spdxjson quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b'
2026-04-24 09:49:46,404 [DEBUG] mobster.oci.cosign.keyless: Executing for quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b command 'cosign verify-attestation --rekor-url https://rekor-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com --certificate-oidc-issuer https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j --certificate-identity-regexp ^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$ --type spdxjson quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b'
2026-04-24 09:49:46,853 [DEBUG] mobster.oci.cosign.keyless: Executing for quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b command 'cosign verify-attestation --rekor-url https://rekor-server-tsf-tas.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com --certificate-oidc-issuer https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j --certificate-identity-regexp ^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$ --type spdxjson quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b'
2026-04-24 09:49:47,277 [INFO] mobster.cmd.augment: Successfully augmented SBOM for image quay.io/rhtap_qe/default-tenant/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b (released to quay.io/rhtap_qe/default-managed-tenant-pm9c4/default-managed-tenant-pm9c4-1e5ea0/tsf-demo-comp and pushed to quay.io/rhtap_qe/default-managed-tenant-pm9c4/default-managed-tenant-pm9c4-1e5ea0/tsf-demo-comp)
2026-04-24 09:49:47,278 [DEBUG] mobster.tekton.component: Successfully augmented SBoms for ReleaseId: 1aaf80a4-abc1-43af-a69e-395217338016
2026-04-24 09:49:49,789 [DEBUG] mobster.tekton.component: Successfully attested image quay.io/rhtap_qe/default-managed-tenant-pm9c4/default-managed-tenant-pm9c4-1e5ea0/tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b using keyless signing method.
2026-04-24 09:49:49,789 [INFO] mobster.tekton.common: Starting SBOM upload to Atlas
2026-04-24 09:49:49,790 [INFO] mobster.cmd.upload.upload: Found 1 SBOMs to upload
2026-04-24 09:49:49,947 [INFO] mobster.cmd.upload.upload: Uploading /tmp/tmpc54xusdk/quay.io-rhtap_qe-default-managed-tenant-pm9c4-default-managed-tenant-pm9c4-1e5ea0-tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b-2c933032c0464652bd699cb088308ea5 to TPA
2026-04-24 09:49:49,948 [DEBUG] mobster.cmd.upload.oidc: HTTP post https://server-tsf-tpa.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com/api/v2/sbom, retrying 1 times
2026-04-24 09:49:49,948 [DEBUG] mobster.cmd.upload.oidc: Fetching new token from https://tsf-sso.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com/realms/tsf-iam/protocol/openid-connect/token
2026-04-24 09:49:50,242 [DEBUG] mobster.cmd.upload.oidc: Token will expire in 300 seconds
2026-04-24 09:49:50,563 [DEBUG] mobster.cmd.upload.oidc: HTTP request [post]: status code: https://server-tsf-tpa.apps.rosa.kx-4b83ebf480.yfhz.p3.openshiftapps.com/api/v2/sbom
2026-04-24 09:49:50,563 [INFO] mobster.cmd.upload.upload: Successfully uploaded /tmp/tmpc54xusdk/quay.io-rhtap_qe-default-managed-tenant-pm9c4-default-managed-tenant-pm9c4-1e5ea0-tsf-demo-comp@sha256:9e39265fb940b712cc079cd80d738f3c32d8de21f3504bb76dc799fb912bbf1b-2c933032c0464652bd699cb088308ea5 to TPA (588.751953125 bytes)
2026-04-24 09:49:50,564 [INFO] mobster.cmd.upload.upload: Upload complete