+ ca_bundle=/mnt/trusted-ca/ca-bundle.crt
+ system_bundle=/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+ '[' -f /mnt/trusted-ca/ca-bundle.crt ']'
++ date --utc -Ins
+ echo '[2026-04-25T08:46:51,786727159+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt'
[2026-04-25T08:46:51,786727159+00:00] Using mounted CA bundle: /mnt/trusted-ca/ca-bundle.crt
+ cat /mnt/trusted-ca/ca-bundle.crt
++ dirname 8103f421-b908-4d9c-8645-746f0f08377c/snapshot_spec.json
+ release_id=8103f421-b908-4d9c-8645-746f0f08377c
+ mobster_args=(--data-dir "/var/workdir/release" --snapshot-spec "8103f421-b908-4d9c-8645-746f0f08377c/snapshot_spec.json" --atlas-api-url "https://server-tsf-tpa.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com" --release-id "$release_id" --augment-concurrency "8" --upload-concurrency "8" --result-dir "8103f421-b908-4d9c-8645-746f0f08377c/results" --release-data "8103f421-b908-4d9c-8645-746f0f08377c/data.json")
+ [[ -n https://oidc.op1.openshiftapps.com/2jtsga3i2etnl697l7bk5i1kmbm4a95j ]]
+ [[ -n https://rekor-server-tsf-tas.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com ]]
+ [[ -n https://fulcio-server-tsf-tas.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com ]]
+ [[ -n https://tuf-tsf-tas.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com ]]
+ [[ -n ^https://kubernetes.io/namespaces/[a-z0-9-]+-tenant/serviceaccounts/build-pipeline-[a-z0-9-]+$ ]]
+ cosign initialize --root https://tuf-tsf-tas.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com/root.json --mirror https://tuf-tsf-tas.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com
WARNING: Fetching initial root from URL without providing its checksum is deprecated and will be disallowed in a future Cosign release. Please provide the initial root checksum via the --root-checksum argument.
Error: Get "https://tuf-tsf-tas.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com/root.json": tls: failed to verify certificate: x509: certificate signed by unknown authority
error during command execution: Get "https://tuf-tsf-tas.apps.rosa.kx-4a0f1bf699.lx6e.p3.openshiftapps.com/root.json": tls: failed to verify certificate: x509: certificate signed by unknown authority