Started by upstream project "build-scripts/jobs/jdk8u/jdk8u-linux-x64-temurin" build number 554 originally caused by: Started by upstream project "build-scripts/openjdk8-pipeline" build number 3048 originally caused by: Started by upstream project "build-scripts/utils/betaTrigger_8ea" build number 335 originally caused by: Started by timer Running as SYSTEM Building remotely on jenkins-worker (jsfsignX git-hg gpgsign worker master) in workspace /home/jenkins/workspace/sbom_validator_job [WS-CLEANUP] Deleting project workspace... [WS-CLEANUP] Deferred wipeout is used... The recommended git tool is: git No credentials specified Cloning the remote Git repository Cloning repository https://github.com/adamfarley/temurin-build > git init /home/jenkins/workspace/sbom_validator_job/temurin-build # timeout=10 Fetching upstream changes from https://github.com/adamfarley/temurin-build > git --version # timeout=10 > git --version # 'git version 2.34.1' > git fetch --tags --force --progress -- https://github.com/adamfarley/temurin-build +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url https://github.com/adamfarley/temurin-build # timeout=10 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10 Avoid second fetch > git rev-parse refs/remotes/origin/generate_tag_from_version_numbers_conf^{commit} # timeout=10 Checking out Revision 3e45ed8ca5b08d0e1b4a6e4b850426270fe7ea25 (refs/remotes/origin/generate_tag_from_version_numbers_conf) > git config core.sparsecheckout # timeout=10 > git checkout -f 3e45ed8ca5b08d0e1b4a6e4b850426270fe7ea25 # timeout=10 Commit message: "Making code more concise and easier to maintain" > git rev-list --no-walk 3e45ed8ca5b08d0e1b4a6e4b850426270fe7ea25 # timeout=10 Copied 2 artifacts from "build-scripts » jobs » jdk8u » jdk8u-linux-x64-temurin" build number 554 [sbom_validator_job] $ /bin/sh -xe /tmp/jenkins16649070154262559555.sh + ls /home/jenkins/workspace/sbom_validator_job/sboms OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea.json OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea-metadata.json + ls -1 /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea-metadata.json /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea.json + grep -v metadata + sh /home/jenkins/workspace/sbom_validator_job/temurin-build/tooling/validateSBOM.sh 8 jdk8u482-b04_adopt /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea.json validateSBOM.sh: Setting up workspace directory /home/jenkins/workspace/sbom_validator_job/sbom_validation validateSBOM.sh: Downloading CycloneDX CLI binary ... validateSBOM.sh: Downloaded CycloneDX CLI binary to 'cyclonedx-linux-arm64' validateSBOM.sh: SBOM validation start. validateSBOM.sh: Running general SBOM validation from https://github.com/CycloneDX/cyclonedx-cli validateSBOM.sh: Running cyclonedx-linux-arm64 ... Command: "/home/jenkins/workspace/sbom_validator_job/sbom_validation/cyclonedx-linux-arm64" validate --input-file "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea.json" --input-format json BOM validated successfully. validateSBOM.sh: Passed CycloneDX validation check. validateSBOM.sh: Running command: sh validateSBOMcontent.sh "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea.json" "8" "jdk8u482-b04_adopt" /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea.json /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK8U-sbom_x64_linux_hotspot_8u482b04-ea.json BOOTJDK is 1.7.0_261-mockbuild_2020_04_27_15_15-b00 NOTE: ALSA version not 1.1.8 (SBOM has 1.1.6) - ignoring because ALSA version is determined by devkit now FREETYPE is 2.3.11 Checking for JDK source SHA validity: 314444e63d476e57989a254600411c1f826a00ad refs/heads/release 314444e63d476e57989a254600411c1f826a00ad refs/tags/jdk8u482-b04_adopt^{} Checking for temurin-build SHA validity: Checking for temurin-build SHA 9dacaef34232381c78a756427f709ff8e56fd517 in https://github.com/adoptium/temurin-build 9dacaef34232381c78a756427f709ff8e56fd517 HEAD 9dacaef34232381c78a756427f709ff8e56fd517 refs/heads/master validateSBOMcontent.sh: PASSED SBOM validation complete. validateSBOM.sh: SBOM validation complete. [WS-CLEANUP] Deleting project workspace... [WS-CLEANUP] Deferred wipeout is used... [WS-CLEANUP] done Finished: SUCCESS