sbom_validator_job
Started by upstream project "build-scripts/jobs/jdk25u/jdk25u-alpine-linux-x64-temurin" build number 7
originally caused by:
Started by upstream project "build-scripts/openjdk25-pipeline" build number 97
originally caused by:
Started by upstream project "build-scripts/weekly-openjdk25-pipeline" build number 5
originally caused by:
Started by timer
Running as SYSTEM
Building remotely on jenkins-worker (jsfsignX git-hg gpgsign worker master) in workspace /home/jenkins/workspace/sbom_validator_job
[WS-CLEANUP] Deleting project workspace...
[WS-CLEANUP] Deferred wipeout is used...
The recommended git tool is: git
No credentials specified
Cloning the remote Git repository
Cloning repository https://github.com/adamfarley/temurin-build
> git init /home/jenkins/workspace/sbom_validator_job/temurin-build # timeout=10
Fetching upstream changes from https://github.com/adamfarley/temurin-build
> git --version # timeout=10
> git --version # 'git version 2.34.1'
> git fetch --tags --force --progress -- https://github.com/adamfarley/temurin-build +refs/heads/*:refs/remotes/origin/* # timeout=10
> git config remote.origin.url https://github.com/adamfarley/temurin-build # timeout=10
> git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
Avoid second fetch
> git rev-parse refs/remotes/origin/generate_tag_from_version_numbers_conf^{commit} # timeout=10
Checking out Revision b7fe79f655e34a5e5b7a02fd04462dc6b7eaec74 (refs/remotes/origin/generate_tag_from_version_numbers_conf)
> git config core.sparsecheckout # timeout=10
> git checkout -f b7fe79f655e34a5e5b7a02fd04462dc6b7eaec74 # timeout=10
Commit message: "Removing unnecessary code"
> git rev-list --no-walk b7fe79f655e34a5e5b7a02fd04462dc6b7eaec74 # timeout=10
Copied 2 artifacts from "build-scripts » jobs » jdk25u » jdk25u-alpine-linux-x64-temurin" build number 7
[sbom_validator_job] $ /bin/sh -xe /tmp/jenkins3885175690006175315.sh
+ ls /home/jenkins/workspace/sbom_validator_job/sboms
OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05.json
OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05-metadata.json
+ + ls -1 /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05-metadata.json /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05.json
grep -v metadata
+ sh /home/jenkins/workspace/sbom_validator_job/temurin-build/tooling/validateSBOM.sh 25 scm_not_specified /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05.json
validateSBOM.sh: Setting up workspace directory /home/jenkins/workspace/sbom_validator_job/sbom_validation
WARNING: validateSBOM.sh: SOURCE_TAG does not use a valid upstream tag structure.
INFO: validateSBOM.sh: Build is presumed to be a personal or dev build.
INFO: validateSBOM.sh: SCM and SHA checks will be skipped.
validateSBOM.sh: Downloading CycloneDX CLI binary ...
validateSBOM.sh: Downloaded CycloneDX CLI binary to 'cyclonedx-linux-arm64'
validateSBOM.sh: SBOM validation start.
validateSBOM.sh: Running general SBOM validation from https://github.com/CycloneDX/cyclonedx-cli
validateSBOM.sh: Running cyclonedx-linux-arm64 ...
Command: "/home/jenkins/workspace/sbom_validator_job/sbom_validation/cyclonedx-linux-arm64" validate --input-file "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05.json" --input-format json
BOM validated successfully.
validateSBOM.sh: Passed CycloneDX validation check.
validateSBOM.sh: Running command: sh validateSBOMcontent.sh "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05.json" "25" ""
/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK25U-sbom_x64_alpine-linux_hotspot_2025-11-29-12-05.json
BOOTJDK is 24.0.2+12
FREETYPE is 2.13.3
Checking for JDK source SHA validity: The SCM_REF argument was set to an empty string; skipping SHA check.
validateSBOMcontent.sh: PASSED
SBOM validation complete.
validateSBOM.sh: SBOM validation complete.
[WS-CLEANUP] Deleting project workspace...
[WS-CLEANUP] Deferred wipeout is used...
[WS-CLEANUP] done
Finished: SUCCESS