sbom_validator_job
Started by upstream project "build-scripts/jobs/release/jobs/jdk26/jdk26-release-linux-s390x-temurin" build number 1
originally caused by:
Started by upstream project "build-scripts/release-openjdk26-pipeline" build number 1
originally caused by:
Started by upstream project "build-scripts/utils/releaseTrigger_jdk26" build number 26
originally caused by:
Started by user sophia-guo
Running as SYSTEM
Building remotely on jenkins-hetzner-worker (jsfsignX x64 git-hg gpgsign worker master) in workspace /home/jenkins/workspace/sbom_validator_job
[WS-CLEANUP] Deleting project workspace...
[WS-CLEANUP] Deferred wipeout is used...
The recommended git tool is: git
No credentials specified
Cloning the remote Git repository
Cloning repository https://github.com/adoptium/temurin-build
> git init /home/jenkins/workspace/sbom_validator_job/temurin-build # timeout=10
Fetching upstream changes from https://github.com/adoptium/temurin-build
> git --version # timeout=10
> git --version # 'git version 2.43.0'
> git fetch --tags --force --progress -- https://github.com/adoptium/temurin-build +refs/heads/*:refs/remotes/origin/* # timeout=10
> git config remote.origin.url https://github.com/adoptium/temurin-build # timeout=10
> git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
Avoid second fetch
> git rev-parse refs/remotes/origin/master^{commit} # timeout=10
Checking out Revision b66b48d8f7ece700232c5edfb1b6a1479a5fd707 (refs/remotes/origin/master)
> git config core.sparsecheckout # timeout=10
> git checkout -f b66b48d8f7ece700232c5edfb1b6a1479a5fd707 # timeout=10
Commit message: "Linux repro (#4402)"
> git rev-list --no-walk b66b48d8f7ece700232c5edfb1b6a1479a5fd707 # timeout=10
Copied 2 artifacts from "build-scripts » jobs » release » jobs » jdk26 » jdk26-release-linux-s390x-temurin" build number 1
[sbom_validator_job] $ /bin/sh -xe /tmp/jenkins7634749920399475895.sh
+ ls /home/jenkins/workspace/sbom_validator_job/sboms
OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json
OpenJDK26U-sbom_s390x_linux_hotspot_26_35-metadata.json
+ ls -1 /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35-metadata.json /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json
+ grep -v metadata
+ sh /home/jenkins/workspace/sbom_validator_job/temurin-build/tooling/validateSBOM.sh 26 jdk-26+35_adopt /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json
validateSBOM.sh: Setting up workspace directory /home/jenkins/workspace/sbom_validator_job/sbom_validation
JDK_MAJOR_VERSION='26'
SOURCE_TAG='jdk-26+35_adopt'
SBOM_LOCATION='/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json'
validateSBOM.sh: Downloading CycloneDX CLI binary ...
validateSBOM.sh: Downloaded CycloneDX CLI binary to 'cyclonedx-linux-x64'
validateSBOM.sh: SBOM validation start.
validateSBOM.sh: Running general SBOM validation from https://github.com/CycloneDX/cyclonedx-cli
validateSBOM.sh: Running cyclonedx-linux-x64 ...
Command: "/home/jenkins/workspace/sbom_validator_job/sbom_validation/cyclonedx-linux-x64" validate --input-file "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json" --input-format json
BOM validated successfully.
validateSBOM.sh: Passed CycloneDX validation check.
validateSBOM.sh: Running command: sh validateSBOMcontent.sh "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json" "26" "jdk-26+35_adopt"
SBOMFILE='/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json'
MAJORVERSION='26'
EXPECTED_SCM_REF='jdk-26+35_adopt'
/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json
/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK26U-sbom_s390x_linux_hotspot_26_35.json
BOOTJDK is 25.0.2+10-LTS
FREETYPE is 2.13.3
Checking for JDK source SHA validity...
ed902b3d8421384b1684466bfcae2153984c2f0d refs/heads/release_jdk26
ed902b3d8421384b1684466bfcae2153984c2f0d refs/tags/jdk-26+35_adopt^{}
SBOM SHA is a valid repository tag commit SHA: ed902b3d8421384b1684466bfcae2153984c2f0d
Checking for temurin-build SHA validity: Checking for temurin-build SHA 8ce7dd34f6d8620171ee345882be40d24b558f92 in https://github.com/adoptium/temurin-build
8ce7dd34f6d8620171ee345882be40d24b558f92 refs/heads/v2026.03.01
validateSBOMcontent.sh: PASSED
SBOM validation complete.
validateSBOM.sh: SBOM validation complete.
[WS-CLEANUP] Deleting project workspace...
[WS-CLEANUP] Deferred wipeout is used...
[WS-CLEANUP] done
Finished: SUCCESS