Started by upstream project "build-scripts/jobs/release/jobs/jdk21u/jdk21u-release-linux-s390x-temurin" build number 29 originally caused by: Started by upstream project "build-scripts/release-openjdk21-pipeline" build number 72 originally caused by: Started by upstream project "build-scripts/utils/releaseTrigger_jdk21u" build number 7176 originally caused by: Started by timer Started by user Adam Farley Started by upstream project "build-scripts/release-openjdk21-pipeline" build number 71 originally caused by: Started by upstream project "build-scripts/utils/releaseTrigger_jdk21u" build number 7176 Running as SYSTEM Building remotely on jenkins-hetzner-worker (jsfsignX x64 git-hg gpgsign worker master) in workspace /home/jenkins/workspace/sbom_validator_job [WS-CLEANUP] Deleting project workspace... [WS-CLEANUP] Deferred wipeout is used... The recommended git tool is: git No credentials specified Cloning the remote Git repository Cloning repository https://github.com/adoptium/temurin-build > git init /home/jenkins/workspace/sbom_validator_job/temurin-build # timeout=10 Fetching upstream changes from https://github.com/adoptium/temurin-build > git --version # timeout=10 > git --version # 'git version 2.43.0' > git fetch --tags --force --progress -- https://github.com/adoptium/temurin-build +refs/heads/*:refs/remotes/origin/* # timeout=10 > git config remote.origin.url https://github.com/adoptium/temurin-build # timeout=10 > git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10 Avoid second fetch > git rev-parse refs/remotes/origin/master^{commit} # timeout=10 Checking out Revision 32875338464540841e727946fa4346141b1ae5ec (refs/remotes/origin/master) > git config core.sparsecheckout # timeout=10 > git checkout -f 32875338464540841e727946fa4346141b1ae5ec # timeout=10 Commit message: "cacerts: pull in updated certs from Mozilla (#4425)" > git rev-list --no-walk 32875338464540841e727946fa4346141b1ae5ec # timeout=10 Copied 2 artifacts from "build-scripts » jobs » release » jobs » jdk21u » jdk21u-release-linux-s390x-temurin" build number 29 [sbom_validator_job] $ /bin/sh -xe /tmp/jenkins17746659951219801166.sh + ls /home/jenkins/workspace/sbom_validator_job/sboms OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10-metadata.json + ls -1 /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10-metadata.json /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json + grep -v metadata + sh /home/jenkins/workspace/sbom_validator_job/temurin-build/tooling/validateSBOM.sh 21 jdk-21.0.11+10_adopt /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json validateSBOM.sh: Setting up workspace directory /home/jenkins/workspace/sbom_validator_job/sbom_validation JDK_MAJOR_VERSION='21' SOURCE_TAG='jdk-21.0.11+10_adopt' SBOM_LOCATION='/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json' validateSBOM.sh: Downloading CycloneDX CLI binary ... validateSBOM.sh: Downloaded CycloneDX CLI binary to 'cyclonedx-linux-x64' validateSBOM.sh: SBOM validation start. validateSBOM.sh: Running general SBOM validation from https://github.com/CycloneDX/cyclonedx-cli validateSBOM.sh: Running cyclonedx-linux-x64 ... Command: "/home/jenkins/workspace/sbom_validator_job/sbom_validation/cyclonedx-linux-x64" validate --input-file "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json" --input-format json BOM validated successfully. validateSBOM.sh: Passed CycloneDX validation check. validateSBOM.sh: Running command: sh validateSBOMcontent.sh "/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json" "21" "jdk-21.0.11+10_adopt" SBOMFILE='/home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json' MAJORVERSION='21' EXPECTED_SCM_REF='jdk-21.0.11+10_adopt' /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json /home/jenkins/workspace/sbom_validator_job/sboms/OpenJDK21U-sbom_s390x_linux_hotspot_21.0.11_10.json BOOTJDK is 20.0.2-beta+9-202309010331 Checking for JDK source SHA validity... 254494ad7d75b37f1c033245fb4dbd460d0347b5 refs/heads/release 254494ad7d75b37f1c033245fb4dbd460d0347b5 refs/tags/jdk-21.0.11+10_adopt^{} SBOM SHA is a valid repository tag commit SHA: 254494ad7d75b37f1c033245fb4dbd460d0347b5 FREETYPE is 2.14.2 Checking for temurin-build SHA validity: Checking for temurin-build SHA a612825ee82a20ac872d60958c349854c1f29a8e in https://github.com/adoptium/temurin-build a612825ee82a20ac872d60958c349854c1f29a8e refs/heads/v2026.04.01 validateSBOMcontent.sh: PASSED SBOM validation complete. validateSBOM.sh: SBOM validation complete. [WS-CLEANUP] Deleting project workspace... [WS-CLEANUP] Deferred wipeout is used... [WS-CLEANUP] done Finished: SUCCESS