== verifying bundle integrity ==
SHA256SUMS not present (unpackaged tree); checking image archives only
image archive checksums OK
== loading images into podman ==
-- images/drone-server-2.24.0-amd64.tar
   docker.io/drone/drone:2.24.0  OK (sha256:7ab7f77022c454413c053988117ae20d57241f61f09c7acb8b78fa6234a4bab5)
-- images/drone-runner-docker-1.8.5-amd64.tar
   docker.io/drone/drone-runner-docker:1.8.5  OK (sha256:5acf2be2f76f552782f0066344ed16c81f10a9894a88e800144e213763210358)
-- images/drone-git-amd64.tar
   docker.io/drone/git:latest  OK (sha256:b263385b74bdfe8cfd37e6b2415c08f0c40a71639e77bdcd60cc46a334627357)
-- images/ubi9-minimal-amd64.tar
   registry.access.redhat.com/ubi9/ubi-minimal:9.8  OK (sha256:7afdacfc2cb60fa6d1ffe1c6a0297ef1bc7d03dfe2386194f90351835a7a5ee6)
-- images/drone-scanners-20260911-amd64.tar
   localhost/devsecops/drone-scanners:20260911  OK (sha256:395d464659c45a42648ad4fdc6fb3d7be0793951888d8d49b0030fc86d51e37c)
   tagged localhost/devsecops/drone-scanners:stable -> localhost/devsecops/drone-scanners:20260911
== scanner self-test (network disabled) ==
SMOKE TEST: PASS (vulnerable fixture blocked, clean fixture passed)
== image-archive scan (network disabled): UBI 9 minimal base ==
SECURITY GATE: FAIL

PASS: all images loaded and verified; scanners work with no network.
Next: scripts/20-install.sh server|runner   (or scripts/15-push-registry.sh)