Running with gitlab-runner 13.8.0 (775dd39d)  on global-shared-gitlab-runner-89dbd4db8-gbfgw 79hzYLUT section_start:1613667613:resolve_secrets Resolving secrets section_end:1613667613:resolve_secrets section_start:1613667613:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/ib-pipeline-image:0.1 ... section_end:1613667613:prepare_executor section_start:1613667613:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-79hzylut-project-181-concurrent-05nctn to be running, status is Pending Running on runner-79hzylut-project-181-concurrent-05nctn via global-shared-gitlab-runner-89dbd4db8-gbfgw... section_end:1613667616:prepare_script section_start:1613667616:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/atlassian/confluence-data-center/confluence-node/.git/ Created fresh repository. Checking out abfb5768 as jweatherford-development-patch-81506... Skipping Git submodules setup section_end:1613667617:get_sources section_start:1613667617:download_artifacts Downloading artifacts Downloading artifacts for hardening_manifest (2032947)... Downloading artifacts from coordinator... ok  id=2032947 responseStatus=200 OK token=cvz_NLeX Downloading artifacts for load scripts (2032944)... Downloading artifacts from coordinator... ok  id=2032944 responseStatus=200 OK token=5PpBYXuT section_end:1613667617:download_artifacts section_start:1613667617:step_script Executing "step_script" stage of the job script $ if [[ "${CI_COMMIT_BRANCH}" == "master" || "${CI_COMMIT_BRANCH}" == "development" ]] && [[ "${CI_COMMIT_REF_PROTECTED}" != true ]]; then # collapsed multi-line command $ mkdir -p "${ARTIFACT_DIR}" $ python3 "${PIPELINE_REPO_DIR}/stages/check-cves/pipeline_wl_compare.py" --lint INFO: Log level set to info INFO: Grabbing CVEs for: atlassian/confluence-data-center/confluence-node INFO: CONTAINER APPROVAL STATUS INFO: Conditionally Approved INFO: CONTAINER APPROVAL TEXT INFO: Approved with conditions for 30 days: mitigation is NOT sufficient. Dependencies must be updated for any finding that is high or critical. We cannot know how bad actor will use some of these findings with additional potential 0 day. Company must patch its dependencies. INFO: Grabbing CVEs for: redhat/ubi/ubi8 INFO: Artifact Directory: ci-artifacts/lint section_end:1613667618:step_script section_start:1613667618:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/lint/: found 3 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=2032948 responseStatus=201 Created token=oyhLJfzD Uploading artifacts... variables.env: found 1 matching files and directories Uploading artifacts as "dotenv" to coordinator... ok id=2032948 responseStatus=201 Created token=oyhLJfzD section_end:1613667619:upload_artifacts_on_success section_start:1613667619:cleanup_file_variables Cleaning up file based variables section_end:1613667619:cleanup_file_variables Job succeeded