Running with gitlab-runner 13.2.0 (353dd94e)  on global-shared-gitlab-runner-74d5bd4795-j8zps oFz8WHMZ section_start:1601915217:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/jenkins-oscap-agent:1.1 ... section_end:1601915217:prepare_executor section_start:1601915217:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-ofz8whmz-project-181-concurrent-0sxfwh to be running, status is Pending Running on runner-ofz8whmz-project-181-concurrent-0sxfwh via global-shared-gitlab-runner-74d5bd4795-j8zps... section_end:1601915220:prepare_script section_start:1601915220:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/atlassian/confluence-data-center/confluence-node/.git/ Created fresh repository. Checking out bd78b076 as confluence_7.4.4_upgrade... Skipping Git submodules setup section_end:1601915220:get_sources section_start:1601915220:download_artifacts Downloading artifacts Downloading artifacts for load scripts (354430)... Downloading artifacts from coordinator... ok  id=354430 responseStatus=200 OK token=sjHQhQ_Q Downloading artifacts for openscap compliance (354437)... Downloading artifacts from coordinator... ok  id=354437 responseStatus=200 OK token=4qpy1QGW Downloading artifacts for openscap cve (354438)... Downloading artifacts from coordinator... ok  id=354438 responseStatus=200 OK token=gXekhZsW Downloading artifacts for twistlock scan (354439)... Downloading artifacts from coordinator... ok  id=354439 responseStatus=200 OK token=AtHpd2NV Downloading artifacts for anchore scan (354440)... Downloading artifacts from coordinator... ok  id=354440 responseStatus=200 OK token=qXinLKQ4 section_end:1601915221:download_artifacts section_start:1601915221:step_script Executing "step_script" stage of the job script $ wl_image_path=$(echo "${CI_PROJECT_PATH}" | sed -e 's/.*dsop\/\(.*\)/\1/') $ if [[ $DISTROLESS ]]; then # collapsed multi-line command Fetching Whitelisted CVEs from parent: redhat/ubi/ubi8:8.2 Whitelist Set: {'463a9a24225c26f7a5bf3f38908e5cb3', 'CVE-2019-20387', 'CVE-2019-19221', 'CVE-2019-2708', 'CVE-2019-12900', 'CVE-2019-20386', 'CCE-82360-9', 'CCE-82494-6', 'CVE-2020-24659', 'CCE-80938-4', 'CVE-2020-10029', 'CCE-82267-6', 'CVE-2019-3842', 'CVE-2019-20907', 'CCE-82949-9', 'CVE-2020-8177', 'CVE-2020-15358', 'CVE-2020-14422', '68e630cef4a8533b139875aa5fc54da5', 'CCE-82968-9', 'e7573262736ef52353cde3bae2617782', 'CVE-2020-15945', 'bcd159901fe47efddae5c095b4b0d7fd', 'CVE-2019-20807', '34de21e516c0ca50a96e5386f163f8bf', 'CVE-2019-18276', 'CVE-2019-20388', 'CVE-2020-8492', 'CVE-2019-19234', 'CVE-2019-20838', 'CVE-2020-1752', 'CCE-82368-2', 'CVE-2019-15903', 'c4ad80832b361f81df2a31e5b6b09864', 'CVE-2020-14155', 'CVE-2020-26137', '3e5fad1c039f3ecfd1dcdc94d2f1f9a0', 'CVE-2018-16428', 'CCE-82985-3', 'CCE-82979-6', 'CVE-2019-19956', 'CCE-82220-5', 'CVE-2019-1551', 'CVE-2020-1730', 'CVE-2019-20218', 'CVE-2020-8231', 'CVE-2020-1751', 'c2e44319ae5b3b040044d8ae116d1c2f', 'CVE-2019-9633', 'CVE-2019-13012', 'CVE-2020-13631', 'CVE-2020-16135', 'CVE-2020-7595', 'CVE-2020-13630', '953dfbea1b1e9d5829fbed2e390bd3af', 'CCE-82473-0', 'CVE-2019-19906', 'abb121e9621abdd452f65844954cf1c1', 'CVE-2018-16429', 'CVE-2020-24370', '3456a263793066e9b5063ada6e47917d', 'CVE-2020-6405', '320a97c6816565eedf3545833df99dd0', 'CVE-2020-9327', 'CVE-2019-13627', 'CVE-2017-14166', '41cb7cdf04850e33a11f80c42bf660b3', 'CCE-82959-8', '698044205a9c4a6d48b7937e66a6bf4f', 'CCE-80935-0', 'CCE-82168-6', 'CCE-82472-2', 'CVE-2019-18224', 'CVE-2020-13632', 'CVE-2020-26116', 'CVE-2020-8927', 'CVE-2020-13776', 'CVE-2017-14501', 'CVE-2019-15165', 'CVE-2019-20916', 'CCE-82474-8', 'CVE-2019-14889', 'CVE-2020-24977', 'CVE-2020-13434', 'CVE-2020-14382', '639f6f1177735759703e928c14714a59', 'addbb93c22e9b0988b8b40392a4538cb'} Whitelist Set Length: 87 Vuln Set: {'CVE-2018-14718', 'CVE-2020-13935', 'VULNDB-179332', 'VULNDB-179335', 'CVE-2020-9484', 'VULNDB-210294', 'CVE-2018-20826', 'CVE-2019-15005', 'CVE-2019-20387', 'VULNDB-209604', 'CVE-2020-8022', 'CVE-2019-11588', 'CVE-2019-19221', 'CVE-2019-2708', 'CVE-2019-3399', 'VULNDB-233710', 'VULNDB-229216', 'VULNDB-188695', 'VULNDB-217930', 'CVE-2020-1951', 'CVE-2019-12900', 'CVE-2020-14168', 'VULNDB-93162', 'CVE-2019-20386', 'VULNDB-175810', 'VULNDB-190170', 'CVE-2016-6668', 'CCE-82360-9', 'CCE-82494-6', 'CVE-2020-24750', 'CVE-2019-20414', 'CVE-2017-5983', 'VULNDB-179334', 'CVE-2020-4027', 'CVE-2020-24659', 'CVE-2018-14719', 'CCE-80938-4', 'VULNDB-220038', 'CVE-2020-8840', 'CVE-2020-10029', 'CCE-82267-6', 'CVE-2019-20402', 'VULNDB-179331', 'CVE-2019-3842', 'CCE-82949-9', 'CVE-2019-20907', 'CVE-2020-14174', 'CVE-2018-11307', 'CVE-2019-20418', 'CVE-2020-1953', 'CVE-2020-8177', 'VULNDB-225495', 'CVE-2020-10968', 'CVE-2020-24616', 'CVE-2019-14892', 'CVE-2020-15358', 'CVE-2020-4024', 'CVE-2020-11113', 'CVE-2019-20408', 'CVE-2020-14422', 'CVE-2018-14720', 'VULNDB-187014', 'CCE-82968-9', 'VULNDB-201066', 'CVE-2019-20411', 'VULNDB-93555', 'CVE-2020-14060', 'VULNDB-214563', 'CVE-2020-15945', 'VULNDB-92947', 'VULNDB-21377', 'CVE-2019-20807', 'CVE-2018-11796', 'VULNDB-188694', 'CVE-2018-11762', 'VULNDB-96648', 'CVE-2017-7658', 'VULNDB-187016', 'CVE-2019-10088', 'CVE-2020-4025', 'CVE-2018-13401', 'CVE-2018-13395', 'VULNDB-179330', 'CVE-2019-20897', 'CVE-2019-18276', 'CVE-2019-20388', 'CVE-2013-7285', 'CVE-2017-7656', 'CVE-2020-8492', 'CVE-2020-14175', 'CVE-2017-18104', 'CVE-2019-19234', 'CVE-2017-18033', 'CVE-2019-16943', 'CVE-2017-16862', 'VULNDB-187015', 'CVE-2019-3402', 'CVE-2019-16869', 'CVE-2017-14594', 'VULNDB-233709', 'CVE-2019-10094', 'VULNDB-194971', 'CVE-2019-12400', 'CVE-2019-20899', 'CVE-2018-19360', 'CVE-2020-1752', 'CCE-82368-2', 'VULNDB-223108', 'CVE-2019-15903', 'CVE-2019-20415', 'CVE-2018-17197', 'CVE-2018-13389', 'CVE-2019-20106', 'CVE-2020-4029', 'CVE-2019-20330', 'CVE-2019-20410', 'VULNDB-188693', 'CVE-2020-14173', 'VULNDB-212416', 'CVE-2020-26137', 'CVE-2020-14164', 'VULNDB-210292', 'VULNDB-179336', 'CVE-2020-11111', 'CVE-2018-1000873', 'CVE-2020-11112', 'CVE-2018-13404', 'CVE-2020-14169', 'CVE-2019-16942', 'CVE-2018-5231', 'CVE-2020-14178', 'CVE-2019-3400', 'CVE-2017-7957', 'CVE-2018-14721', 'CVE-2020-11996', 'CVE-2019-17267', 'VULNDB-82272', 'CVE-2020-4021', 'CCE-82985-3', 'CCE-82979-6', 'CVE-2019-11584', 'CVE-2020-3898', 'CVE-2019-19956', 'CVE-2019-20412', 'VULNDB-230143', 'CVE-2019-14893', 'VULNDB-77089', 'CCE-82220-5', 'CVE-2020-11619', 'CVE-2020-4022', 'CVE-2019-8442', 'CVE-2020-4028', 'VULNDB-204803', 'CVE-2020-9488', 'CVE-2020-14062', 'CVE-2019-1551', 'CVE-2018-20232', 'CVE-2017-18097', 'CVE-2020-1730', 'CVE-2019-20218', 'CVE-2015-8398', 'CVE-2018-5968', 'CVE-2020-10672', 'CVE-2019-20444', 'CVE-2020-8231', 'CVE-2020-14165', 'CVE-2019-20901', 'CVE-2020-1751', 'CVE-2019-11586', 'CVE-2018-11761', 'CVE-2018-19362', 'CVE-2017-18039', 'CVE-2020-9547', 'CVE-2020-10673', 'CVE-2019-13012', 'CVE-2020-14195', 'CVE-2015-8399', 'CVE-2017-16865', 'VULNDB-163972', 'CVE-2020-13631', 'CVE-2020-13934', 'CVE-2020-16135', 'CVE-2020-7595', 'CVE-2020-13630', 'CVE-2018-20200', 'CVE-2017-9505', 'CVE-2018-13403', 'CVE-2020-15094', 'VULNDB-179337', 'CVE-2016-4319', 'VULNDB-141255', 'CVE-2018-8017', 'CVE-2019-19906', 'CVE-2019-15013', 'VULNDB-208624', 'CVE-2017-18098', 'CVE-2016-6285', 'CVE-2019-16335', 'CVE-2017-9735', 'CVE-2019-3401', 'CVE-2019-11587', 'CVE-2020-24370', 'CVE-2016-4318', 'CVE-2019-20413', 'CVE-2020-14172', 'VULNDB-104207', 'CVE-2017-18085', 'CVE-2020-10969', 'VULNDB-150492', 'VULNDB-218872', 'CVE-2016-10750', 'CVE-2020-6405', 'CVE-2018-20824', 'VULNDB-187013', 'CVE-2019-10172', 'CVE-2019-8443', 'VULNDB-222908', 'CVE-2020-9327', 'VULNDB-232731', 'CVE-2020-14181', 'CVE-2020-5421', 'CCE-82959-8', 'CVE-2019-20445', 'VULNDB-156026', 'VULNDB-96647', 'CVE-2016-3674', 'VULNDB-103881', 'CCE-80935-0', 'VULNDB-137523', 'CVE-2019-17531', 'CCE-82168-6', 'CVE-2017-16856', 'CVE-2019-20419', 'CVE-2019-20409', 'VULNDB-179333', 'VULNDB-134239', 'VULNDB-238682', 'CVE-2020-1950', 'CVE-2018-5230', 'CVE-2017-15095', 'CVE-2019-20417', 'CVE-2020-13632', 'CVE-2018-13402', 'CVE-2017-18101', 'CVE-2019-20898', 'CVE-2017-16864', 'CVE-2020-14061', 'CVE-2019-10173', 'CVE-2020-26116', 'CVE-2017-16863', 'VULNDB-225489', 'CVE-2016-4317', 'CVE-2020-8927', 'CVE-2020-11612', 'VULNDB-177199', 'CVE-2019-3403', 'CVE-2018-7489', 'CVE-2017-18084', 'CVE-2017-18100', 'CVE-2019-8449', 'CVE-2020-13776', 'CVE-2019-17571', 'CVE-2019-11585', 'VULNDB-201067', 'CVE-2019-15165', 'CVE-2020-14167', 'CVE-2019-20916', 'CVE-2018-13387', 'VULNDB-229673', 'CVE-2016-6283', 'CVE-2020-11620', 'CVE-2020-10663', 'CVE-2019-14889', 'CVE-2019-11583', 'CVE-2017-18640', 'CVE-2020-24977', 'CVE-2019-14540', 'CVE-2018-20237', 'CVE-2018-13400', 'CVE-2020-13434', 'CVE-2018-5232', 'CVE-2020-14382', 'CVE-2020-9546', 'VULNDB-203133', 'CVE-2017-18086', 'CVE-2017-7657', 'CVE-2020-9548', 'CVE-2019-20416', 'CVE-2019-10010', 'CVE-2018-13391', 'CVE-2018-19361'} Vuln Set Length: 291 NON-WHITELISTED VULNERABILITIES FOUND Vuln Set Delta: {'CVE-2020-13935', 'CVE-2018-14718', 'VULNDB-179332', 'VULNDB-179335', 'CVE-2020-9484', 'VULNDB-210294', 'CVE-2018-20826', 'CVE-2019-15005', 'VULNDB-209604', 'CVE-2020-8022', 'CVE-2019-11588', 'CVE-2019-3399', 'VULNDB-233710', 'VULNDB-229216', 'VULNDB-188695', 'CVE-2020-1951', 'CVE-2020-14168', 'VULNDB-93162', 'VULNDB-217930', 'VULNDB-175810', 'VULNDB-190170', 'CVE-2016-6668', 'CVE-2019-20414', 'CVE-2020-24750', 'CVE-2017-5983', 'VULNDB-179334', 'CVE-2020-4027', 'CVE-2018-14719', 'VULNDB-220038', 'CVE-2020-8840', 'CVE-2019-20402', 'VULNDB-179331', 'CVE-2020-14174', 'CVE-2018-11307', 'CVE-2019-20418', 'CVE-2020-1953', 'VULNDB-225495', 'CVE-2020-10968', 'CVE-2020-24616', 'CVE-2019-14892', 'CVE-2020-4024', 'CVE-2020-11113', 'CVE-2019-20408', 'CVE-2018-14720', 'VULNDB-187014', 'VULNDB-201066', 'CVE-2019-20411', 'VULNDB-93555', 'CVE-2020-14060', 'VULNDB-214563', 'VULNDB-92947', 'VULNDB-188694', 'VULNDB-21377', 'CVE-2018-11796', 'CVE-2018-11762', 'VULNDB-96648', 'CVE-2017-7658', 'VULNDB-187016', 'CVE-2019-10088', 'CVE-2020-4025', 'CVE-2018-13401', 'CVE-2018-13395', 'VULNDB-179330', 'CVE-2013-7285', 'CVE-2017-7656', 'CVE-2020-14175', 'CVE-2017-18104', 'CVE-2017-18033', 'CVE-2019-16943', 'CVE-2017-16862', 'VULNDB-187015', 'CVE-2019-3402', 'CVE-2019-16869', 'CVE-2017-14594', 'VULNDB-233709', 'CVE-2019-10094', 'VULNDB-194971', 'CVE-2019-12400', 'CVE-2019-20899', 'CVE-2018-19360', 'VULNDB-223108', 'CVE-2019-20415', 'CVE-2018-17197', 'CVE-2018-13389', 'CVE-2019-20106', 'CVE-2020-4029', 'CVE-2019-20330', 'CVE-2019-20410', 'VULNDB-188693', 'CVE-2020-14173', 'VULNDB-212416', 'CVE-2020-14164', 'VULNDB-210292', 'VULNDB-179336', 'CVE-2020-11111', 'CVE-2018-1000873', 'CVE-2020-11112', 'CVE-2018-13404', 'CVE-2020-14169', 'CVE-2019-16942', 'CVE-2018-5231', 'CVE-2020-14178', 'CVE-2019-3400', 'CVE-2017-7957', 'CVE-2018-14721', 'CVE-2020-11996', 'CVE-2019-17267', 'VULNDB-82272', 'CVE-2020-4021', 'CVE-2019-11584', 'CVE-2020-3898', 'CVE-2019-20412', 'VULNDB-230143', 'CVE-2019-14893', 'VULNDB-77089', 'CVE-2020-11619', 'CVE-2020-4022', 'CVE-2019-8442', 'CVE-2020-4028', 'VULNDB-204803', 'CVE-2020-9488', 'CVE-2020-14062', 'CVE-2018-20232', 'CVE-2017-18097', 'CVE-2019-20901', 'CVE-2015-8398', 'CVE-2019-11586', 'CVE-2018-5968', 'CVE-2020-10672', 'CVE-2019-20444', 'CVE-2020-14165', 'CVE-2019-10010', 'CVE-2018-11761', 'CVE-2018-19362', 'CVE-2017-18039', 'CVE-2020-9547', 'CVE-2020-10673', 'CVE-2020-14195', 'CVE-2015-8399', 'CVE-2017-16865', 'VULNDB-163972', 'CVE-2020-13934', 'CVE-2018-20200', 'CVE-2017-9505', 'CVE-2018-13403', 'CVE-2020-15094', 'VULNDB-179337', 'CVE-2016-4319', 'VULNDB-141255', 'CVE-2018-8017', 'CVE-2019-15013', 'VULNDB-208624', 'CVE-2017-18098', 'CVE-2016-6285', 'CVE-2019-16335', 'CVE-2017-9735', 'CVE-2019-3401', 'CVE-2019-11587', 'VULNDB-104207', 'CVE-2016-4318', 'CVE-2019-20413', 'CVE-2020-14172', 'CVE-2017-18085', 'CVE-2020-10969', 'VULNDB-150492', 'VULNDB-218872', 'CVE-2016-10750', 'CVE-2018-20824', 'VULNDB-187013', 'CVE-2019-10172', 'CVE-2019-8443', 'VULNDB-222908', 'VULNDB-232731', 'CVE-2020-14181', 'CVE-2020-5421', 'CVE-2019-20445', 'VULNDB-156026', 'VULNDB-96647', 'CVE-2016-3674', 'VULNDB-103881', 'VULNDB-137523', 'CVE-2019-17531', 'CVE-2017-16856', 'CVE-2019-20419', 'CVE-2019-20409', 'VULNDB-179333', 'VULNDB-134239', 'VULNDB-238682', 'CVE-2020-1950', 'CVE-2018-5230', 'CVE-2017-15095', 'CVE-2019-20417', 'CVE-2018-13402', 'CVE-2017-18101', 'CVE-2019-20898', 'CVE-2017-16864', 'CVE-2020-14061', 'CVE-2019-10173', 'CVE-2017-16863', 'VULNDB-225489', 'CVE-2016-4317', 'CVE-2020-11612', 'VULNDB-177199', 'CVE-2019-3403', 'CVE-2018-7489', 'CVE-2017-18084', 'CVE-2017-18100', 'CVE-2019-8449', 'CVE-2019-17571', 'CVE-2019-11585', 'VULNDB-201067', 'CVE-2020-14167', 'VULNDB-229673', 'CVE-2018-13387', 'CVE-2016-6283', 'CVE-2020-11620', 'CVE-2020-10663', 'CVE-2019-11583', 'CVE-2017-18640', 'CVE-2019-14540', 'CVE-2018-20237', 'CVE-2018-13400', 'CVE-2018-5232', 'CVE-2020-9546', 'VULNDB-203133', 'CVE-2017-18086', 'CVE-2017-7657', 'CVE-2020-9548', 'CVE-2019-20416', 'CVE-2019-20897', 'CVE-2018-13391', 'CVE-2018-19361'} Vuln Set Delta Length: 232 Scans are not passing 100%. Vuln Set Delta Length: 232 section_end:1601915225:step_script Job succeeded