Running with gitlab-runner 13.2.0 (353dd94e)  on global-shared-gitlab-runner-85466db969-tpstw cnqT5Uqb section_start:1605637381:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/ib-pipeline-image:0.1 ... section_end:1605637381:prepare_executor section_start:1605637381:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-cnqt5uqb-project-181-concurrent-06tlkh to be running, status is Pending Running on runner-cnqt5uqb-project-181-concurrent-06tlkh via global-shared-gitlab-runner-85466db969-tpstw... section_end:1605637384:prepare_script section_start:1605637384:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/atlassian/confluence-data-center/confluence-node/.git/ Created fresh repository. Checking out b871c070 as working... Skipping Git submodules setup section_end:1605637385:get_sources section_start:1605637385:download_artifacts Downloading artifacts Downloading artifacts for anchore scan (754347)... Downloading artifacts from coordinator... ok  id=754347 responseStatus=200 OK token=7CJZBm2o Downloading artifacts for load scripts (754337)... Downloading artifacts from coordinator... ok  id=754337 responseStatus=200 OK token=ve9TyP5X Downloading artifacts for openscap compliance (754344)... Downloading artifacts from coordinator... ok  id=754344 responseStatus=200 OK token=f_SUNxUV Downloading artifacts for openscap cve (754345)... Downloading artifacts from coordinator... ok  id=754345 responseStatus=200 OK token=ksi8ebnD Downloading artifacts for twistlock scan (754346)... Downloading artifacts from coordinator... ok  id=754346 responseStatus=200 OK token=X4q2RezP section_end:1605637385:download_artifacts section_start:1605637385:step_script Executing "step_script" stage of the job script $ "${PIPELINE_REPO_DIR}/stages/check-cves/check-cves.sh" INFO: Log level set to info Fetching Whitelisted CVEs from parent: redhat/ubi/ubi8:8.3 Whitelist Set: {'CVE-2020-24977', '68e630cef4a8533b139875aa5fc54da5', '3e5fad1c039f3ecfd1dcdc94d2f1f9a0', 'CCE-80938-4', '639f6f1177735759703e928c14714a59', 'CCE-82395-5', '3456a263793066e9b5063ada6e47917d', 'CCE-82949-9', 'CCE-82959-8', 'CVE-2020-15358', 'CCE-80935-0', 'CCE-82474-8', 'e7573262736ef52353cde3bae2617782', 'CCE-82985-3', 'CVE-2020-27619', 'CCE-82494-6', 'CCE-82360-9', '34de21e516c0ca50a96e5386f163f8bf', 'CCE-82368-2', 'CVE-2019-12900', 'CVE-2020-26116', 'CCE-82220-5', 'bcd159901fe47efddae5c095b4b0d7fd', '463a9a24225c26f7a5bf3f38908e5cb3', 'c4ad80832b361f81df2a31e5b6b09864', 'CCE-82267-6', 'CVE-2020-13434', 'CVE-2019-2708', 'addbb93c22e9b0988b8b40392a4538cb', 'CVE-2020-16135', 'CCE-82472-2', 'CVE-2020-8231', 'CVE-2019-18276', '320a97c6816565eedf3545833df99dd0', 'CCE-82979-6', '41cb7cdf04850e33a11f80c42bf660b3', 'CVE-2020-24370', 'CCE-82473-0', 'abb121e9621abdd452f65844954cf1c1', 'CVE-2020-8927', 'CVE-2020-13776', '698044205a9c4a6d48b7937e66a6bf4f', 'CVE-2019-13012', 'CVE-2020-27618', 'CCE-82168-6', 'c2e44319ae5b3b040044d8ae116d1c2f', 'CVE-2020-24659', '953dfbea1b1e9d5829fbed2e390bd3af', 'CVE-2019-19234'} Whitelist Set Length: 49 Vuln Set: {'CVE-2020-4025', 'CVE-2020-9548', 'GHSA-q93h-jc49-78gg', 'GHSA-w6g3-v46q-5p28', 'GHSA-6fpp-rgj9-8rwc', 'GHSA-mm7m-xg4h-6m52', 'GHSA-3448-vfvv-xp9g', 'CCE-82949-9', 'GHSA-4w82-r329-3q67', 'CVE-2020-10969', 'CCE-80935-0', 'CVE-2020-11112', 'CVE-2018-14720', 'GHSA-h822-r4r5-v8jg', 'GHSA-cggj-fvv3-cqwv', 'CVE-2019-20330', 'CVE-2020-8022', 'CVE-2019-3399', 'CVE-2019-20418', 'CCE-82985-3', 'CVE-2020-27619', 'GHSA-h592-38cm-4ggp', 'CVE-2019-15013', 'CVE-2020-8840', 'CVE-2018-19362', 'CVE-2019-8449', 'CVE-2016-4317', 'CVE-2017-18033', 'CVE-2013-7285', 'CVE-2018-13400', 'CVE-2020-14181', 'CVE-2019-17267', 'GHSA-qr7j-h6gg-jmgc', 'CVE-2019-12900', 'CVE-2019-11583', 'CVE-2017-16864', 'CCE-82220-5', 'CVE-2017-7957', 'GHSA-85cw-hj65-qqv9', 'VULNDB-77089', 'CVE-2019-14892', 'CVE-2020-11111', 'GHSA-4q98-wr72-h35w', 'GHSA-j53j-gmr9-h8g3', 'CVE-2019-20901', 'CVE-2018-20232', 'CVE-2018-13404', 'CVE-2017-5983', 'CVE-2019-20409', 'CVE-2019-2708', 'VULNDB-230143', 'VULNDB-179332', 'VULNDB-179330', 'GHSA-5ww9-j83m-q7qx', 'CVE-2017-14594', 'VULNDB-179331', 'CVE-2020-8231', 'GHSA-xc67-hjx6-cgg6', 'CVE-2015-8398', 'VULNDB-93555', 'CVE-2019-10172', 'CVE-2019-17571', 'CVE-2018-17197', 'GHSA-m8p2-495h-ccmh', 'GHSA-vgg8-72f2-qm23', 'CVE-2019-14893', 'GHSA-p43x-xfjf-5jhr', 'CVE-2020-9484', 'GHSA-cjjf-94ff-43w7', 'GHSA-rfx6-vp9g-rh7v', 'GHSA-mm9x-g8pc-w292', 'CVE-2018-8017', 'CVE-2019-15005', 'CVE-2020-4028', 'CVE-2020-14172', 'VULNDB-21377', 'CVE-2020-10968', 'VULNDB-93162', 'CVE-2019-17531', 'CVE-2018-13387', 'VULNDB-82272', 'CVE-2018-11762', 'GHSA-rjx9-2936-9ffx', 'CVE-2017-18101', 'CVE-2018-13401', 'CVE-2020-14060', 'GHSA-f3j5-rmmp-3fc5', 'CVE-2017-18098', 'CVE-2018-14721', 'CVE-2017-7656', 'CVE-2020-13934', 'CVE-2018-11761', 'VULNDB-188694', 'CVE-2020-9488', 'GHSA-9qcf-c26r-x5rf', 'CVE-2018-14719', 'VULNDB-201066', 'VULNDB-179335', 'VULNDB-188693', 'CVE-2019-20411', 'VULNDB-141255', 'CVE-2017-18097', 'GHSA-gwp4-hfv6-p7hw', 'GHSA-hrmr-f5m6-m9pq', 'CVE-2018-20826', 'GHSA-w3f4-3q6j-rh82', 'CVE-2019-10173', 'CVE-2020-15358', 'CVE-2020-11996', 'VULNDB-218872', 'VULNDB-214563', 'CVE-2018-20200', 'CVE-2019-11585', 'VULNDB-194971', 'VULNDB-188695', 'CCE-82360-9', 'GHSA-cqqj-4p63-rrmm', 'CVE-2017-16856', 'CVE-2020-14061', 'CVE-2020-26116', 'CVE-2020-11113', 'GHSA-fqwf-pjwf-7vqv', 'CVE-2017-16863', 'VULNDB-137523', 'CVE-2019-11584', 'CVE-2019-3400', 'CVE-2020-13434', 'CVE-2020-10663', 'CVE-2017-9505', 'CVE-2018-13403', 'VULNDB-179337', 'CVE-2020-16135', 'CVE-2020-4021', 'GHSA-84q7-p226-4x5w', 'CVE-2020-26205', 'CVE-2019-8443', 'CVE-2019-20445', 'GHSA-mw36-7c6c-q4q2', 'GHSA-2qrg-x229-3v8q', 'CVE-2020-4029', 'CVE-2019-20419', 'CVE-2019-20416', 'CVE-2018-14718', 'CVE-2018-13402', 'VULNDB-104207', 'CVE-2020-24370', 'CVE-2017-18039', 'CVE-2017-16862', 'VULNDB-229216', 'CVE-2016-6283', 'CVE-2020-8927', 'CVE-2020-14173', 'CVE-2020-13776', 'CVE-2018-5231', 'CVE-2020-4024', 'VULNDB-179336', 'CVE-2020-14062', 'GHSA-p2v9-g2qv-p635', 'CVE-2018-5230', 'CVE-2018-5968', 'CVE-2019-20413', 'CVE-2019-11586', 'GHSA-ghgj-3xqr-6jfm', 'CVE-2020-27618', 'CVE-2019-20106', 'VULNDB-163972', 'VULNDB-225495', 'CVE-2017-18640', 'VULNDB-208624', 'CVE-2017-15095', 'CVE-2020-24659', 'CVE-2016-6668', 'CVE-2020-14178', 'CCE-82395-5', 'VULNDB-177199', 'CCE-80938-4', 'VULNDB-179333', 'CVE-2020-24616', 'VULNDB-203133', 'CCE-82959-8', 'CVE-2019-11587', 'VULNDB-179334', 'CVE-2020-14169', 'VULNDB-92947', 'CVE-2019-10088', 'CVE-2020-14174', 'CVE-2020-14164', 'VULNDB-210294', 'GHSA-h8q5-g2cj-qr5h', 'VULNDB-187014', 'VULNDB-233710', 'CVE-2018-13391', 'CVE-2017-7658', 'VULNDB-233709', 'VULNDB-134239', 'GHSA-cf6r-3wgc-h863', 'VULNDB-156026', 'CVE-2020-14168', 'VULNDB-204803', 'CVE-2020-27216', 'VULNDB-212416', 'VULNDB-187016', 'CVE-2019-10010', 'CVE-2019-3403', 'CVE-2019-18276', 'VULNDB-240258', 'CVE-2020-9547', 'CVE-2018-19361', 'CVE-2020-13943', 'CVE-2019-3402', 'VULNDB-187013', 'VULNDB-229673', 'CVE-2016-4318', 'CVE-2020-14175', 'GHSA-7qx4-pp76-vrqh', 'GHSA-7vx9-xjhr-rw6h', 'VULNDB-225489', 'CVE-2016-6285', 'VULNDB-238682', 'VULNDB-96647', 'CVE-2020-11619', 'CVE-2016-3674', 'CVE-2020-5421', 'CVE-2017-18100', 'CVE-2019-13012', 'CVE-2020-1951', 'CVE-2020-13935', 'VULNDB-209604', 'CVE-2019-10094', 'CVE-2019-20415', 'CCE-82168-6', 'CVE-2019-16335', 'GHSA-683w-6h9j-57wq', 'CVE-2020-14167', 'CVE-2019-20408', 'VULNDB-201067', 'VULNDB-190170', 'CVE-2020-10673', 'GHSA-g99m-3m46-4gm9', 'CVE-2020-24977', 'CVE-2019-20414', 'CVE-2019-20899', 'VULNDB-150492', 'VULNDB-96648', 'CVE-2019-14540', 'GHSA-mx7p-6679-8g3q', 'GHSA-mph4-vhrx-mv67', 'CVE-2020-15094', 'VULNDB-210292', 'CVE-2020-24750', 'CCE-82474-8', 'CVE-2019-12400', 'CVE-2018-13389', 'CVE-2019-20412', 'VULNDB-175810', 'CVE-2020-1950', 'CVE-2018-1000873', 'CVE-2019-20898', 'CCE-82494-6', 'CVE-2019-3401', 'CVE-2017-18086', 'VULNDB-232731', 'CCE-82368-2', 'GHSA-6jq2-789q-fff2', 'GHSA-gjmw-vf9h-g25v', 'CVE-2020-4027', 'CVE-2018-11796', 'GHSA-hf23-9pf7-388p', 'CCE-82267-6', 'CVE-2020-4022', 'CVE-2020-14165', 'CVE-2019-16869', 'CVE-2018-7489', 'CVE-2016-10750', 'CVE-2019-16943', 'CVE-2020-14195', 'CCE-82472-2', 'GHSA-gww7-p5w4-wrfv', 'CVE-2019-20417', 'CVE-2018-13395', 'CVE-2017-18104', 'CVE-2017-9735', 'VULNDB-217930', 'CVE-2018-20237', 'CCE-82979-6', 'CVE-2018-19360', 'CVE-2019-20406', 'CVE-2018-20824', 'CVE-2019-11588', 'CVE-2016-4319', 'CCE-82473-0', 'CVE-2020-11612', 'CVE-2017-18085', 'CVE-2019-20897', 'CVE-2020-10672', 'VULNDB-220038', 'CVE-2018-5232', 'CVE-2019-20410', 'CVE-2019-20444', 'GHSA-mfwh-gqx8-c787', 'VULNDB-223108', 'CVE-2019-8442', 'CVE-2017-7657', 'CVE-2017-16865', 'CVE-2015-8399', 'VULNDB-187015', 'CVE-2019-20402', 'VULNDB-103881', 'GHSA-cmfg-87vq-g5g4', 'CVE-2017-18084', 'CVE-2020-1953', 'CVE-2020-11620', 'CVE-2020-9546', 'CVE-2019-16942', 'GHSA-q44v-xc3g-v7jq', 'GHSA-fmmc-742q-jg75', 'CVE-2019-19234'} Vuln Set Length: 317 NON-WHITELISTED VULNERABILITIES FOUND Vuln Set Delta: {'GHSA-q93h-jc49-78gg', 'GHSA-mm7m-xg4h-6m52', 'GHSA-3448-vfvv-xp9g', 'CVE-2020-11112', 'CVE-2020-8022', 'GHSA-h822-r4r5-v8jg', 'CVE-2019-20418', 'CVE-2019-8449', 'VULNDB-156026', 'CVE-2016-4317', 'CVE-2013-7285', 'CVE-2020-14181', 'CVE-2019-17267', 'GHSA-qr7j-h6gg-jmgc', 'CVE-2019-11583', 'CVE-2017-7957', 'GHSA-85cw-hj65-qqv9', 'GHSA-4q98-wr72-h35w', 'CVE-2020-11111', 'CVE-2019-20901', 'GHSA-j53j-gmr9-h8g3', 'CVE-2018-20232', 'CVE-2017-5983', 'VULNDB-179330', 'CVE-2019-20409', 'VULNDB-230143', 'CVE-2017-14594', 'VULNDB-93555', 'CVE-2019-17571', 'CVE-2018-17197', 'GHSA-m8p2-495h-ccmh', 'VULNDB-96647', 'CVE-2019-15005', 'CVE-2020-9484', 'GHSA-cjjf-94ff-43w7', 'CVE-2020-4028', 'VULNDB-21377', 'VULNDB-93162', 'CVE-2020-10968', 'CVE-2019-17531', 'CVE-2018-11762', 'CVE-2017-18101', 'CVE-2020-14060', 'CVE-2017-7656', 'CVE-2018-11761', 'VULNDB-188694', 'GHSA-9qcf-c26r-x5rf', 'CVE-2018-14719', 'VULNDB-201066', 'VULNDB-188693', 'CVE-2019-20411', 'VULNDB-141255', 'VULNDB-218872', 'VULNDB-214563', 'CVE-2019-11585', 'VULNDB-194971', 'CVE-2017-16856', 'CVE-2019-11584', 'VULNDB-179337', 'CVE-2020-4021', 'GHSA-84q7-p226-4x5w', 'CVE-2020-26205', 'GHSA-mw36-7c6c-q4q2', 'GHSA-2qrg-x229-3v8q', 'CVE-2018-13402', 'CVE-2019-20416', 'CVE-2016-6283', 'CVE-2020-14173', 'CVE-2018-5231', 'CVE-2020-4024', 'GHSA-p2v9-g2qv-p635', 'CVE-2018-5230', 'CVE-2018-5968', 'CVE-2019-11586', 'CVE-2019-20106', 'VULNDB-163972', 'CVE-2017-18640', 'CVE-2017-15095', 'CVE-2016-6668', 'CVE-2020-14178', 'VULNDB-177199', 'VULNDB-203133', 'VULNDB-179334', 'CVE-2020-14169', 'CVE-2019-10088', 'CVE-2020-14174', 'GHSA-h8q5-g2cj-qr5h', 'VULNDB-233710', 'CVE-2017-7658', 'VULNDB-233709', 'VULNDB-134239', 'CVE-2020-14168', 'VULNDB-204803', 'VULNDB-212416', 'CVE-2019-10010', 'CVE-2019-3403', 'VULNDB-240258', 'CVE-2020-13943', 'GHSA-7qx4-pp76-vrqh', 'GHSA-7vx9-xjhr-rw6h', 'VULNDB-238682', 'CVE-2016-6285', 'CVE-2020-11619', 'CVE-2020-5421', 'CVE-2020-13935', 'VULNDB-209604', 'VULNDB-201067', 'CVE-2020-14167', 'VULNDB-190170', 'CVE-2020-10673', 'CVE-2019-20414', 'CVE-2019-20899', 'VULNDB-96648', 'GHSA-mph4-vhrx-mv67', 'CVE-2020-15094', 'VULNDB-210292', 'CVE-2019-12400', 'CVE-2018-13389', 'CVE-2019-20412', 'CVE-2019-20898', 'VULNDB-232731', 'CVE-2019-3401', 'GHSA-gjmw-vf9h-g25v', 'CVE-2020-14165', 'CVE-2018-11796', 'GHSA-hf23-9pf7-388p', 'CVE-2019-16943', 'GHSA-gww7-p5w4-wrfv', 'VULNDB-217930', 'CVE-2017-18104', 'CVE-2017-9735', 'CVE-2018-20237', 'CVE-2019-20406', 'CVE-2018-20824', 'CVE-2020-11612', 'CVE-2020-10672', 'GHSA-mfwh-gqx8-c787', 'CVE-2019-8442', 'CVE-2015-8399', 'VULNDB-103881', 'GHSA-cmfg-87vq-g5g4', 'CVE-2020-1953', 'CVE-2020-9546', 'CVE-2020-10663', 'VULNDB-210294', 'CVE-2020-4025', 'CVE-2020-9548', 'GHSA-w6g3-v46q-5p28', 'GHSA-6fpp-rgj9-8rwc', 'CVE-2019-15013', 'VULNDB-187016', 'GHSA-4w82-r329-3q67', 'CVE-2020-10969', 'CVE-2018-14720', 'CVE-2019-3399', 'VULNDB-179333', 'VULNDB-223108', 'GHSA-cggj-fvv3-cqwv', 'CVE-2019-20330', 'CVE-2019-11588', 'GHSA-h592-38cm-4ggp', 'CVE-2017-18033', 'CVE-2020-8840', 'CVE-2018-19362', 'VULNDB-92947', 'CVE-2018-13400', 'CVE-2017-16864', 'VULNDB-77089', 'CVE-2019-14892', 'CVE-2018-13404', 'VULNDB-179332', 'GHSA-5ww9-j83m-q7qx', 'VULNDB-179331', 'GHSA-xc67-hjx6-cgg6', 'CVE-2015-8398', 'CVE-2019-10172', 'GHSA-mm9x-g8pc-w292', 'GHSA-vgg8-72f2-qm23', 'CVE-2019-14893', 'GHSA-p43x-xfjf-5jhr', 'GHSA-rfx6-vp9g-rh7v', 'CVE-2018-8017', 'CVE-2020-14172', 'CVE-2018-13387', 'VULNDB-82272', 'GHSA-rjx9-2936-9ffx', 'CVE-2018-13401', 'GHSA-f3j5-rmmp-3fc5', 'CVE-2017-18098', 'CVE-2018-14721', 'CVE-2020-13934', 'CVE-2020-9488', 'VULNDB-179335', 'CVE-2017-18097', 'GHSA-gwp4-hfv6-p7hw', 'GHSA-hrmr-f5m6-m9pq', 'CVE-2018-20826', 'GHSA-w3f4-3q6j-rh82', 'CVE-2019-10173', 'CVE-2020-11996', 'CVE-2018-20200', 'VULNDB-188695', 'GHSA-cqqj-4p63-rrmm', 'CVE-2020-14061', 'CVE-2020-11113', 'GHSA-fqwf-pjwf-7vqv', 'CVE-2017-16863', 'VULNDB-137523', 'CVE-2019-3400', 'CVE-2018-13403', 'CVE-2019-8443', 'CVE-2019-20445', 'CVE-2019-20419', 'CVE-2020-4029', 'CVE-2018-14718', 'VULNDB-104207', 'CVE-2017-18039', 'CVE-2017-16862', 'VULNDB-229216', 'VULNDB-179336', 'CVE-2020-14062', 'CVE-2019-20413', 'GHSA-ghgj-3xqr-6jfm', 'VULNDB-225495', 'VULNDB-208624', 'CVE-2020-24616', 'CVE-2019-11587', 'CVE-2020-14164', 'VULNDB-187014', 'CVE-2018-13391', 'GHSA-cf6r-3wgc-h863', 'CVE-2020-27216', 'CVE-2020-9547', 'CVE-2018-19361', 'CVE-2019-3402', 'VULNDB-187013', 'VULNDB-229673', 'CVE-2016-4318', 'CVE-2020-14175', 'VULNDB-225489', 'CVE-2016-3674', 'CVE-2017-18100', 'CVE-2020-1951', 'CVE-2019-10094', 'CVE-2019-20415', 'CVE-2019-16335', 'GHSA-683w-6h9j-57wq', 'CVE-2019-20408', 'GHSA-g99m-3m46-4gm9', 'VULNDB-150492', 'CVE-2019-14540', 'GHSA-mx7p-6679-8g3q', 'CVE-2020-24750', 'VULNDB-175810', 'CVE-2020-1950', 'CVE-2018-1000873', 'CVE-2017-18086', 'GHSA-6jq2-789q-fff2', 'CVE-2020-4027', 'CVE-2020-4022', 'CVE-2016-10750', 'CVE-2019-16869', 'CVE-2018-7489', 'CVE-2020-14195', 'CVE-2019-20417', 'CVE-2018-13395', 'CVE-2018-19360', 'CVE-2016-4319', 'CVE-2017-18085', 'CVE-2019-20897', 'CVE-2020-11620', 'VULNDB-220038', 'CVE-2018-5232', 'CVE-2019-20410', 'CVE-2019-20444', 'CVE-2017-16865', 'CVE-2017-7657', 'VULNDB-187015', 'CVE-2019-20402', 'CVE-2017-18084', 'CVE-2017-9505', 'CVE-2019-16942', 'GHSA-q44v-xc3g-v7jq', 'GHSA-fmmc-742q-jg75'} Vuln Set Delta Length: 284 Scans are not passing 100%. Vuln Set Delta Length: 284 section_end:1605637391:step_script Job succeeded