UNCLASSIFIED

Merge branch 'development' into 'master'

Development

See merge request !13
19 jobs for master in 68 minutes and 48 seconds (queued for 22 minutes and 53 seconds)
Status Job ID Name Coverage
  .Pre
passed #2604813
ironbank
load scripts

00:01:02

 
  Preflight
passed #2604814
ironbank
folder structure

00:01:18

passed #2604815
ironbank
hardening_manifest

00:01:29

 
  Lint
passed #2604816
ironbank
wl compare lint

00:01:48

 
  Finding Compare
failed #2604817
ironbank allowed to fail
vat compare

00:03:34

 
  Import Artifacts
passed #2604818
ironbank
import artifacts

00:01:31

 
  Scan Artifacts
passed #2604819
ironbank
clamav scan

00:02:17

 
  Build
passed #2604820
ironbank-isolated
build

00:03:07

 
  Scanning
passed #2604824
ironbank
anchore scan

00:04:15

passed #2604821
ironbank
openscap compliance

00:09:42

passed #2604822
ironbank
openscap cve

00:46:21

passed #2604823
ironbank
twistlock scan

00:01:25

 
  Csv Output
passed #2604825
ironbank
csv output

00:01:26

 
  Check Cves
passed #2604826
ironbank
check cves

00:03:21

 
  Documentation
passed #2604827
ironbank
sign image

00:00:59

passed #2604828
ironbank
sign manifest

00:00:44

passed #2604829
ironbank
write json documentation

00:00:53

 
  Publish
failed #2604831
ironbank
harbor

00:00:25

passed #2604830
ironbank
upload to s3

00:01:44

 
Name Stage Failure
failed
harbor Publish
Executing "step_script" stage of the job script
$ python3 "${PIPELINE_REPO_DIR}/stages/publish/upload_to_harbor.py"
INFO: Log level set to info
INFO: Logging into vault
INFO: Log in successful
INFO: [MASKED]/v1/kv/il2/notary/pipeline/delegation/0
ERROR: Could not find key for registry1.dso.mil/ironbank/elastic/apm-server/apm-server - Please speak to an Administrator
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1
failed
vat compare Finding Compare
('463a9a24225c26f7a5bf3f38908e5cb3', 'anchore_comp', 'SUID or SGID found set on file /usr/bin/newgrp. Mode: 0o104755\n Gate: files\n Trigger: suid_or_guid_set\n Policy ID: DoDFileChecks', None, None)
('34de21e516c0ca50a96e5386f163f8bf', 'anchore_comp', 'SUID or SGID found set on file /usr/sbin/unix_chkpwd. Mode: 0o104755\n Gate: files\n Trigger: suid_or_guid_set\n Policy ID: DoDFileChecks', None, None)
('CVE-2021-22876', 'twistlock_cve', 'curl 7.1.1 to and including 7.75.0 is vulnerable to an \\"Exposure of Private Personal Information to an Unauthorized Actor\\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.', 'curl-7.61.1-14.el8_3.1', None)
Uploading artifacts for failed job
ci-artifacts/compare/: found 2 matching files and directories
Uploading artifacts...
Uploading artifacts as "archive" to coordinator... ok
id=2604817 responseStatus=201 Created token=cWbqPpQt
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 4