UNCLASSIFIED

Skip to content

GitLab

You need to sign in or sign up before continuing.

Merge branch 'repo1-mirror' into 'development' 

Repo1 mirror

See merge request !3
20 jobs for development in 15 minutes and 42 seconds (queued for 16 minutes and 22 seconds)
412b0821
1 related merge request: !5 Development
Status Job ID Name Coverage
  .Pre
passed #2847057
ironbank
load scripts

00:00:07

 
  Preflight
passed #2847059
ironbank
folder structure

00:00:05

passed #2847060
ironbank
hardening_manifest

00:00:11

passed #2847058
ironbank
trufflehog

00:00:11

 
  Lint
passed #2847061
ironbank
wl compare lint

00:00:11

 
  Finding Compare
failed #2847062
ironbank allowed to fail
vat compare

00:00:09

 
  Import Artifacts
passed #2847063
ironbank
import artifacts

00:00:08

 
  Scan Artifacts
passed #2847064
ironbank
clamav scan

00:00:57

 
  Build
passed #2847065
ironbank-isolated
build

00:03:31

 
  Scanning
passed #2847066
ironbank
anchore scan

00:02:46

passed #2847067
ironbank
openscap compliance

00:01:14

passed #2847068
ironbank
openscap cve

00:05:52

passed #2847069
ironbank
twistlock scan

00:01:08

 
  Csv Output
passed #2847070
ironbank
csv output

00:01:01

 
  Check Cves
failed #2847071
ironbank allowed to fail
check cves

00:00:20

 
  Documentation
passed #2847072
ironbank
sign image

00:00:49

passed #2847073
ironbank
sign manifest

00:00:29

passed #2847074
ironbank
write json documentation

00:00:27

 
  S3 Publish
passed #2847075
ironbank
upload to s3

00:02:10

 
  Vat
passed #2847076
ironbank
vat

00:00:07

 
Name Stage Failure
failed
check cves Check Cves 
ERROR: anchore_cve                   CVE-2021-23840                openssl-1.1.1g-15.el8_3       None                          
ERROR: anchore_cve                   CVE-2021-23841                openssl-1.1.1g-15.el8_3       None                          
ERROR: anchore_cve                   VULNDB-164067                 plexus-cipher-1.7             /opt/gradle/gradle-6.7.1/lib/plugins/plexus-cipher-1.7.jar    
ERROR: anchore_cve                   CVE-2017-18640                snakeyaml-1.17                /opt/gradle/gradle-6.7.1/lib/plugins/snakeyaml-1.17.jar    
ERROR: twistlock_cve                 CVE-2020-29582                kotlin-stdlib_kotlin-stdlib-1.3.72    None                          
ERROR: twistlock_cve                 CVE-2021-23840                openssl-1.1.1g-15.el8_3       None                          
ERROR: twistlock_cve                 CVE-2021-23841                openssl-1.1.1g-15.el8_3       None                          
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1
failed
vat compare Finding Compare 
INFO: ('VULNDB-164067', 'anchore_cve', 'plexus-cipher-1.7\nBug Tracker: https://bugzilla.redhat.com/show_bug.cgi?id=880279\nVendor Specific Solution URL: https://github.com/sonatype/plexus-cipher/commit/6ab0e38df80beed9ab3227ffab938b21dcdf5505\nBug Tracker: https://issues.jboss.org/browse/AAA-15\nVendor Specific Solution URL: https://github.com/codehaus-plexus/plexus-cipher/commit/6ab0e38df80beed9ab3227ffab938b21dcdf5505\n', 'plexus-cipher-1.7', '/opt/gradle/gradle-6.7.1/lib/plugins/plexus-cipher-1.7.jar')
INFO: ('GHSA-5mg8-w23w-74h3', 'anchore_cve', 'guava-27.1-android\nhttps://github.com/advisories/GHSA-5mg8-w23w-74h3', 'guava-27.1-android', '/opt/gradle/gradle-6.7.1/lib/guava-27.1-android.jar')
INFO: ('CVE-2020-13956', 'anchore_cve', 'httpclient-4.5.10\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-13956', 'httpclient-4.5.10', '/opt/gradle/gradle-6.7.1/lib/plugins/httpclient-4.5.10.jar')
Uploading artifacts for failed job
Uploading artifacts...
ci-artifacts/compare/: found 2 matching files and directories 
Uploading artifacts as "archive" to coordinator... ok  id=2847062 responseStatus=201 Created token=NQxu_FFB
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 4

UNCLASSIFIED