GitLab

ERROR: The following vulnerabilities are not whitelisted:
ERROR: scan_source                   cve_id                        package                       package_path                  
ERROR: anchore_cve                   CVE-2021-23840                openssl-1.1.1g-15.el8_3       None                          
ERROR: anchore_cve                   CVE-2021-23841                openssl-1.1.1g-15.el8_3       None                          
ERROR: twistlock_cve                 CVE-2021-23840                openssl-1.1.1g-15.el8_3       None                          
ERROR: twistlock_cve                 CVE-2021-23841                openssl-1.1.1g-15.el8_3       None                          
ERROR: twistlock_cve                 CVE-2020-25658                rsa-4.7.2                     None                          
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1

('CVE-2020-25613', 'twistlock_cve', 'An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigorously. An attacker may potentially exploit this issue to bypass a reverse proxy (which also has a poor header check), which may lead to an HTTP Request Smuggling attack.', 'webrick-1.6.0', None)
('b2505d515c1cbb5547e1039d0707596b', 'anchore_comp', "Dockerfile directive 'ADD' check 'exists' matched against '' for line 'gitlab-ruby.tar.gz /'\n Gate: dockerfile\n Trigger: instruction\n Policy ID: DoDDockerfileChecks", None, None)
('cbff271f45d32e78dcc1979dbca9c14d', 'anchore_comp', 'User root found as effective user, which is explicity not allowed\n Gate: dockerfile\n Trigger: effective_user\n Policy ID: DoDEffectiveUserChecks', None, None)
Uploading artifacts for failed job
Uploading artifacts...
ci-artifacts/compare/: found 2 matching files and directories 
Uploading artifacts as "archive" to coordinator... ok  id=2650203 responseStatus=201 Created token=y3UMAmCv
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 4