UNCLASSIFIED

Merge branch 'andy' into 'development'

Andy

See merge request !22
15 jobs for python3 in 129 minutes and 23 seconds (queued for 12 seconds)
Status Job ID Name Coverage
  .Pre
passed #2990307
ironbank
load scripts

00:00:10

 
  Preflight
passed #2990309
ironbank
folder structure

00:00:06

passed #2990310
ironbank
hardening_manifest

00:00:36

passed #2990308
ironbank
trufflehog

00:00:35

 
  Lint
failed #2990311
ironbank allowed to fail
wl compare lint

00:00:28

 
  Finding Compare
failed #2990312
ironbank allowed to fail
vat compare

00:00:19

 
  Import Artifacts
passed #2990313
ironbank
import artifacts

00:02:32

 
  Scan Artifacts
passed #2990314
ironbank
clamav scan

00:04:20

 
  Build
passed #2990315
ironbank-isolated
build

01:13:51

 
  Scanning
passed #2990316
ironbank
anchore scan

00:05:48

passed #2990317
ironbank
openscap compliance

00:38:56

passed #2990318
ironbank
openscap cve

00:43:37

passed #2990319
ironbank
twistlock scan

00:03:04

 
  Csv Output
passed #2990320
ironbank
csv output

00:02:15

 
  Check Cves
failed #2990321
ironbank allowed to fail
check cves

00:01:08

 
Name Stage Failure
failed
check cves Check Cves
ERROR: NON-WHITELISTED VULNERABILITIES FOUND
ERROR: Number of non-whitelisted vulnerabilities: 3
ERROR: The following vulnerabilities are not whitelisted:
ERROR: scan_source cve_id package package_path
ERROR: anchore_cve GHSA-gwrp-pvrq-jmwv commons-io-2.2 /opt/codesonar-5.4p0/csonar-eclipse/com.grammatech.codesonar.jar:commons-io.jar
ERROR: anchore_cve GHSA-gwrp-pvrq-jmwv commons-io-2.4 /opt/codesonar-5.4p0/csonar-eclipse/eclipse_tests/CodeSonarTest_1.0.0.jar:commons-io-2.4.jar
ERROR: twistlock_cve CVE-2021-3393 postgres-12.3 None
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1
failed
vat compare Finding Compare
$ python3 "${PIPELINE_REPO_DIR}/stages/vat-finding-compare/vat_findings.py"
INFO: Log level set to info
INFO: File does not currently exist.
Uploading artifacts for failed job
ci-artifacts/compare/: found 1 matching files and directories
Uploading artifacts...
Uploading artifacts as "archive" to coordinator... ok
id=2990312 responseStatus=201 Created token=zwryQp_o
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 3
failed
wl compare lint Lint
Uploading artifacts for failed job
ci-artifacts/lint/: found 3 matching files and directories
Uploading artifacts...
Uploading artifacts...
Uploading artifacts as "archive" to coordinator... ok
id=2990311 responseStatus=201 Created token=qvNyVk6R
variables.env: found 1 matching files and directories

Uploading artifacts as "dotenv" to coordinator... ok
id=2990311 responseStatus=201 Created token=qvNyVk6R
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 3