Running with gitlab-runner 13.5.0 (ece86343)  on global-shared-gitlab-runner-6ccdff99f8-nk6hk JXqWjmzm section_start:1610480732:resolve_secrets Resolving secrets section_end:1610480732:resolve_secrets section_start:1610480732:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/ib-pipeline-image:0.1 ... section_end:1610480732:prepare_executor section_start:1610480732:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-jxqwjmzm-project-207-concurrent-0gvdl2 to be running, status is Pending Running on runner-jxqwjmzm-project-207-concurrent-0gvdl2 via global-shared-gitlab-runner-6ccdff99f8-nk6hk... section_end:1610480735:prepare_script section_start:1610480735:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/jfrog/artifactory/artifactory/.git/ Created fresh repository. Checking out e12b2da4 as 7.12.5... Skipping Git submodules setup section_end:1610480735:get_sources section_start:1610480735:download_artifacts Downloading artifacts Downloading artifacts for anchore scan (1417043)... Downloading artifacts from coordinator... ok  id=1417043 responseStatus=200 OK token=7xJ9buPN Downloading artifacts for hardening_manifest (1417035)... Downloading artifacts from coordinator... ok  id=1417035 responseStatus=200 OK token=QfK5yN6- Downloading artifacts for load scripts (1417032)... Downloading artifacts from coordinator... ok  id=1417032 responseStatus=200 OK token=AozegsLo Downloading artifacts for openscap compliance (1417040)... Downloading artifacts from coordinator... ok  id=1417040 responseStatus=200 OK token=kLNbb4cL Downloading artifacts for openscap cve (1417041)... Downloading artifacts from coordinator... ok  id=1417041 responseStatus=200 OK token=ExtqSTJ8 Downloading artifacts for twistlock scan (1417042)... Downloading artifacts from coordinator... ok  id=1417042 responseStatus=200 OK token=d9mPHBPU section_end:1610480736:download_artifacts section_start:1610480736:step_script Executing "step_script" stage of the job script $ python3 "${PIPELINE_REPO_DIR}/stages/check-cves/pipeline_wl_compare.py" INFO: Log level set to info INFO: Grabbing CVEs for: jfrog/artifactory/artifactory INFO: Grabbing CVEs for: redhat/ubi/ubi8 INFO: Found 83 total whitelisted CVEs INFO: Whitelist Set:{'CCE-82368-2', 'CVE-2020-15358', 'CVE-2020-8231', 'CVE-2020-26116', 'bcd159901fe47efddae5c095b4b0d7fd', 'CCE-82949-9', 'CVE-2020-8927', '953dfbea1b1e9d5829fbed2e390bd3af', '3e5fad1c039f3ecfd1dcdc94d2f1f9a0', 'CVE-2020-29361', 'CVE-2020-29362', 'CVE-2020-8286', 'CVE-2020-29363', 'CVE-2020-24370', 'CVE-2020-27619', '41cb7cdf04850e33a11f80c42bf660b3', '639f6f1177735759703e928c14714a59', '34de21e516c0ca50a96e5386f163f8bf', 'addbb93c22e9b0988b8b40392a4538cb', 'CCE-82267-6', 'CVE-2020-24977', 'CCE-82473-0', 'CCE-82474-8', 'e7573262736ef52353cde3bae2617782', 'CVE-2020-16135', 'CVE-2019-25013', 'CCE-82360-9', 'CCE-82985-3', 'CCE-82168-6', 'CCE-82395-5', 'CVE-2020-13776', 'CCE-82220-5', 'CVE-2020-27618', 'abb121e9621abdd452f65844954cf1c1', 'CVE-2020-13434', '463a9a24225c26f7a5bf3f38908e5cb3', '68e630cef4a8533b139875aa5fc54da5', 'CCE-82472-2', '698044205a9c4a6d48b7937e66a6bf4f', '320a97c6816565eedf3545833df99dd0', 'CCE-82979-6', 'CVE-2020-8284', 'CVE-2020-35512', 'CVE-2020-28196', 'CCE-80935-0', 'CVE-2020-8285', '3456a263793066e9b5063ada6e47917d', 'CCE-80938-4', 'c4ad80832b361f81df2a31e5b6b09864', 'c2e44319ae5b3b040044d8ae116d1c2f', 'CCE-82494-6', 'CCE-82959-8'} INFO: Whitelist Set Length: 52 INFO: Vuln Set: {'CVE-2020-13943', 'CCE-82368-2', 'CVE-2020-15358', 'CVE-2020-8231', 'CVE-2020-26116', 'CVE-2017-18589', 'CVE-2019-12400', 'CVE-2019-10172', 'CCE-82949-9', 'CVE-2017-18640', 'CVE-2020-28168', 'CVE-2020-14796', 'VULNDB-238682', 'CVE-2017-15806', 'CVE-2020-8927', 'CVE-2020-29361', 'VULNDB-204607', 'CVE-2020-29362', 'CVE-2020-26217', 'CVE-2020-8286', 'CVE-2020-17527', 'CVE-2020-29363', 'CVE-2020-14798', 'CVE-2017-7536', 'CVE-2020-24370', 'CVE-2020-27619', 'CCE-82267-6', 'GHSA-4q98-wr72-h35w', 'CCE-82473-0', 'CVE-2020-24977', 'GHSA-jfvx-7wrx-43fh', 'CVE-2020-17521', 'CVE-2017-7957', 'VULNDB-243918', 'CVE-2020-26258', 'CCE-82474-8', 'CVE-2020-14779', 'CVE-2020-13956', 'CVE-2020-10663', 'GHSA-mw36-7c6c-q4q2', 'VULNDB-217930', 'GHSA-xxgp-pcfc-3vgc', 'VULNDB-141255', 'CVE-2019-25013', 'CVE-2020-16135', 'CCE-82360-9', 'CCE-82985-3', 'CCE-82395-5', 'CCE-82168-6', 'CVE-2020-13776', 'CVE-2020-8908', 'CCE-82220-5', 'CVE-2020-14782', 'CVE-2017-9506', 'CVE-2020-27618', 'VULNDB-240258', 'CVE-2020-13434', 'VULNDB-166319', 'CVE-2020-8174', 'CVE-2013-7285', 'GHSA-4cch-wxpw-8p28', 'CCE-82472-2', 'CVE-2020-14781', 'GHSA-4w2v-q235-vp99', 'CVE-2016-3674', 'CVE-2020-14797', 'CCE-82979-6', 'CVE-2020-8284', 'CVE-2020-8022', 'CVE-2019-20104', 'CVE-2020-35512', 'CVE-2020-28196', 'CCE-80935-0', 'CVE-2020-8285', 'CVE-2020-10750', 'CVE-2020-26259', 'CVE-2020-14803', 'CVE-2020-8252', 'VULNDB-130613', 'CVE-2020-14792', 'CCE-80938-4', 'CCE-82494-6', 'CCE-82959-8'} INFO: Vuln Set Length: 83 WARNING: NON-WHITELISTED VULNERABILITIES FOUND WARNING: Vuln Set Delta: {'CVE-2020-13943', 'CVE-2017-18589', 'CVE-2019-12400', 'CVE-2019-10172', 'CVE-2017-18640', 'CVE-2020-28168', 'CVE-2020-14796', 'VULNDB-238682', 'CVE-2017-15806', 'VULNDB-204607', 'CVE-2020-17527', 'CVE-2020-14798', 'CVE-2017-7536', 'GHSA-4q98-wr72-h35w', 'CVE-2020-17521', 'VULNDB-141255', 'GHSA-jfvx-7wrx-43fh', 'CVE-2017-7957', 'VULNDB-243918', 'CVE-2020-26258', 'CVE-2020-10663', 'CVE-2020-14779', 'CVE-2020-13956', 'VULNDB-217930', 'GHSA-mw36-7c6c-q4q2', 'GHSA-xxgp-pcfc-3vgc', 'CVE-2020-8908', 'CVE-2017-9506', 'CVE-2020-14782', 'VULNDB-240258', 'VULNDB-166319', 'CVE-2020-8174', 'CVE-2013-7285', 'GHSA-4cch-wxpw-8p28', 'GHSA-4w2v-q235-vp99', 'CVE-2020-14781', 'CVE-2016-3674', 'CVE-2020-8022', 'CVE-2019-20104', 'CVE-2020-10750', 'CVE-2020-26259', 'CVE-2020-14803', 'CVE-2020-8252', 'VULNDB-130613', 'CVE-2020-14792', 'CVE-2020-14797', 'CVE-2020-26217'} WARNING: Vuln Set Delta Length: 47 ERROR: Scans are not passing 100%. Vuln Set Delta Length: 47 section_end:1610480743:step_script section_start:1610480743:cleanup_file_variables Cleaning up file based variables section_end:1610480743:cleanup_file_variables ERROR: Job failed: command terminated with exit code 1