Running with gitlab-runner 13.8.0 (775dd39d)
  on dsop-shared-gitlab-runner-5f4b468dff-8vfv5 BsbAJu5w
section_start:1622225346:resolve_secrets
Resolving secrets
section_end:1622225346:resolve_secrets
section_start:1622225346:prepare_executor
Preparing the "kubernetes" executor
Using Kubernetes namespace: gitlab-runner-ironbank-dsop
WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom
Using Kubernetes executor with image registry1.dso.mil/ironbank/ironbank-pipelines/pipeline-runner:0.3 ...
section_end:1622225346:prepare_executor
section_start:1622225346:prepare_script
Preparing environment
Waiting for pod gitlab-runner-ironbank-dsop/runner-bsbaju5w-project-5450-concurrent-0xf484 to be running, status is Pending
Running on runner-bsbaju5w-project-5450-concurrent-0xf484 via dsop-shared-gitlab-runner-5f4b468dff-8vfv5...
section_end:1622225349:prepare_script
section_start:1622225349:get_sources
Getting source from Git repository
Fetching changes with git depth set to 50...
Initialized empty Git repository in /builds/dsop/mitre/saf/heimdall2/.git/
Created fresh repository.
Checking out 89a1487e as development...

Skipping Git submodules setup
section_end:1622225349:get_sources
section_start:1622225349:download_artifacts
Downloading artifacts
Downloading artifacts for anchore-scan (3657911)...
Downloading artifacts from coordinator... ok        id=3657911 responseStatus=200 OK token=wBA46_qr
Downloading artifacts for hardening-manifest (3657906)...
Downloading artifacts from coordinator... ok        id=3657906 responseStatus=200 OK token=UExxzzYH
Downloading artifacts for load-scripts (3657903)...
Downloading artifacts from coordinator... ok        id=3657903 responseStatus=200 OK token=92SYqBQa
Downloading artifacts for openscap-compliance (3657912)...
Downloading artifacts from coordinator... ok        id=3657912 responseStatus=200 OK token=aYTPuQpx
Downloading artifacts for twistlock-scan (3657913)...
Downloading artifacts from coordinator... ok        id=3657913 responseStatus=200 OK token=UzZsnSRC
Downloading artifacts for wl-compare-lint (3657907)...
Downloading artifacts from coordinator... ok        id=3657907 responseStatus=200 OK token=B4tACh1V
section_end:1622225350:download_artifacts
section_start:1622225350:step_script
Executing "step_script" stage of the job script
$ pip3 install jsonschema # collapsed multi-line command
Requirement already satisfied: jsonschema in /usr/local/lib/python3.9/site-packages (3.2.0)
Requirement already satisfied: six>=1.11.0 in /usr/local/lib/python3.9/site-packages (from jsonschema) (1.15.0)
Requirement already satisfied: attrs>=17.4.0 in /usr/local/lib/python3.9/site-packages (from jsonschema) (21.2.0)
Requirement already satisfied: setuptools in /usr/local/lib/python3.9/site-packages (from jsonschema) (56.1.0)
Requirement already satisfied: pyrsistent>=0.14.0 in /usr/local/lib/python3.9/site-packages (from jsonschema) (0.17.3)
WARNING: Running pip as root will break packages and permissions. You should install packages reliably by using venv: https://pip.pypa.io/warnings/venv
WARNING: You are using pip version 21.1.1; however, version 21.1.2 is available.
You should consider upgrading via the '/usr/local/bin/python3.9 -m pip install --upgrade pip' command.
INFO: Log level set to info
INFO: Number of whitelisted vulnerabilities: 95
INFO: Whitelisted vulnerabilities: {Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-build-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3537', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-27218', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-config-0.9.4-2.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='320a97c6816565eedf3545833df99dd0', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82474-8', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='3e5fad1c039f3ecfd1dcdc94d2f1f9a0', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-27219', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82214-8', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-24370', package='lua-libs-5.3.4-11.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23343', package='path-parse-1.0.6', package_path='/usr/local/lib/node_modules/npm/node_modules/path-parse/package.json'), Finding(scan_source='oscap_comp', cve_id='CCE-82395-5', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82472-2', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27219', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='python3-rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='639f6f1177735759703e928c14714a59', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-80935-0', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82220-5', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3520', package='lz4-libs-1.8.3-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27218', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-23343', package='path-parse-1.0.6', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3516', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='3456a263793066e9b5063ada6e47917d', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='34de21e516c0ca50a96e5386f163f8bf', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='python3-libs-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='463a9a24225c26f7a5bf3f38908e5cb3', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3541', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-15945', package='lua-libs-5.3.4-11.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='python3-rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='698044205a9c4a6d48b7937e66a6bf4f', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3518', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82168-6', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82267-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3541', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='e7573262736ef52353cde3bae2617782', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82368-2', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-24032', package='libzstd-1.4.4-1.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='rpm-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82979-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='python3-rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82880-6', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82959-8', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-hawkey-0.55.0-7.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82473-0', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='platform-python-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-build-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3516', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82360-9', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3518', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='abb121e9621abdd452f65844954cf1c1', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82949-9', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-83401-0', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='bcd159901fe47efddae5c095b4b0d7fd', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82985-3', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3517', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23840', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='anchore_comp', cve_id='c4ad80832b361f81df2a31e5b6b09864', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82494-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3537', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='rpm-build-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3518', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='c2e44319ae5b3b040044d8ae116d1c2f', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3517', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='addbb93c22e9b0988b8b40392a4538cb', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23841', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3517', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-80938-4', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3537', package='libxml2-2.9.7-9.el8', package_path=None)}
INFO: Vulnerabilities found in scanning stage: 138
INFO: {Finding(scan_source='anchore_comp', cve_id='b7cc7c5ed6530f12c0d3da39995f9b2a', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-build-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3537', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-27218', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-config-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='5e48b2db690a65ab4c3ef5cd46e0b250', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='b6f6f2adb680d9f14ae76508574dad93', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-28499', package='merge-1.2.1', package_path=None), Finding(scan_source='anchore_comp', cve_id='320a97c6816565eedf3545833df99dd0', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23368', package='postcss-7.0.35', package_path='/heimdall/node_modules/postcss/package.json'), Finding(scan_source='anchore_cve', cve_id='VULNDB-243265', package='merge-1.2.1', package_path='/heimdall/node_modules/merge/package.json'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-32640', package='ws-6.2.1', package_path='/heimdall/node_modules/ws/package.json'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82474-8', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='3e5fad1c039f3ecfd1dcdc94d2f1f9a0', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='twistlock_cve', cve_id='PRISMA-2021-0063', package='validator-10.11.0', package_path=None), Finding(scan_source='anchore_comp', cve_id='a1668ef71b8ff2b98bee36856f62cbe4', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-27219', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82214-8', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-24370', package='lua-libs-5.3.4-11.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23343', package='path-parse-1.0.6', package_path='/usr/local/lib/node_modules/npm/node_modules/path-parse/package.json'), Finding(scan_source='oscap_comp', cve_id='CCE-82395-5', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='16600ae09730d228f01909ad4d166799', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-32640', package='ws-5.2.2', package_path='/heimdall/node_modules/subscriptions-transport-ws/node_modules/ws/package.json'), Finding(scan_source='anchore_cve', cve_id='GHSA-p9pc-299p-vxgp', package='yargs-parser-10.1.0', package_path='/heimdall/node_modules/ts-jest/node_modules/yargs-parser/package.json'), Finding(scan_source='oscap_comp', cve_id='CCE-82472-2', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27219', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='python3-rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-12265', package='decompress-tar-4.1.1', package_path='/heimdall/node_modules/decompress-tar/package.json'), Finding(scan_source='oscap_comp', cve_id='CCE-80935-0', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='639f6f1177735759703e928c14714a59', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-23368', package='postcss-7.0.35', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82220-5', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-5fw9-fq32-wv5p', package='node-notifier-5.4.5', package_path='/heimdall/node_modules/@jest/reporters/node_modules/node-notifier/package.json'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3520', package='lz4-libs-1.8.3-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27218', package='glib2-2.56.4-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='8d5b3fa5eea389f0bd39106113e0bd8f', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-23343', package='path-parse-1.0.6', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3516', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='3456a263793066e9b5063ada6e47917d', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20066', package='jsdom-15.2.1', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='python3-libs-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='34de21e516c0ca50a96e5386f163f8bf', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='463a9a24225c26f7a5bf3f38908e5cb3', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3541', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-15945', package='lua-libs-5.3.4-11.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-7789', package='node-notifier-5.4.5', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='python3-rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='698044205a9c4a6d48b7937e66a6bf4f', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3518', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82168-6', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82267-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3541', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='e7573262736ef52353cde3bae2617782', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82368-2', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-33502', package='normalize-url-3.3.0', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-24032', package='libzstd-1.4.4-1.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='rpm-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82979-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23382', package='postcss-7.0.35', package_path='/heimdall/node_modules/postcss/package.json'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='9ea985e6d212c6f2231e2316ba026580', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2017-18589', package='cookie-0.4.0', package_path='/heimdall/node_modules/cookie/package.json'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='python3-rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82880-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-32640', package='ws-5.2.2', package_path='/heimdall/node_modules/jest-environment-jsdom/node_modules/ws/package.json'), Finding(scan_source='anchore_comp', cve_id='0f647518b4690f0c366c24be2a259d71', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82959-8', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='47335714350def38d265542db5b931e9', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='33815f4e76934891e33f1af85751a55f', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23386', package='dns-packet-1.3.4', package_path='/heimdall/node_modules/dns-packet/package.json'), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-28469', package='glob-parent-3.1.0', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-hawkey-0.55.0-7.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82473-0', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-33502', package='normalize-url-1.9.1', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='platform-python-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-build-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3516', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82360-9', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3518', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-hwj9-h5mp-3pm3', package='postcss-7.0.35', package_path='/heimdall/node_modules/postcss/package.json'), Finding(scan_source='anchore_comp', cve_id='abb121e9621abdd452f65844954cf1c1', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-13.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82949-9', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='b7300585e52a7a185a80a7b67fdc4b74', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20066', package='jsdom-11.12.0', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-83401-0', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='249dbe602f7491b81b06d8f371107fa9', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='bcd159901fe47efddae5c095b4b0d7fd', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82985-3', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='34b93c77c0c1863157aad55376438233', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-7wpw-2hjm-89gp', package='merge-1.2.1', package_path='/heimdall/node_modules/merge/package.json'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3517', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23840', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='anchore_comp', cve_id='c4ad80832b361f81df2a31e5b6b09864', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-23382', package='postcss-7.0.35', package_path=None), Finding(scan_source='anchore_comp', cve_id='df0eb2e95d1253077c35bbbecfad363f', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82494-6', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='dba22030ddb7b4bf8d6b5be49437ca76', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3537', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20271', package='rpm-build-libs-4.14.3-13.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3518', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='c2e44319ae5b3b040044d8ae116d1c2f', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='c4abef755dce3075158ddc0a6e761ce6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3517', package='python3-libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='2484164edcbf186fabc6465328507bfc', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-7663', package='websocket-extensions-0.1.4', package_path='/heimdall/node_modules/websocket-extensions/package.json'), Finding(scan_source='anchore_comp', cve_id='addbb93c22e9b0988b8b40392a4538cb', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='9d2615cb283e9510514db634f10b1ef8', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-33502', package='normalize-url-2.0.1', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23841', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3517', package='libxml2-2.9.7-9.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-80938-4', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3537', package='libxml2-2.9.7-9.el8', package_path=None)}
ERROR: NON-WHITELISTED VULNERABILITIES FOUND
ERROR: Number of non-whitelisted vulnerabilities: 43
ERROR: The following vulnerabilities are not whitelisted:
ERROR: scan_source                   cve_id                        package                       package_path                  
ERROR: anchore_comp                  0f647518b4690f0c366c24be2a259d71    None                          None                          
ERROR: anchore_comp                  16600ae09730d228f01909ad4d166799    None                          None                          
ERROR: anchore_comp                  2484164edcbf186fabc6465328507bfc    None                          None                          
ERROR: anchore_comp                  249dbe602f7491b81b06d8f371107fa9    None                          None                          
ERROR: anchore_comp                  33815f4e76934891e33f1af85751a55f    None                          None                          
ERROR: anchore_comp                  34b93c77c0c1863157aad55376438233    None                          None                          
ERROR: anchore_comp                  47335714350def38d265542db5b931e9    None                          None                          
ERROR: anchore_comp                  5e48b2db690a65ab4c3ef5cd46e0b250    None                          None                          
ERROR: anchore_comp                  8d5b3fa5eea389f0bd39106113e0bd8f    None                          None                          
ERROR: anchore_comp                  9d2615cb283e9510514db634f10b1ef8    None                          None                          
ERROR: anchore_comp                  9ea985e6d212c6f2231e2316ba026580    None                          None                          
ERROR: anchore_comp                  a1668ef71b8ff2b98bee36856f62cbe4    None                          None                          
ERROR: anchore_comp                  b6f6f2adb680d9f14ae76508574dad93    None                          None                          
ERROR: anchore_comp                  b7300585e52a7a185a80a7b67fdc4b74    None                          None                          
ERROR: anchore_comp                  b7cc7c5ed6530f12c0d3da39995f9b2a    None                          None                          
ERROR: anchore_comp                  c4abef755dce3075158ddc0a6e761ce6    None                          None                          
ERROR: anchore_comp                  dba22030ddb7b4bf8d6b5be49437ca76    None                          None                          
ERROR: anchore_comp                  df0eb2e95d1253077c35bbbecfad363f    None                          None                          
ERROR: anchore_cve                   CVE-2017-18589                cookie-0.4.0                  /heimdall/node_modules/cookie/package.json    
ERROR: anchore_cve                   CVE-2020-12265                decompress-tar-4.1.1          /heimdall/node_modules/decompress-tar/package.json    
ERROR: anchore_cve                   CVE-2021-23386                dns-packet-1.3.4              /heimdall/node_modules/dns-packet/package.json    
ERROR: anchore_cve                   GHSA-7wpw-2hjm-89gp           merge-1.2.1                   /heimdall/node_modules/merge/package.json    
ERROR: anchore_cve                   VULNDB-243265                 merge-1.2.1                   /heimdall/node_modules/merge/package.json    
ERROR: anchore_cve                   GHSA-5fw9-fq32-wv5p           node-notifier-5.4.5           /heimdall/node_modules/@jest/reporters/node_modules/node-notifier/package.json    
ERROR: anchore_cve                   CVE-2021-23368                postcss-7.0.35                /heimdall/node_modules/postcss/package.json    
ERROR: anchore_cve                   CVE-2021-23382                postcss-7.0.35                /heimdall/node_modules/postcss/package.json    
ERROR: anchore_cve                   GHSA-hwj9-h5mp-3pm3           postcss-7.0.35                /heimdall/node_modules/postcss/package.json    
ERROR: anchore_cve                   CVE-2020-7663                 websocket-extensions-0.1.4    /heimdall/node_modules/websocket-extensions/package.json    
ERROR: anchore_cve                   CVE-2021-32640                ws-5.2.2                      /heimdall/node_modules/jest-environment-jsdom/node_modules/ws/package.json    
ERROR: anchore_cve                   CVE-2021-32640                ws-5.2.2                      /heimdall/node_modules/subscriptions-transport-ws/node_modules/ws/package.json    
ERROR: anchore_cve                   CVE-2021-32640                ws-6.2.1                      /heimdall/node_modules/ws/package.json    
ERROR: anchore_cve                   GHSA-p9pc-299p-vxgp           yargs-parser-10.1.0           /heimdall/node_modules/ts-jest/node_modules/yargs-parser/package.json    
ERROR: twistlock_cve                 CVE-2020-28469                glob-parent-3.1.0             None                          
ERROR: twistlock_cve                 CVE-2021-20066                jsdom-11.12.0                 None                          
ERROR: twistlock_cve                 CVE-2021-20066                jsdom-15.2.1                  None                          
ERROR: twistlock_cve                 CVE-2020-28499                merge-1.2.1                   None                          
ERROR: twistlock_cve                 CVE-2020-7789                 node-notifier-5.4.5           None                          
ERROR: twistlock_cve                 CVE-2021-33502                normalize-url-1.9.1           None                          
ERROR: twistlock_cve                 CVE-2021-33502                normalize-url-2.0.1           None                          
ERROR: twistlock_cve                 CVE-2021-33502                normalize-url-3.3.0           None                          
ERROR: twistlock_cve                 CVE-2021-23368                postcss-7.0.35                None                          
ERROR: twistlock_cve                 CVE-2021-23382                postcss-7.0.35                None                          
ERROR: twistlock_cve                 PRISMA-2021-0063              validator-10.11.0             None                          
section_end:1622225353:step_script
section_start:1622225353:cleanup_file_variables
Cleaning up file based variables
section_end:1622225353:cleanup_file_variables
ERROR: Job failed: command terminated with exit code 1