UNCLASSIFIED

Simplify renovate.json, better reflect working renovate.json

Takes from https://repo1.dso.mil/dsop/container-hardening-tools/renovate/renovate renovate.json since it seems to be functioning properly at this time.
13 jobs for renovate4baseimage in 37 minutes and 26 seconds (queued for 11 seconds)
Status Job ID Name Coverage
  .Pre
passed #3793775
load-scripts

00:00:09

 
  Preflight
passed #3793777
folder-structure

00:00:09

passed #3793778
hardening-manifest

00:00:08

passed #3793776
trufflehog

00:00:09

 
  Lint
passed #3793782
wl-compare-lint

00:00:11

 
  Import Artifacts
passed #3793794
import-artifacts

00:02:04

 
  Scan Artifacts
passed #3793798
clamav-scan

00:03:13

 
  Build
passed #3793799
build

00:01:52

 
  Scanning
passed #3793800
anchore-scan

00:03:01

passed #3793801
ironbank-dsop-privileged
openscap-compliance

00:01:17

passed #3793802
twistlock-scan

00:28:52

 
  Csv Output
passed #3793803
csv-output

00:00:40

 
  Check Cves
failed #3793804
allowed to fail
check-cves

00:00:12

 
Name Stage Failure
failed
check-cves Check Cves
ERROR: anchore_cve                   CVE-2020-24977                nokogiri-1.11.3               /usr/local/bundle/specifications/nokogiri-1.11.3-x86_64-linux.gemspec    
ERROR: anchore_cve CVE-2021-3517 nokogiri-1.11.3 /usr/local/bundle/specifications/nokogiri-1.11.3-x86_64-linux.gemspec
ERROR: anchore_cve CVE-2021-3518 nokogiri-1.11.3 /usr/local/bundle/specifications/nokogiri-1.11.3-x86_64-linux.gemspec
ERROR: anchore_cve CVE-2021-3537 nokogiri-1.11.3 /usr/local/bundle/specifications/nokogiri-1.11.3-x86_64-linux.gemspec
ERROR: anchore_cve CVE-2021-3541 nokogiri-1.11.3 /usr/local/bundle/specifications/nokogiri-1.11.3-x86_64-linux.gemspec
ERROR: anchore_cve GHSA-7rrm-v45f-jp64 nokogiri-1.11.3 /usr/local/bundle/specifications/nokogiri-1.11.3-x86_64-linux.gemspec
ERROR: twistlock_cve CVE-2020-36327 bundler-2.1.4 None
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1