Running with gitlab-runner 13.8.0 (775dd39d)  on global-shared-gitlab-runner-89dbd4db8-gbfgw 79hzYLUT section_start:1614768726:resolve_secrets Resolving secrets section_end:1614768726:resolve_secrets section_start:1614768727:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/ib-pipeline-image:0.1 ... section_end:1614768728:prepare_executor section_start:1614768728:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-79hzylut-project-870-concurrent-0t58mg to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper]" ContainersNotReady: "containers with unready status: [build helper]" Running on runner-79hzylut-project-870-concurrent-0t58mg via global-shared-gitlab-runner-89dbd4db8-gbfgw... section_end:1614768735:prepare_script section_start:1614768735:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/fluent/fluent-bit/.git/ Created fresh repository. Checking out da0584d8 as master... Skipping Git submodules setup section_end:1614768737:get_sources section_start:1614768737:download_artifacts Downloading artifacts Downloading artifacts for hardening_manifest (2278426)... Downloading artifacts from coordinator... ok  id=2278426 responseStatus=200 OK token=uTsYhqAz Downloading artifacts for load scripts (2278423)... Downloading artifacts from coordinator... ok  id=2278423 responseStatus=200 OK token=GDkrzMAU section_end:1614768738:download_artifacts section_start:1614768738:step_script Executing "step_script" stage of the job script $ if [[ "${CI_COMMIT_BRANCH}" == "master" || "${CI_COMMIT_BRANCH}" == "development" ]] && [[ "${CI_COMMIT_REF_PROTECTED}" != true ]]; then # collapsed multi-line command $ pip3 install jsonschema Collecting jsonschema Downloading jsonschema-3.2.0-py2.py3-none-any.whl (56 kB) Requirement already satisfied: setuptools in /opt/app-root/lib/python3.6/site-packages (from jsonschema) (39.2.0) Collecting pyrsistent>=0.14.0 Downloading pyrsistent-0.17.3.tar.gz (106 kB) Requirement already satisfied: six>=1.11.0 in /opt/app-root/lib/python3.6/site-packages (from jsonschema) (1.15.0) Collecting importlib-metadata; python_version < "3.8" Downloading importlib_metadata-3.7.0-py3-none-any.whl (11 kB) Collecting attrs>=17.4.0 Downloading attrs-20.3.0-py2.py3-none-any.whl (49 kB) Collecting zipp>=0.5 Downloading zipp-3.4.0-py3-none-any.whl (5.2 kB) Collecting typing-extensions>=3.6.4; python_version < "3.8" Downloading typing_extensions-3.7.4.3-py3-none-any.whl (22 kB) Building wheels for collected packages: pyrsistent Building wheel for pyrsistent (setup.py): started WARNING: You are using pip version 20.2.4; however, version 21.0.1 is available. You should consider upgrading via the '/opt/app-root/bin/python3.6 -m pip install --upgrade pip' command. Building wheel for pyrsistent (setup.py): finished with status 'done' INFO: Log level set to info Created wheel for pyrsistent: filename=pyrsistent-0.17.3-cp36-cp36m-linux_x86_64.whl size=55876 sha256=5d38b7921c235fc34f3995210d008e6db6afc00991842ad7f452f76fac86cd3f INFO: Grabbing CVEs for: opensource/fluent/fluent-bit Stored in directory: /tmp/pip-ephem-wheel-cache-rhi40w9t/wheels/34/13/19/294da8e11bce7e563afee51251b9fa878185e14f4b5caf00cb Successfully built pyrsistent INFO: Retrieving findings for opensource/fluent/fluent-bit Installing collected packages: pyrsistent, zipp, typing-extensions, importlib-metadata, attrs, jsonschema INFO: Running query to vat api Successfully installed attrs-20.3.0 importlib-metadata-3.7.0 jsonschema-3.2.0 pyrsistent-0.17.3 typing-extensions-3.7.4.3 zipp-3.4.0 INFO: Fetched data from vat successfully $ mkdir -p "${ARTIFACT_DIR}" INFO: Validating the VAT response against schema INFO: Log level set to info $ set +e INFO: Loaded definitions from ci-artifacts/[MASKED]/stages/check-cves/../../schema/vat_findings.swagger.yaml $ python3 "${PIPELINE_REPO_DIR}/stages/check-cves/pipeline_wl_compare.py" --lint INFO: Defined base schema off of the Container model INFO: CONTAINER APPROVAL STATUS INFO: Pending INFO: CONTAINER APPROVAL TEXT INFO: None WARNING: IMAGE_APPROVAL_STATUS=notapproved ERROR: This container is not noted as an approved image in VAT. Unapproved images cannot run on master branch. Failing stage. section_end:1614768744:step_script section_start:1614768744:upload_artifacts_on_failure Uploading artifacts for failed job ci-artifacts/lint/: found 2 matching files and directories Uploading artifacts... Uploading artifacts... Uploading artifacts as "archive" to coordinator... ok id=2278427 responseStatus=201 Created token=FLr4_4P6 WARNING: variables.env: no matching files  ERROR: No files to upload  section_end:1614768747:upload_artifacts_on_failure section_start:1614768747:cleanup_file_variables Cleaning up file based variables section_end:1614768751:cleanup_file_variables ERROR: Job failed: command terminated with exit code 1