Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG section_start:1626225561:resolve_secrets Resolving secrets section_end:1626225561:resolve_secrets section_start:1626225561:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 ... section_end:1626225561:prepare_executor section_start:1626225561:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-3747-concurrent-0hqqlx to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-3747-concurrent-0hqqlx to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper istio-proxy]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" Running on runner-e82g8rg-project-3747-concurrent-0hqqlx via dsop-shared-gitlab-runner-f887cbcbd-srgz6... section_end:1626225567:prepare_script section_start:1626225567:get_sources Getting source from Git repository $ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available; Sidecar available Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/gitlab-triage/gitlab-triage/.git/ Created fresh repository. Checking out 8ea51fc2 as renovate/gitlab-triage-1.x... Skipping object checkout, Git LFS is not installed. Skipping Git submodules setup section_end:1626225567:get_sources section_start:1626225567:download_artifacts Downloading artifacts Downloading artifacts for build (4779098)... Downloading artifacts from coordinator... ok  id=4779098 responseStatus=200 OK token=LaDqsKxM WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) Downloading artifacts for load-scripts (4779091)... Downloading artifacts from coordinator... ok  id=4779091 responseStatus=200 OK token=FH7y6Wfy WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) section_end:1626225568:download_artifacts section_start:1626225568:step_script Executing "step_script" stage of the job script $ python3 "${PIPELINE_REPO_DIR}/stages/scanning/anchore/anchore_scan.py" INFO: Log level set to info INFO: anchore-cli --json --u [MASKED] --url [MASKED] image add --noautosubscribe --dockerfile ./Dockerfile --force registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364186 INFO: registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364186 added to Anchore INFO: [ { "analysis_status": "not_analyzed", "analyzed_at": null, "annotations": {}, "created_at": "2021-07-14T01:19:33Z", "imageDigest": "sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba", "image_content": { "metadata": { "arch": null, "distro": null, "distro_version": null, "dockerfile_mode": "Actual", "image_size": null, "layer_count": null } }, "image_detail": [ { "created_at": "2021-07-14T01:19:33Z", "digest": "sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba", "dockerfile": "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", "fulldigest": "registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage@sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba", "fulltag": "registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364186", "imageDigest": "sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba", "imageId": "9e79a792511ed2bf744982c920e3e2b3b3ddbcd5f468e45ebcc17fbb884dbe17", "last_updated": "2021-07-14T01:19:33Z", "registry": "registry1.dso.mil", "repo": "ironbank-staging/opensource/gitlab-triage/gitlab-triage", "tag": "ibci-364186", "tag_detected_at": "2021-07-14T01:19:33Z", "userId": "ironbank-users" } ], "image_status": "active", "image_type": "docker", "last_updated": "2021-07-14T01:19:33Z", "parentDigest": "sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba", "userId": "ironbank-users" } ] INFO: Waiting for Anchore to scan sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba INFO: anchore-cli --u [MASKED] --url [MASKED] image wait --timeout 3600 sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3598 INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3591 INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3584 INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3577 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3570 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3564 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3558 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3551 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3543 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3535 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3527 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3520 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3514 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3508 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3502 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3490 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3483 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3476 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3469 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3463 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3456 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3450 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3442 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3435 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3427 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3420 INFO: Image Digest: sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba INFO: Parent Digest: sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba INFO: Analysis Status: analyzed INFO: Image Type: docker INFO: Analyzed At: 2021-07-14T01:22:42Z INFO: Image ID: 9e79a792511ed2bf744982c920e3e2b3b3ddbcd5f468e45ebcc17fbb884dbe17 INFO: Dockerfile Mode: Actual INFO: Distro: rhel INFO: Distro Version: 8.4 INFO: Size: 339322880 INFO: Architecture: amd64 INFO: Layer Count: 5 INFO: Full Tag: registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364186 INFO: Tag Detected At: 2021-07-14T01:19:33Z INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba os INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba files INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba npm INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba gem INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba python INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba java INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba binary INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba go INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba malware INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba nuget INFO: Getting vulnerability results INFO: Fetching [MASKED]/enterprise/images/sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba/ancestors INFO: Fetching [MASKED]/enterprise/images/sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba/vuln/all?base_digest=sha256:3c113cf611aa0a29ffc631ba6e87a9b0ce1d64f885adc83a0dbc33cfb6e34a60 INFO: Fetching [MASKED]/query/vulnerabilities?id=VULNDB-255506 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27218 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27218 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-28153 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-28153 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20231 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20231 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20232 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20232 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33560 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33560 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3200 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3200 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-24032 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-24032 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-24370 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-24370 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3580 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3580 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: [MASKED]/query/vulnerabilities?id=CVE-2019-20838 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2019-20838 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14155 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14155 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=GHSA-fp4w-jxhp-m23p INFO: Fetching [MASKED]/query/vulnerabilities?id=GHSA-fp4w-jxhp-m23p INFO: [MASKED]/query/vulnerabilities?id=GHSA-8cr8-4vfw-mr7h INFO: Fetching [MASKED]/query/vulnerabilities?id=GHSA-8cr8-4vfw-mr7h INFO: [MASKED]/query/vulnerabilities?id=CVE-2008-4318 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2008-4318 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-31799 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-31799 INFO: Getting compliance results INFO: Fetching [MASKED]/enterprise/images/sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba/ancestors INFO: Fetching [MASKED]/enterprise/images/sha256:88a8aab0527c1c0d9f2e645e0b05b3461e9ff1a3e609c0a688cdcdd91e79a6ba/check?tag=registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364186&detail=true&base_digest=sha256:3c113cf611aa0a29ffc631ba6e87a9b0ce1d64f885adc83a0dbc33cfb6e34a60 INFO: Getting Anchore version INFO: Fetching [MASKED]/version section_end:1626225828:step_script section_start:1626225828:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/scan-results/anchore/: found 17 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=4779099 responseStatus=201 Created token=-hciTtDu section_end:1626225829:upload_artifacts_on_success section_start:1626225829:cleanup_file_variables Cleaning up file based variables section_end:1626225829:cleanup_file_variables Job succeeded