Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG section_start:1626261457:resolve_secrets Resolving secrets section_end:1626261457:resolve_secrets section_start:1626261457:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 ... section_end:1626261457:prepare_executor section_start:1626261457:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-3747-concurrent-0sxf27 to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-3747-concurrent-0sxf27 to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper istio-proxy]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" Running on runner-e82g8rg-project-3747-concurrent-0sxf27 via dsop-shared-gitlab-runner-f887cbcbd-srgz6... section_end:1626261463:prepare_script section_start:1626261463:get_sources Getting source from Git repository $ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available; Sidecar available Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/gitlab-triage/gitlab-triage/.git/ Created fresh repository. Checking out 10e9b793 as master... Skipping object checkout, Git LFS is not installed. Skipping Git submodules setup section_end:1626261464:get_sources section_start:1626261464:download_artifacts Downloading artifacts Downloading artifacts for build (4788632)... Downloading artifacts from coordinator... ok  id=4788632 responseStatus=200 OK token=avs-gRMH WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) Downloading artifacts for load-scripts (4788625)... Downloading artifacts from coordinator... ok  id=4788625 responseStatus=200 OK token=CcCyFaMb WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) section_end:1626261464:download_artifacts section_start:1626261464:step_script Executing "step_script" stage of the job script $ python3 "${PIPELINE_REPO_DIR}/stages/scanning/anchore/anchore_scan.py" INFO: Log level set to info INFO: anchore-cli --json --u [MASKED] --url [MASKED] image add --noautosubscribe --dockerfile ./Dockerfile --force registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364844 INFO: registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364844 added to Anchore INFO: [ { "analysis_status": "not_analyzed", "analyzed_at": null, "annotations": {}, "created_at": "2021-07-14T11:17:47Z", "imageDigest": "sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c", "image_content": { "metadata": { "arch": null, "distro": null, "distro_version": null, "dockerfile_mode": "Actual", "image_size": null, "layer_count": null } }, "image_detail": [ { "created_at": "2021-07-14T11:17:47Z", "digest": "sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c", "dockerfile": "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", "fulldigest": "registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage@sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c", "fulltag": "registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364844", "imageDigest": "sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c", "imageId": "67c8e2b7af6c064efedcd2e1d8d915b326f825beb556e2d627e52b96a0725675", "last_updated": "2021-07-14T11:17:47Z", "registry": "registry1.dso.mil", "repo": "ironbank-staging/opensource/gitlab-triage/gitlab-triage", "tag": "ibci-364844", "tag_detected_at": "2021-07-14T11:17:47Z", "userId": "ironbank-users" } ], "image_status": "active", "image_type": "docker", "last_updated": "2021-07-14T11:17:47Z", "parentDigest": "sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c", "userId": "ironbank-users" } ] INFO: Waiting for Anchore to scan sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c INFO: anchore-cli --u [MASKED] --url [MASKED] image wait --timeout 3600 sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3597 INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3589 INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3581 INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3573 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3566 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3559 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3552 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3545 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3539 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3532 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3524 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3516 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3509 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3502 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3496 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3489 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3482 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3471 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3456 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3448 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3441 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3433 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3424 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3418 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3410 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3403 INFO: Image Digest: sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c INFO: Parent Digest: sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c INFO: Analysis Status: analyzed INFO: Image Type: docker INFO: Analyzed At: 2021-07-14T11:21:08Z INFO: Image ID: 67c8e2b7af6c064efedcd2e1d8d915b326f825beb556e2d627e52b96a0725675 INFO: Dockerfile Mode: Actual INFO: Distro: rhel INFO: Distro Version: 8.4 INFO: Size: 339312640 INFO: Architecture: amd64 INFO: Layer Count: 5 INFO: Full Tag: registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364844 INFO: Tag Detected At: 2021-07-14T11:17:47Z INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c os INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c files INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c npm INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c gem INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c python INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c java INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c binary INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c go INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c malware INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c nuget INFO: Getting vulnerability results INFO: Fetching [MASKED]/enterprise/images/sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c/ancestors INFO: Fetching [MASKED]/enterprise/images/sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c/vuln/all?base_digest=sha256:d2c4ad2b941d38c5abb6757978bdc0d8aecee3becd22f8639c03ebfb3b101038 INFO: Fetching [MASKED]/query/vulnerabilities?id=VULNDB-255506 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27218 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27218 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-28153 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-28153 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20231 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20231 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20232 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20232 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33560 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33560 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3200 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3200 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-24032 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-24032 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-24370 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-24370 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3580 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3580 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: [MASKED]/query/vulnerabilities?id=CVE-2019-20838 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2019-20838 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14155 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14155 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939 INFO: [MASKED]/query/vulnerabilities?id=GHSA-fp4w-jxhp-m23p INFO: Fetching [MASKED]/query/vulnerabilities?id=GHSA-fp4w-jxhp-m23p INFO: [MASKED]/query/vulnerabilities?id=GHSA-8cr8-4vfw-mr7h INFO: Fetching [MASKED]/query/vulnerabilities?id=GHSA-8cr8-4vfw-mr7h INFO: [MASKED]/query/vulnerabilities?id=CVE-2008-4318 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2008-4318 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-31799 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-31799 INFO: Getting compliance results INFO: Fetching [MASKED]/enterprise/images/sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c/ancestors INFO: Fetching [MASKED]/enterprise/images/sha256:d0c32be16ff7256e1b9e352e917cd971e0f5212cfce6846a5ade86ae283c7e8c/check?tag=registry1.dso.mil/ironbank-staging/opensource/gitlab-triage/gitlab-triage:ibci-364844&detail=true&base_digest=sha256:d2c4ad2b941d38c5abb6757978bdc0d8aecee3becd22f8639c03ebfb3b101038 INFO: Getting Anchore version INFO: Fetching [MASKED]/version section_end:1626261760:step_script section_start:1626261760:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/scan-results/anchore/: found 17 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=4788633 responseStatus=201 Created token=hk2ZNDHf section_end:1626261761:upload_artifacts_on_success section_start:1626261761:cleanup_file_variables Cleaning up file based variables section_end:1626261761:cleanup_file_variables Job succeeded