UNCLASSIFIED

You need to sign in or sign up before continuing.

Merge branch 'hardening_manifest' into 'development'

Migrate to hardening_manifest.yaml

See merge request !10
17 jobs for development in 45 minutes and 6 seconds (queued for 43 minutes and 43 seconds)
Status Job ID Name Coverage
  .Pre
passed #3089039
ironbank
load scripts

00:00:27

 
  Preflight
passed #3089041
ironbank
folder structure

00:00:49

passed #3089042
ironbank
hardening_manifest

00:00:53

passed #3089040
ironbank
trufflehog

00:00:52

 
  Lint
failed #3089043
ironbank allowed to fail
wl compare lint

00:00:44

 
  Import Artifacts
passed #3089044
ironbank
import artifacts

00:00:34

 
  Scan Artifacts
passed #3089045
ironbank
clamav scan

00:05:36

 
  Build
passed #3089046
ironbank-isolated
build

00:08:26

 
  Scanning
passed #3089047
ironbank
anchore scan

00:03:55

passed #3089048
ironbank
openscap compliance

00:16:59

passed #3089049
ironbank
openscap cve

00:21:02

passed #3089050
ironbank
twistlock scan

00:02:08

 
  Csv Output
passed #3089051
ironbank
csv output

00:01:28

 
  Check Cves
failed #3089052
ironbank allowed to fail
check cves

00:00:54

 
  Documentation
passed #3089053
ironbank
documentation

00:01:36

 
  S3 Publish
passed #3089054
ironbank
upload to s3

00:02:40

 
  Vat
passed #3089055
ironbank
vat

00:00:37

 
Name Stage Failure
failed
check cves Check Cves
ERROR: anchore_cve                   GHSA-gwrp-pvrq-jmwv           commons-io-2.6                /opt/gradle/gradle-6.7.1/lib/commons-io-2.6.jar    
ERROR: anchore_cve GHSA-5mg8-w23w-74h3 guava-27.1-android /opt/gradle/gradle-6.7.1/lib/guava-27.1-android.jar
ERROR: anchore_cve CVE-2020-9546 jackson-databind-2.10.2 /opt/gradle/gradle-6.7.1/lib/plugins/jackson-databind-2.10.2.jar
ERROR: anchore_cve CVE-2020-9547 jackson-databind-2.10.2 /opt/gradle/gradle-6.7.1/lib/plugins/jackson-databind-2.10.2.jar
ERROR: anchore_cve CVE-2020-9548 jackson-databind-2.10.2 /opt/gradle/gradle-6.7.1/lib/plugins/jackson-databind-2.10.2.jar
ERROR: anchore_cve GHSA-288c-cq4h-88gq jackson-databind-2.10.2 /opt/gradle/gradle-6.7.1/lib/plugins/jackson-databind-2.10.2.jar
ERROR: twistlock_cve CVE-2020-29582 kotlin-stdlib_kotlin-stdlib-1.3.72 None
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1
failed
wl compare lint Lint
Uploading artifacts for failed job
Uploading artifacts...
ci-artifacts/lint/: found 3 matching files and directories

Uploading artifacts as "archive" to coordinator... ok
id=3089043 responseStatus=201 Created token=Bke58CMJ
Uploading artifacts...
variables.env: found 1 matching files and directories

Uploading artifacts as "dotenv" to coordinator... ok
id=3089043 responseStatus=201 Created token=Bke58CMJ
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 3