Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG section_start:1627072318:resolve_secrets Resolving secrets section_end:1627072318:resolve_secrets section_start:1627072318:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/ironbank-pipelines/pipeline-runner:0.3 ... section_end:1627072318:prepare_executor section_start:1627072318:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-5778-concurrent-0c8fzb to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-5778-concurrent-0c8fzb to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper istio-proxy]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" Running on runner-e82g8rg-project-5778-concurrent-0c8fzb via dsop-shared-gitlab-runner-f887cbcbd-srgz6... section_end:1627072325:prepare_script section_start:1627072325:get_sources Getting source from Git repository $ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available; Sidecar available Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/hygieia/hygieia-feature-jira-collector/.git/ Created fresh repository. Checking out 998013f5 as development... Skipping object checkout, Git LFS is not installed. Skipping Git submodules setup section_end:1627072325:get_sources section_start:1627072325:download_artifacts Downloading artifacts Downloading artifacts for hardening-manifest (5055481)... Downloading artifacts from coordinator... ok  id=5055481 responseStatus=200 OK token=1XRPN5rW WARNING: ci-artifacts/preflight/: lchown ci-artifacts/preflight/: operation not permitted (suppressing repeats) Downloading artifacts for load-scripts (5055478)... Downloading artifacts from coordinator... ok  id=5055478 responseStatus=200 OK token=sfwR1YzD WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) section_end:1627072325:download_artifacts section_start:1627072325:step_script Executing "step_script" stage of the job script $ if [[ "${CI_COMMIT_BRANCH}" == "master" || "${CI_COMMIT_BRANCH}" == "development" ]] && [[ "${CI_COMMIT_REF_PROTECTED}" != true ]]; then # collapsed multi-line command $ mkdir -p "${ARTIFACT_DIR}" $ set +e $ python3 "${PIPELINE_REPO_DIR}/stages/check-cves/pipeline_wl_compare.py" --lint INFO: Log level set to info INFO: Retrieving findings for opensource/hygieia/hygieia-feature-jira-collector:3.2.0 INFO: Running query to vat api INFO: Fetched data from vat successfully INFO: Validating the VAT response against schema INFO: Log level set to info INFO: Loaded definitions from /builds/dsop/opensource/hygieia/hygieia-feature-jira-collector/ci-artifacts/[MASKED]/stages/check-cves/../../schema/vat_findings.swagger.yaml INFO: Defined base schema off of the Container model INFO: CONTAINER APPROVAL STATUS INFO: Conditionally Approved INFO: CONTAINER APPROVAL TEXT INFO: Approved with conditions: must fix (not just mitigate) CVE CVE-2017-18640 and CVE-2021-22112 within 60 days. INFO: skopeo inspect --authfile prod_pull_auth.json docker://registry1.dso.mil/ironbank/redhat/openjdk/openjdk8:1.8.0 INFO: Getting redhat/openjdk/openjdk8 hardening_manifest.yaml from master INFO: Retrieving findings for redhat/openjdk/openjdk8:1.8.0 INFO: skopeo inspect --authfile prod_pull_auth.json docker://registry1.dso.mil/ironbank/redhat/ubi/ubi8:8.4 INFO: Getting redhat/ubi/ubi8 hardening_manifest.yaml from master INFO: Retrieving findings for redhat/ubi/ubi8:8.4 INFO: Artifact Directory: ci-artifacts/lint section_end:1627072328:step_script section_start:1627072328:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/lint/: found 4 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=5055482 responseStatus=201 Created token=o_LxzEsX Uploading artifacts... variables.env: found 1 matching files and directories Uploading artifacts as "dotenv" to coordinator... ok id=5055482 responseStatus=201 Created token=o_LxzEsX section_end:1627072330:upload_artifacts_on_success section_start:1627072330:cleanup_file_variables Cleaning up file based variables section_end:1627072330:cleanup_file_variables Job succeeded