Running with gitlab-runner 13.8.0 (775dd39d)
  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG
section_start:1625520533:resolve_secrets
Resolving secrets
section_end:1625520533:resolve_secrets
section_start:1625520533:prepare_executor
Preparing the "kubernetes" executor
Using Kubernetes namespace: gitlab-runner-ironbank-dsop
WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom
Using Kubernetes executor with image registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 ...
section_end:1625520533:prepare_executor
section_start:1625520533:prepare_script
Preparing environment
Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-1054-concurrent-0zdwbs to be running, status is Pending
Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-1054-concurrent-0zdwbs to be running, status is Pending
	ContainersNotReady: "containers with unready status: [build helper istio-proxy]"
	ContainersNotReady: "containers with unready status: [build helper istio-proxy]"
Running on runner-e82g8rg-project-1054-concurrent-0zdwbs via dsop-shared-gitlab-runner-f887cbcbd-srgz6...
section_end:1625520539:prepare_script
section_start:1625520539:get_sources
Getting source from Git repository
$ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available;
Sidecar available
Fetching changes with git depth set to 50...
Initialized empty Git repository in /builds/dsop/opensource/istio-1.5/node-agent-k8s-1.5/.git/
Created fresh repository.
Checking out 50145007 as development...
Skipping object checkout, Git LFS is not installed.

Skipping Git submodules setup
section_end:1625520539:get_sources
section_start:1625520539:download_artifacts
Downloading artifacts
Downloading artifacts for build (4603938)...
Downloading artifacts from coordinator... ok        id=4603938 responseStatus=200 OK token=C6cy7_RA
WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) 
Downloading artifacts for load-scripts (4603931)...
Downloading artifacts from coordinator... ok        id=4603931 responseStatus=200 OK token=bfBZBi-5
WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) 
section_end:1625520540:download_artifacts
section_start:1625520540:step_script
Executing "step_script" stage of the job script
$ python3 "${PIPELINE_REPO_DIR}/stages/scanning/anchore/anchore_scan.py"
INFO: Log level set to info
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image add --noautosubscribe --dockerfile ./Dockerfile --force registry1.dso.mil/ironbank-staging/opensource/istio-1.5/node-agent-k8s-1.5:ibci-351577
INFO: registry1.dso.mil/ironbank-staging/opensource/istio-1.5/node-agent-k8s-1.5:ibci-351577 added to Anchore
INFO: [
    {
        "analysis_status": "not_analyzed",
        "analyzed_at": null,
        "annotations": {},
        "created_at": "2021-07-05T21:29:01Z",
        "imageDigest": "sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70",
        "image_content": {
            "metadata": {
                "arch": null,
                "distro": null,
                "distro_version": null,
                "dockerfile_mode": "Actual",
                "image_size": null,
                "layer_count": null
            }
        },
        "image_detail": [
            {
                "created_at": "2021-07-05T21:29:01Z",
                "digest": "sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70",
                "dockerfile": "QVJHIEJBU0VfUkVHSVNUUlk9cmVnaXN0cnkxLmRzby5taWwKQVJHIEJBU0VfSU1BR0U9aXJvbmJhbmsvcmVkaGF0L3ViaS91Ymk4CkFSRyBCQVNFX1RBRz04LjQKCkZST00gaXN0aW8vbm9kZS1hZ2VudC1rOHM6MS41LjEwIEFTIGJhc2UKCkZST00gJHtCQVNFX1JFR0lTVFJZfS8ke0JBU0VfSU1BR0V9OiR7QkFTRV9UQUd9CgpDT1BZIC0tZnJvbT1iYXNlIG5vZGVfYWdlbnRfazhzIC8KClJVTiBkbmYgdXBkYXRlIC15ICYmIFwKICAgIGRuZiBjbGVhbiBhbGwgJiYgXAogICAgcm0gLXJmIC92YXIvY2FjaGUvZG5mLwogICAgClVTRVIgMTAwMQpFTlRSWVBPSU5UIFsiL25vZGVfYWdlbnRfazhzIl0K",
                "fulldigest": "registry1.dso.mil/ironbank-staging/opensource/istio-1.5/node-agent-k8s-1.5@sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70",
                "fulltag": "registry1.dso.mil/ironbank-staging/opensource/istio-1.5/node-agent-k8s-1.5:ibci-351577",
                "imageDigest": "sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70",
                "imageId": "01a50e5d113132d5054142b5310969a68ed5097ad09853ee94eb712f696d070c",
                "last_updated": "2021-07-05T21:29:01Z",
                "registry": "registry1.dso.mil",
                "repo": "ironbank-staging/opensource/istio-1.5/node-agent-k8s-1.5",
                "tag": "ibci-351577",
                "tag_detected_at": "2021-07-05T21:29:01Z",
                "userId": "ironbank-users"
            }
        ],
        "image_status": "active",
        "image_type": "docker",
        "last_updated": "2021-07-05T21:29:01Z",
        "parentDigest": "sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70",
        "userId": "ironbank-users"
    }
]

INFO: Waiting for Anchore to scan sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70
INFO: anchore-cli --u [MASKED] --url [MASKED] image wait --timeout 3600 sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3599
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3593
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3587
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3581
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3575
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3569
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3564
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3558
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3552
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3547
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3541
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3536
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3530
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3524
INFO: Image Digest: sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70
INFO: Parent Digest: sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70
INFO: Analysis Status: analyzed
INFO: Image Type: docker
INFO: Analyzed At: 2021-07-05T21:30:20Z
INFO: Image ID: 01a50e5d113132d5054142b5310969a68ed5097ad09853ee94eb712f696d070c
INFO: Dockerfile Mode: Actual
INFO: Distro: rhel
INFO: Distro Version: 8.4
INFO: Size: 318504960
INFO: Architecture: amd64
INFO: Layer Count: 4
INFO: Full Tag: registry1.dso.mil/ironbank-staging/opensource/istio-1.5/node-agent-k8s-1.5:ibci-351577
INFO: Tag Detected At: 2021-07-05T21:29:01Z
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 os
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 files
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 npm
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 gem
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 python
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 java
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 binary
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 go
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 malware
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70 nuget
INFO: Getting vulnerability results
INFO: Fetching [MASKED]/enterprise/images/sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70/ancestors
INFO: Fetching [MASKED]/enterprise/images/sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70/vuln/all?base_digest=sha256:56a070b330c61126238792d8429762ba8cb87eb8d03accc64c75bbdb7bb04f5c
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27218
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27218
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-28153
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-28153
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20231
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20231
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20232
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20232
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33560
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33560
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3200
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3200
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-24032
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-24032
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-15945
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-15945
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-24370
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-24370
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3580
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3580
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23840
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23840
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23841
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23841
INFO: [MASKED]/query/vulnerabilities?id=CVE-2019-20838
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2019-20838
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14155
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14155
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Getting compliance results
INFO: Fetching [MASKED]/enterprise/images/sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70/ancestors
INFO: Fetching [MASKED]/enterprise/images/sha256:461cad0916ae7c5c69bfef39c5a3daf782a9567a7aba9c597b7965dd7850db70/check?tag=registry1.dso.mil/ironbank-staging/opensource/istio-1.5/node-agent-k8s-1.5:ibci-351577&detail=true&base_digest=sha256:56a070b330c61126238792d8429762ba8cb87eb8d03accc64c75bbdb7bb04f5c
INFO: Getting Anchore version
INFO: Fetching [MASKED]/version
section_end:1625520646:step_script
section_start:1625520646:upload_artifacts_on_success
Uploading artifacts for successful job
Uploading artifacts...
ci-artifacts/scan-results/anchore/: found 17 matching files and directories 
Uploading artifacts as "archive" to coordinator... ok  id=4603939 responseStatus=201 Created token=oxdrToon
section_end:1625520648:upload_artifacts_on_success
section_start:1625520648:cleanup_file_variables
Cleaning up file based variables
section_end:1625520648:cleanup_file_variables
Job succeeded