UNCLASSIFIED

Skip to content

GitLab

fix pip sha256 and updates for tini permissions, removing tmp directories,... 

fix pip sha256 and updates for tini permissions, removing tmp directories, upgrading away from vulnerable packages
14 jobs for fix-vulnerabilities-2021-3-4 in 19 minutes and 46 seconds (queued for 1 second)
0224cae8
1 related merge request: !17 Fix vulnerabilities 2021-3-4
Status Job ID Name Coverage
  .Pre
passed #2295679
ironbank
load scripts

00:00:06

 
  Preflight
passed #2295680
ironbank
folder structure

00:00:08

passed #2295682
ironbank
hardening_manifest

00:00:10

failed #2295681
ironbank allowed to fail
hardening_manifest migration

00:00:05

 
  Lint
passed #2295683
ironbank
wl compare lint

00:00:09

 
  Import Artifacts
passed #2295684
ironbank
import artifacts

00:00:30

 
  Scan Artifacts
passed #2295685
ironbank
clamav scan

00:03:51

 
  Build
passed #2295686
ironbank-isolated
build

00:07:59

 
  Scanning
passed #2295690
ironbank
anchore scan

00:04:00

passed #2295687
ironbank
openscap compliance

00:01:20

passed #2295688
ironbank
openscap cve

00:05:12

passed #2295689
ironbank
twistlock scan

00:01:06

 
  Csv Output
passed #2295691
ironbank
csv output

00:01:29

 
  Check Cves
failed #2295692
ironbank allowed to fail
check cves

00:00:14

 
Name Stage Failure
failed
check cves Check Cves 
ERROR: Anchore CVE - CVE-2021-27645-glibc-headers-2.28-127.el8_3.2
ERROR: Anchore CVE - CVE-2021-3178-kernel-headers-4.18.0-240.15.1.el8_3
ERROR: Anchore CVE - CVE-2021-3326-glibc-devel-2.28-127.el8_3.2
ERROR: Anchore CVE - CVE-2021-3326-glibc-headers-2.28-127.el8_3.2
ERROR: Anchore CVE - CVE-2021-3347-kernel-headers-4.18.0-240.15.1.el8_3
ERROR: Anchore CVE - CVE-2021-3348-kernel-headers-4.18.0-240.15.1.el8_3
ERROR: Anchore CVE - CVE-2021-3411-kernel-headers-4.18.0-240.15.1.el8_3
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1
failed
hardening_manifest migration Preflight 
Skipping Git submodules setup
Downloading artifacts
Downloading artifacts for load scripts (2295679)...
Downloading artifacts from coordinator... ok        id=2295679 responseStatus=200 OK token=m-J7SSQt
Executing "step_script" stage of the job script
$ if ! [[ -f hardening_manifest.yaml ]]; then # collapsed multi-line command
download.yaml or download.json file found. Delete this file when a hardening_manifest.yaml file is used.
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1

UNCLASSIFIED