Running with gitlab-runner 13.2.0 (353dd94e)  on global-shared-gitlab-runner-85466db969-tpstw SuzdBzr1 section_start:1605818584:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/ib-pipeline-image:0.1 ... section_end:1605818584:prepare_executor section_start:1605818584:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-suzdbzr1-project-515-concurrent-08mnmn to be running, status is Pending Running on runner-suzdbzr1-project-515-concurrent-08mnmn via global-shared-gitlab-runner-85466db969-tpstw... section_end:1605818588:prepare_script section_start:1605818588:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/mbtest/mountebank/.git/ Created fresh repository. Checking out 3dff4659 as development... Skipping Git submodules setup section_end:1605818589:get_sources section_start:1605818589:download_artifacts Downloading artifacts Downloading artifacts for anchore scan (783364)... Downloading artifacts for load scripts (783354)... Downloading artifacts from coordinator... ok  id=783364 responseStatus=200 OK token=u_xyAZcf Downloading artifacts from coordinator... ok  id=783354 responseStatus=200 OK token=GRabPjwR Downloading artifacts for openscap compliance (783361)... Downloading artifacts from coordinator... ok  id=783361 responseStatus=200 OK token=5Q2fjv-3 Downloading artifacts for openscap cve (783362)... Downloading artifacts from coordinator... ok  id=783362 responseStatus=200 OK token=L8qkKCKZ Downloading artifacts from coordinator... ok  id=783363 responseStatus=200 OK token=fGW1Czsn Downloading artifacts for twistlock scan (783363)... section_end:1605818590:download_artifacts section_start:1605818590:step_script Executing "step_script" stage of the job script $ "${PIPELINE_REPO_DIR}/stages/check-cves/check-cves.sh" INFO: Log level set to info Fetching Whitelisted CVEs from parent: opensource/nodejs/nodejs12:12.19.1 Fetching Whitelisted CVEs from parent: redhat/ubi/ubi8:8.3 Whitelist Set: {'e7573262736ef52353cde3bae2617782', 'CVE-2020-27618', '953dfbea1b1e9d5829fbed2e390bd3af', '41cb7cdf04850e33a11f80c42bf660b3', 'CVE-2020-16135', 'CCE-82360-9', 'CCE-82979-6', 'CVE-2020-13434', 'CCE-82959-8', 'CVE-2020-8231', 'c2e44319ae5b3b040044d8ae116d1c2f', 'CVE-2020-15358', '698044205a9c4a6d48b7937e66a6bf4f', 'CVE-2020-24659', '639f6f1177735759703e928c14714a59', 'addbb93c22e9b0988b8b40392a4538cb', 'bcd159901fe47efddae5c095b4b0d7fd', 'CCE-82474-8', 'CVE-2019-2708', 'c4ad80832b361f81df2a31e5b6b09864', 'CVE-2020-24977', 'CCE-80938-4', 'CCE-82473-0', 'CVE-2019-12900', 'CCE-82472-2', 'CCE-82267-6', 'CCE-82368-2', 'CCE-82949-9', '3e5fad1c039f3ecfd1dcdc94d2f1f9a0', 'CVE-2020-8927', 'CVE-2019-13012', 'CVE-2020-26116', 'CVE-2020-24370', 'CCE-82220-5', 'GHSA-xgh6-85xh-479p', 'CVE-2020-13776', '463a9a24225c26f7a5bf3f38908e5cb3', '320a97c6816565eedf3545833df99dd0', '68e630cef4a8533b139875aa5fc54da5', 'CCE-82985-3', 'CCE-82395-5', '3456a263793066e9b5063ada6e47917d', 'abb121e9621abdd452f65844954cf1c1', 'CCE-82494-6', 'CCE-80935-0', 'VULNDB-238614', 'CCE-82168-6', 'CVE-2020-7754', '34de21e516c0ca50a96e5386f163f8bf', 'CVE-2019-19234', 'CVE-2019-18276', 'CVE-2020-27619'} Whitelist Set Length: 52 Scans are not passing 100%. Vuln Set Delta Length: 1 Vuln Set: {'CVE-2020-27618', 'CVE-2020-16135', 'CCE-82360-9', 'CCE-82979-6', 'CCE-82959-8', 'CVE-2020-13434', 'CVE-2020-8231', 'CVE-2020-15358', 'CCE-82474-8', 'CVE-2020-24659', 'CVE-2019-2708', 'CCE-80938-4', 'CVE-2020-24977', 'CVE-2017-18589', 'CCE-82473-0', 'CVE-2019-12900', 'CCE-82267-6', 'CCE-82368-2', 'CCE-82472-2', 'CCE-82949-9', 'CVE-2020-8927', 'CVE-2019-13012', 'CVE-2020-26116', 'CVE-2020-24370', 'CCE-82220-5', 'GHSA-xgh6-85xh-479p', 'CVE-2020-13776', 'CCE-82985-3', 'CCE-82395-5', 'CCE-82494-6', 'CCE-80935-0', 'CCE-82168-6', 'VULNDB-238614', 'CVE-2020-7754', 'CVE-2019-19234', 'CVE-2019-18276', 'CVE-2020-27619'} Vuln Set Length: 37 NON-WHITELISTED VULNERABILITIES FOUND Vuln Set Delta: {'CVE-2017-18589'} Vuln Set Delta Length: 1 section_end:1605818596:step_script Job succeeded