Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG section_start:1630521992:resolve_secrets Resolving secrets section_end:1630521992:resolve_secrets section_start:1630521992:prepare_executor Preparing the "kubernetes" executor "ServiceAccount" overwritten with "vat" Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/ironbank-pipelines/pipeline-runner:0.3 ... section_end:1630521992:prepare_executor section_start:1630521992:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-4498-concurrent-096sv5 to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-4498-concurrent-096sv5 to be running, status is Pending ContainersNotInitialized: "containers with incomplete status: [istio-init]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" Running on runner-e82g8rg-project-4498-concurrent-096sv5 via dsop-shared-gitlab-runner-f887cbcbd-srgz6... section_end:1630521998:prepare_script section_start:1630521998:get_sources Getting source from Git repository $ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available; Sidecar available Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/tektoncd/entrypoint/.git/ Created fresh repository. Checking out d95db066 as development... Skipping object checkout, Git LFS is not installed. Skipping Git submodules setup section_end:1630521999:get_sources section_start:1630521999:download_artifacts Downloading artifacts Downloading artifacts for anchore-scan (6154391)... Downloading artifacts from coordinator... ok  id=6154391 responseStatus=200 OK token=xizz2ytZ Downloading artifacts for build (6154389)... WARNING: ci-artifacts/scan-results/anchore/: lchown ci-artifacts/scan-results/anchore/: operation not permitted (suppressing repeats) Downloading artifacts for hardening-manifest (6154385)... Downloading artifacts from coordinator... ok  id=6154389 responseStatus=200 OK token=SyC5huzp WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) Downloading artifacts from coordinator... ok  id=6154385 responseStatus=200 OK token=6wtxaBFR WARNING: ci-artifacts/preflight/: lchown ci-artifacts/preflight/: operation not permitted (suppressing repeats) Downloading artifacts for load-scripts (6154382)... Downloading artifacts from coordinator... ok  id=6154382 responseStatus=200 OK token=QmT6KRaL WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) Downloading artifacts for twistlock-scan (6155188)... Downloading artifacts from coordinator... ok  id=6155188 responseStatus=200 OK token=z3ksuT4e WARNING: ci-artifacts/scan-results/twistlock/: lchown ci-artifacts/scan-results/twistlock/: operation not permitted (suppressing repeats) Downloading artifacts for wl-compare-lint (6154386)... Downloading artifacts from coordinator... ok  id=6154386 responseStatus=200 OK token=9Zj6595X WARNING: ci-artifacts/lint/: lchown ci-artifacts/lint/: operation not permitted (suppressing repeats) section_end:1630521999:download_artifacts section_start:1630521999:step_script Executing "step_script" stage of the job script $ "${PIPELINE_REPO_DIR}/stages/vat/vat-run-api.sh" INFO: Log level set to info INFO: Gathering list of all justifications... INFO: API Response: {"imageName":"opensource/tektoncd/entrypoint","imageTag":"v0.27.3","vatUrl":"https://vat.dso.mil/vat/container/15839","accreditation":"Approved","containerState":"Approved","approver":{"date":"2021-09-01T01:49:32.290Z","comment":"Auto Approval derived from previous version opensource/tektoncd/entrypoint:v0.27.2","user":{"name":"VAT_Bot","email":"VAT_Bot@no_reply.com","role":"container_approver"}},"findings":[{"identifier":"4f9abc83a7a1c95e222b659e0fab27fa","source":"anchore_comp","description":"SUID or SGID found set on file /var/local. Mode: 0o42775\n Gate: files\n Trigger: suid_or_guid_set\n Policy ID: DoDFileChecks","findingsState":"approved","contributor":{"state":"needs_review","date":"2021-02-01T17:49:21.000Z","justification":"Inherited from base image. (The SUID bit prevents users from deleting/modifying files that do not belong to them in /var/local.)","user":{"name":"thomas.b.shepherd","email":"shepherd_thomas@bah.com","role":"findings_approver"}},"reviewer":{"state":"reviewed","date":"2021-02-01T17:49:36.000Z","comment":"This finding was reviewed.","designator":"True Positive","falsePositive":false,"user":{"name":"thomas.b.shepherd","email":"shepherd_thomas@bah.com","role":"findings_approver"}},"approver":{"state":"approved","date":"2021-02-04T18:37:51.000Z","comment":"This finding is approved.","user":{"name":"nicosnt","email":"nicolas.m.chaillan.civ@mail.mil","role":"container_approver"}}}],"digest":"529355d7252ca49de13e1c2f6ecd0dc86adf4ff1ca21aa600bcb39b36fca6e1f"} INFO: POST Response: 201 section_end:1630522000:step_script section_start:1630522000:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/vat_request.json: found 1 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=6154398 responseStatus=201 Created token=s5h4mtgC section_end:1630522001:upload_artifacts_on_success section_start:1630522001:cleanup_file_variables Cleaning up file based variables section_end:1630522001:cleanup_file_variables Job succeeded