Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG section_start:1629917979:resolve_secrets Resolving secrets section_end:1629917979:resolve_secrets section_start:1629917979:prepare_executor Preparing the "kubernetes" executor "ServiceAccount" overwritten with "vat" Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/ironbank-pipelines/pipeline-runner:0.3 ... section_end:1629917979:prepare_executor section_start:1629917979:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-4500-concurrent-0xhdhv to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-4500-concurrent-0xhdhv to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper istio-proxy]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" Running on runner-e82g8rg-project-4500-concurrent-0xhdhv via dsop-shared-gitlab-runner-f887cbcbd-srgz6... section_end:1629917985:prepare_script section_start:1629917985:get_sources Getting source from Git repository $ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available; Sidecar available Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/tektoncd/imagedigestexporter/.git/ Created fresh repository. Checking out 0de5f009 as development... Skipping object checkout, Git LFS is not installed. Skipping Git submodules setup section_end:1629917986:get_sources section_start:1629917986:download_artifacts Downloading artifacts Downloading artifacts for anchore-scan (5935509)... Downloading artifacts from coordinator... ok  id=5935509 responseStatus=200 OK token=4bMVECe7 WARNING: ci-artifacts/scan-results/anchore/: lchown ci-artifacts/scan-results/anchore/: operation not permitted (suppressing repeats) Downloading artifacts for build (5935507)... Downloading artifacts from coordinator... ok  id=5935507 responseStatus=200 OK token=p7HfUdyq WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) Downloading artifacts for hardening-manifest (5935503)... Downloading artifacts from coordinator... ok  id=5935503 responseStatus=200 OK token=L7aShxY3 WARNING: ci-artifacts/preflight/: lchown ci-artifacts/preflight/: operation not permitted (suppressing repeats) Downloading artifacts for load-scripts (5935500)... Downloading artifacts from coordinator... ok  id=5935500 responseStatus=200 OK token=db-dUsdY WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) Downloading artifacts for twistlock-scan (5935510)... Downloading artifacts from coordinator... ok  id=5935510 responseStatus=200 OK token=kvWMa8SD WARNING: ci-artifacts/scan-results/twistlock/: lchown ci-artifacts/scan-results/twistlock/: operation not permitted (suppressing repeats) Downloading artifacts for wl-compare-lint (5935504)... Downloading artifacts from coordinator... ok  id=5935504 responseStatus=200 OK token=6oGYi-_F WARNING: ci-artifacts/lint/: lchown ci-artifacts/lint/: operation not permitted (suppressing repeats) section_end:1629917986:download_artifacts section_start:1629917986:step_script Executing "step_script" stage of the job script $ "${PIPELINE_REPO_DIR}/stages/vat/vat-run-api.sh" INFO: Log level set to info INFO: Gathering list of all justifications... INFO: API Response: {"imageName":"opensource/tektoncd/imagedigestexporter","imageTag":"v0.27.2","accreditation":"Approved","containerState":"Approved","approver":{"date":"2021-08-24T01:26:20.100Z","comment":"Auto Approval derived from previous version opensource/tektoncd/imagedigestexporter:v0.27.1","user":{"name":"VAT_Bot","email":"VAT_Bot@no_reply.com","role":"container_approver"}},"findings":[{"identifier":"4f9abc83a7a1c95e222b659e0fab27fa","source":"anchore_comp","description":"SUID or SGID found set on file /var/local. Mode: 0o42775\n Gate: files\n Trigger: suid_or_guid_set\n Policy ID: DoDFileChecks","findingsState":"approved","contributor":{"state":"needs_review","date":"2021-02-01T17:02:51.000Z","justification":"Inherited from base image. (The SUID bit prevents users from deleting/modifying files that do not belong to them in /var/local.)","user":{"name":"alfontaine","email":"alan.fontaine@centauricorp.com","role":"findings_approver"}},"reviewer":{"state":"reviewed","date":"2021-02-01T17:06:19.000Z","comment":"This finding was reviewed.","designator":"True Positive","falsePositive":false,"user":{"name":"thomas.b.shepherd","email":"shepherd_thomas@bah.com","role":"findings_approver"}},"approver":{"state":"approved","date":"2021-02-04T18:38:33.000Z","comment":"This finding is approved.","user":{"name":"nicosnt","email":"nicolas.m.chaillan.civ@mail.mil","role":"container_approver"}}}],"digest":"1f9cfc14485b60455d408d99b9a493df1403747320561159276bcef6d94e1aea"} INFO: POST Response: 201 section_end:1629917987:step_script section_start:1629917987:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/vat_request.json: found 1 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=5935516 responseStatus=201 Created token=dd88pgBL section_end:1629917988:upload_artifacts_on_success section_start:1629917988:cleanup_file_variables Cleaning up file based variables section_end:1629917988:cleanup_file_variables Job succeeded