Running with gitlab-runner 13.8.0 (775dd39d)  on global-shared-gitlab-runner-5c65bf4fbc-r4d8h xjiuspDK section_start:1620922729:resolve_secrets Resolving secrets section_end:1620922729:resolve_secrets section_start:1620922729:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/ib-pipeline-image:0.1 ... section_end:1620922729:prepare_executor section_start:1620922729:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-xjiuspdk-project-4501-concurrent-0vhpnm to be running, status is Pending Running on runner-xjiuspdk-project-4501-concurrent-0vhpnm via global-shared-gitlab-runner-5c65bf4fbc-r4d8h... section_end:1620922732:prepare_script section_start:1620922732:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/tektoncd/kubeconfigwriter/.git/ Created fresh repository. Checking out 42dd4447 as development... Skipping Git submodules setup section_end:1620922732:get_sources section_start:1620922732:download_artifacts Downloading artifacts Downloading artifacts for hardening_manifest (3307599)... Downloading artifacts from coordinator... ok  id=3307599 responseStatus=200 OK token=r8eq2TdX Downloading artifacts for load scripts (3307596)... Downloading artifacts from coordinator... ok  id=3307596 responseStatus=200 OK token=BX83etfG section_end:1620922732:download_artifacts section_start:1620922732:step_script Executing "step_script" stage of the job script $ if [[ "${CI_COMMIT_BRANCH}" == "master" || "${CI_COMMIT_BRANCH}" == "development" ]] && [[ "${CI_COMMIT_REF_PROTECTED}" != true ]]; then # collapsed multi-line command $ pip3 install jsonschema Collecting jsonschema Downloading jsonschema-3.2.0-py2.py3-none-any.whl (56 kB) Collecting pyrsistent>=0.14.0 Downloading pyrsistent-0.17.3.tar.gz (106 kB) Requirement already satisfied: setuptools in /opt/app-root/lib/python3.6/site-packages (from jsonschema) (39.2.0) Collecting importlib-metadata; python_version < "3.8" Downloading importlib_metadata-4.0.1-py3-none-any.whl (16 kB) Collecting attrs>=17.4.0 Downloading attrs-21.2.0-py2.py3-none-any.whl (53 kB) Requirement already satisfied: six>=1.11.0 in /opt/app-root/lib/python3.6/site-packages (from jsonschema) (1.15.0) Collecting typing-extensions>=3.6.4; python_version < "3.8" Downloading typing_extensions-3.10.0.0-py3-none-any.whl (26 kB) Collecting zipp>=0.5 Downloading zipp-3.4.1-py3-none-any.whl (5.2 kB) Building wheels for collected packages: pyrsistent Building wheel for pyrsistent (setup.py): started Building wheel for pyrsistent (setup.py): finished with status 'done' Created wheel for pyrsistent: filename=pyrsistent-0.17.3-cp36-cp36m-linux_x86_64.whl size=55876 sha256=4591f4a60191fc2bd02bfe20cf16c6e29daf503f14eb078b387439b477eb192c Stored in directory: /tmp/pip-ephem-wheel-cache-kak8r2ux/wheels/34/13/19/294da8e11bce7e563afee51251b9fa878185e14f4b5caf00cb Successfully built pyrsistent Installing collected packages: pyrsistent, typing-extensions, zipp, importlib-metadata, attrs, jsonschema Successfully installed attrs-21.2.0 importlib-metadata-4.0.1 jsonschema-3.2.0 pyrsistent-0.17.3 typing-extensions-3.10.0.0 zipp-3.4.1 WARNING: You are using pip version 20.2.4; however, version 21.1.1 is available. You should consider upgrading via the '/opt/app-root/bin/python3.6 -m pip install --upgrade pip' command. $ mkdir -p "${ARTIFACT_DIR}" $ set +e $ python3 "${PIPELINE_REPO_DIR}/stages/check-cves/pipeline_wl_compare.py" --lint INFO: Log level set to info INFO: Grabbing CVEs for: opensource/tektoncd/kubeconfigwriter INFO: Retrieving findings for opensource/tektoncd/kubeconfigwriter INFO: Running query to vat api WARNING: opensource/tektoncd/kubeconfigwriter:v0.24.1 not found in VAT WARNING: {"statusCode":404,"message":"No container found with containerName:'opensource/tektoncd/kubeconfigwriter' and version: 'v0.24.1'","error":"Not Found"} INFO: CONTAINER APPROVAL STATUS INFO: notapproved INFO: CONTAINER APPROVAL TEXT INFO: None WARNING: IMAGE_APPROVAL_STATUS=notapproved INFO: Getting google/distroless/static hardening_manifest.yaml from master INFO: Grabbing CVEs for: google/distroless/static INFO: Artifact Directory: ci-artifacts/lint INFO: 0 section_end:1620922735:step_script section_start:1620922735:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/lint/: found 3 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=3307600 responseStatus=201 Created token=Lt-5y_gN Uploading artifacts... variables.env: found 1 matching files and directories Uploading artifacts as "dotenv" to coordinator... ok id=3307600 responseStatus=201 Created token=Lt-5y_gN section_end:1620922736:upload_artifacts_on_success section_start:1620922736:cleanup_file_variables Cleaning up file based variables section_end:1620922736:cleanup_file_variables Job succeeded