Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG section_start:1629138148:resolve_secrets Resolving secrets section_end:1629138148:resolve_secrets section_start:1629138148:prepare_executor Preparing the "kubernetes" executor "ServiceAccount" overwritten with "vat" Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/ironbank-pipelines/pipeline-runner:0.3 ... section_end:1629138148:prepare_executor section_start:1629138148:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-4501-concurrent-0vjg9g to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-4501-concurrent-0vjg9g to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper istio-proxy]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" Running on runner-e82g8rg-project-4501-concurrent-0vjg9g via dsop-shared-gitlab-runner-f887cbcbd-srgz6... section_end:1629138154:prepare_script section_start:1629138154:get_sources Getting source from Git repository $ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available; Sidecar available Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/tektoncd/kubeconfigwriter/.git/ Created fresh repository. Checking out 334928f7 as development... Skipping object checkout, Git LFS is not installed. Skipping Git submodules setup section_end:1629138155:get_sources section_start:1629138155:download_artifacts Downloading artifacts Downloading artifacts for anchore-scan (5720368)... Downloading artifacts from coordinator... ok  id=5720368 responseStatus=200 OK token=3Y5yTbjH WARNING: ci-artifacts/scan-results/anchore/: lchown ci-artifacts/scan-results/anchore/: operation not permitted (suppressing repeats) Downloading artifacts for build (5720366)... Downloading artifacts for hardening-manifest (5720362)... Downloading artifacts from coordinator... ok  id=5720366 responseStatus=200 OK token=sEMEAsHV WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) Downloading artifacts from coordinator... ok  id=5720362 responseStatus=200 OK token=EBJPacZW WARNING: ci-artifacts/preflight/: lchown ci-artifacts/preflight/: operation not permitted (suppressing repeats) Downloading artifacts for load-scripts (5720359)... Downloading artifacts from coordinator... ok  id=5720359 responseStatus=200 OK token=c9wg_zdy WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) Downloading artifacts for twistlock-scan (5720369)... Downloading artifacts from coordinator... ok  id=5720369 responseStatus=200 OK token=cNspoDgu WARNING: ci-artifacts/scan-results/twistlock/: lchown ci-artifacts/scan-results/twistlock/: operation not permitted (suppressing repeats) Downloading artifacts for wl-compare-lint (5720363)... Downloading artifacts from coordinator... ok  id=5720363 responseStatus=200 OK token=PbeF2D2L WARNING: ci-artifacts/lint/: lchown ci-artifacts/lint/: operation not permitted (suppressing repeats) section_end:1629138155:download_artifacts section_start:1629138155:step_script Executing "step_script" stage of the job script $ "${PIPELINE_REPO_DIR}/stages/vat/vat-run-api.sh" INFO: Log level set to info INFO: Gathering list of all justifications... INFO: API Response: {"imageName":"opensource/tektoncd/kubeconfigwriter","imageTag":"v0.27.0","accreditation":"Approved","containerState":"Approved","approver":{"date":"2021-08-13T01:38:01.551Z","comment":"Auto Approval derived from previous version opensource/tektoncd/kubeconfigwriter:v0.26.0","user":{"name":"VAT_Bot","email":"VAT_Bot@no_reply.com","role":"container_approver"}},"findings":[{"identifier":"4f9abc83a7a1c95e222b659e0fab27fa","source":"anchore_comp","description":"SUID or SGID found set on file /var/local. Mode: 0o42775\n Gate: files\n Trigger: suid_or_guid_set\n Policy ID: DoDFileChecks","findingsState":"approved","contributor":{"state":"needs_review","date":"2021-02-01T17:09:21.000Z","justification":"Inherited from base image. (The SUID bit prevents users from deleting/modifying files that do not belong to them in /var/local.)","user":{"name":"thomas.b.shepherd","email":"shepherd_thomas@bah.com","role":"findings_approver"}},"reviewer":{"state":"reviewed","date":"2021-02-01T17:10:04.000Z","comment":"This finding was reviewed.","designator":"True Positive","falsePositive":false,"user":{"name":"thomas.b.shepherd","email":"shepherd_thomas@bah.com","role":"findings_approver"}},"approver":{"state":"approved","date":"2021-02-04T18:39:53.000Z","comment":"This finding is approved.","user":{"name":"nicosnt","email":"nicolas.m.chaillan.civ@mail.mil","role":"container_approver"}}}],"digest":"c72d3e3ebded9923f2e1b48993d23057de6a239e3e4446d83617912c36a145cf"} INFO: POST Response: 201 section_end:1629138156:step_script section_start:1629138156:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/vat_request.json: found 1 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=5720375 responseStatus=201 Created token=1HG8wS-t section_end:1629138156:upload_artifacts_on_success section_start:1629138156:cleanup_file_variables Cleaning up file based variables section_end:1629138157:cleanup_file_variables Job succeeded