UNCLASSIFIED

Merge branch 'development' into 'master'

Development

See merge request !15
19 jobs for master in 177 minutes and 44 seconds (queued for 16 seconds)
Status Job ID Name Coverage
  .Pre
passed #2601168
ironbank
load scripts

00:00:10

 
  Preflight
passed #2601169
ironbank
folder structure

00:00:11

passed #2601170
ironbank
hardening_manifest

00:00:20

 
  Lint
passed #2601171
ironbank
wl compare lint

00:00:22

 
  Finding Compare
failed #2601172
ironbank allowed to fail
vat compare

00:00:33

 
  Import Artifacts
passed #2601173
ironbank
import artifacts

00:06:42

 
  Scan Artifacts
passed #2601174
ironbank
clamav scan

00:33:43

 
  Build
passed #2601175
ironbank-isolated
build

01:02:20

 
  Scanning
passed #2601179
ironbank
anchore scan

00:25:17

passed #2601176
ironbank
openscap compliance

00:34:46

passed #2601177
ironbank
openscap cve

00:37:51

passed #2601178
ironbank
twistlock scan

00:20:02

 
  Csv Output
passed #2601180
ironbank
csv output

00:04:46

 
  Check Cves
passed #2601181
ironbank
check cves

00:00:15

 
  Documentation
passed #2601182
ironbank
sign image

00:16:29

passed #2601183
ironbank
sign manifest

00:04:09

passed #2601184
ironbank
write json documentation

00:04:10

 
  Publish
failed #2601186
ironbank
harbor

00:03:46

failed #2601185
ironbank
upload to s3

00:14:06

 
Name Stage Failure
failed
upload to s3 Publish
twistlock
vat_api_findings.json
reports/
reports/documentation.json
reports/manifest.json
reports/server-210250.sig
reports/server-210250.tar
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 137
failed
harbor Publish
Auto-publishing changes to registry1.dso.mil/ironbank/opensource/triton-inference-server/server

* fatal: maximum number of passphrase attempts exceeded

ERROR: time="2021-04-05T12:25:23Z" level=info msg="No TUF data found locally or remotely - initializing repository registry1.dso.mil/ironbank/opensource/triton-inference-server/server for the first time"

ERROR: Failed to import key for registry1.dso.mil/ironbank/opensource/triton-inference-server/server
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1
failed
vat compare Finding Compare
('CVE-2021-22876', 'twistlock_cve', 'curl 7.1.1 to and including 7.75.0 is vulnerable to an \\"Exposure of Private Personal Information to an Unauthorized Actor\\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.', 'curl-7.61.1-14.el8_3.1', None)
('41cb7cdf04850e33a11f80c42bf660b3', 'anchore_comp', "Dockerfile directive 'HEALTHCHECK' not found, matching condition 'not_exists' check\n Gate: dockerfile\n Trigger: instruction\n Policy ID: DoDDockerfileChecks", None, None)
('CVE-2021-22876', 'anchore_cve', 'libcurl-7.61.1-14.el8_3.1\nhttps://access.redhat.com/security/cve/CVE-2021-22876', 'libcurl-7.61.1-14.el8_3.1', None)
Uploading artifacts for failed job
ci-artifacts/compare/: found 2 matching files and directories
Uploading artifacts...
Uploading artifacts as "archive" to coordinator... ok
id=2601172 responseStatus=201 Created token=jBp2BTi8
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 4