Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-5f4b468dff-8vfv5 BsbAJu5w section_start:1622596993:resolve_secrets Resolving secrets section_end:1622596993:resolve_secrets section_start:1622596993:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 ... section_end:1622596993:prepare_executor section_start:1622596993:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-bsbaju5w-project-5780-concurrent-0pbxc7 to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-bsbaju5w-project-5780-concurrent-0pbxc7 to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper]" ContainersNotReady: "containers with unready status: [build helper]" Running on runner-bsbaju5w-project-5780-concurrent-0pbxc7 via dsop-shared-gitlab-runner-5f4b468dff-8vfv5... section_end:1622596999:prepare_script section_start:1622596999:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/opensource/trufflehog/trufflehog3/.git/ Created fresh repository. Checking out a2f64105 as development... Skipping Git submodules setup section_end:1622597000:get_sources section_start:1622597000:download_artifacts Downloading artifacts Downloading artifacts for build (3755636)... Downloading artifacts from coordinator... ok  id=3755636 responseStatus=200 OK token=ih5namNN Downloading artifacts for load-scripts (3755629)... Downloading artifacts from coordinator... ok  id=3755629 responseStatus=200 OK token=iQLQrMU6 section_end:1622597000:download_artifacts section_start:1622597000:step_script Executing "step_script" stage of the job script $ python3 "${PIPELINE_REPO_DIR}/stages/scanning/anchore/anchore_scan.py" INFO: Log level set to info INFO: anchore-cli --json --u [MASKED] --url [MASKED] image add --noautosubscribe --dockerfile ./Dockerfile --force registry1.dso.mil/ironbank-staging/opensource/trufflehog/trufflehog3:289939 INFO: registry1.dso.mil/ironbank-staging/opensource/trufflehog/trufflehog3:289939 added to Anchore INFO: [ { "analysis_status": "not_analyzed", "analyzed_at": null, "annotations": {}, "created_at": "2021-06-02T01:23:21Z", "imageDigest": "sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350", "image_content": { "metadata": { "arch": null, "distro": null, "distro_version": null, "dockerfile_mode": "Actual", "image_size": null, "layer_count": null } }, "image_detail": [ { "created_at": "2021-06-02T01:23:21Z", "digest": "sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350", "dockerfile": "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", "fulldigest": "registry1.dso.mil/ironbank-staging/opensource/trufflehog/trufflehog3@sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350", "fulltag": "registry1.dso.mil/ironbank-staging/opensource/trufflehog/trufflehog3:289939", "imageDigest": "sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350", "imageId": "42e286c40c26a226d045ef2b10d040cc2a848a07d3bde427b47fe357ef44deca", "last_updated": "2021-06-02T01:23:21Z", "registry": "registry1.dso.mil", "repo": "ironbank-staging/opensource/trufflehog/trufflehog3", "tag": "289939", "tag_detected_at": "2021-06-02T01:23:21Z", "userId": "ironbank-users" } ], "image_status": "active", "image_type": "docker", "last_updated": "2021-06-02T01:23:21Z", "parentDigest": "sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350", "userId": "ironbank-users" } ] INFO: Waiting for Anchore to scan sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 INFO: anchore-cli --u [MASKED] --url [MASKED] image wait --timeout 3600 sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 INFO: Status: not_analyzed INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3599 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3593 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3588 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3582 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3576 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3570 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3564 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3558 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3551 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3545 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3539 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3533 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3526 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3520 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3514 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3508 INFO: Status: analyzing INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3502 INFO: Image Digest: sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 INFO: Parent Digest: sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 INFO: Analysis Status: analyzed INFO: Image Type: docker INFO: Analyzed At: 2021-06-02T01:25:02Z INFO: Image ID: 42e286c40c26a226d045ef2b10d040cc2a848a07d3bde427b47fe357ef44deca INFO: Dockerfile Mode: Actual INFO: Distro: rhel INFO: Distro Version: 8.4 INFO: Size: 405821440 INFO: Architecture: amd64 INFO: Layer Count: 5 INFO: Full Tag: registry1.dso.mil/ironbank-staging/opensource/trufflehog/trufflehog3:289939 INFO: Tag Detected At: 2021-06-02T01:23:21Z INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 os INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 files INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 npm INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 gem INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 python INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 java INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 binary INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 go INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 malware INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350 nuget INFO: Getting vulnerability results INFO: Fetching [MASKED]/enterprise/images/sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350/ancestors INFO: Fetching [MASKED]/enterprise/images/sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350/vuln/all?base_digest=sha256:3c65a38fa9d501022157537b699c22a905c6781c5fe753fa4727a4e680e72dcf INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27218 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27218 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27219 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27219 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-28153 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-28153 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20231 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20231 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20232 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20232 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3200 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3200 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3516 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3516 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3517 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3517 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3518 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3518 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3537 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3537 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3541 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3541 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-24032 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-24032 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-15945 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-15945 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-24370 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-24370 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3520 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3520 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14145 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14145 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14145 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14145 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23840 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23841 INFO: [MASKED]/query/vulnerabilities?id=CVE-2019-20838 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2019-20838 INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14155 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14155 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3516 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3516 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3517 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3517 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3518 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3518 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3537 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3537 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3541 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3541 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20271 INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421 INFO: Getting compliance results INFO: Fetching [MASKED]/enterprise/images/sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350/ancestors INFO: Fetching [MASKED]/enterprise/images/sha256:c966e24a6c4761e554bfd3feffb248089f50a3d1cececf2ab12c974952bae350/check?tag=registry1.dso.mil/ironbank-staging/opensource/trufflehog/trufflehog3:289939&detail=true&base_digest=sha256:3c65a38fa9d501022157537b699c22a905c6781c5fe753fa4727a4e680e72dcf INFO: Getting Anchore version INFO: Fetching [MASKED]/version section_end:1622597149:step_script section_start:1622597149:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... ci-artifacts/scan-results/anchore/: found 17 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=3755637 responseStatus=201 Created token=E85uParE section_end:1622597150:upload_artifacts_on_success section_start:1622597150:cleanup_file_variables Cleaning up file based variables section_end:1622597150:cleanup_file_variables Job succeeded