Running with gitlab-runner 13.12.0 (7a6612da)
  on dsop-shared-gitlab-runner-5fcd8977b8-m6qmr JrExJ6yx
  feature flags: FF_USE_LEGACY_KUBERNETES_EXECUTION_STRATEGY:false
section_start:1630747096:resolve_secrets
Resolving secrets
section_end:1630747096:resolve_secrets
section_start:1630747096:prepare_executor
Preparing the "kubernetes" executor
Using Kubernetes namespace: gitlab-runner-ironbank-dsop
Using Kubernetes executor with image registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 ...
Using attach strategy to execute scripts...
section_end:1630747096:prepare_executor
section_start:1630747096:prepare_script
Preparing environment
Waiting for pod gitlab-runner-ironbank-dsop/runner-jrexj6yx-project-7104-concurrent-0s2cb5 to be running, status is Pending
Waiting for pod gitlab-runner-ironbank-dsop/runner-jrexj6yx-project-7104-concurrent-0s2cb5 to be running, status is Pending
	ContainersNotReady: "containers with unready status: [build helper istio-proxy]"
	ContainersNotReady: "containers with unready status: [build helper istio-proxy]"
Running on runner-jrexj6yx-project-7104-concurrent-0s2cb5 via dsop-shared-gitlab-runner-5fcd8977b8-m6qmr...
section_end:1630747103:prepare_script
section_start:1630747103:get_sources
Getting source from Git repository
$ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available;
Sidecar available
Fetching changes with git depth set to 50...
Initialized empty Git repository in /builds/JrExJ6yx/0/dsop/opensource/yq/yq/.git/
Created fresh repository.
Checking out 15299b70 as master...

Skipping Git submodules setup
section_end:1630747104:get_sources
section_start:1630747104:download_artifacts
Downloading artifacts
Downloading artifacts for build (6235293)...
Downloading artifacts from coordinator... ok        id=6235293 responseStatus=200 OK token=j9ygo7-p
WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) 
Downloading artifacts for load-scripts (6235286)...
Downloading artifacts from coordinator... ok        id=6235286 responseStatus=200 OK token=jN8pFzwn
WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) 
section_end:1630747104:download_artifacts
section_start:1630747104:step_script
Executing "step_script" stage of the job script
$ python3 "${PIPELINE_REPO_DIR}/stages/scanning/anchore/anchore_scan.py"
INFO: Log level set to info
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image add --noautosubscribe --dockerfile ./Dockerfile --force registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-460876
INFO: registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-460876 added to Anchore
INFO: [
    {
        "analysis_status": "not_analyzed",
        "analyzed_at": null,
        "annotations": {},
        "created_at": "2021-09-04T09:18:26Z",
        "imageDigest": "sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311",
        "image_content": {
            "metadata": {
                "arch": null,
                "distro": null,
                "distro_version": null,
                "dockerfile_mode": "Actual",
                "image_size": null,
                "layer_count": null
            }
        },
        "image_detail": [
            {
                "created_at": "2021-09-04T09:18:26Z",
                "digest": "sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311",
                "dockerfile": "QVJHIEJBU0VfUkVHSVNUUlk9cmVnaXN0cnkxLmRzby5taWwKQVJHIEJBU0VfSU1BR0U9aXJvbmJhbmsvcmVkaGF0L3ViaS91Ymk4LW1pbmltYWwKQVJHIEJBU0VfVEFHPTguNAoKRlJPTSBtaWtlZmFyYWgveXE6NC45LjMgQVMgYmFzZQoKRlJPTSAke0JBU0VfUkVHSVNUUll9LyR7QkFTRV9JTUFHRX06JHtCQVNFX1RBR30KClJVTiBtaWNyb2RuZiB1cGRhdGUgLS1ub2RvY3MgJiYgXAogIG1pY3JvZG5mIGNsZWFuIGFsbCAmJiBcCiAgcm0gLXJmIC92YXIveXVtL2NhY2hlCgpDT1BZIC0tZnJvbT1iYXNlIC91c3IvYmluL3lxIC91c3IvYmluL3lxClVTRVIgMTAwMApIRUFMVEhDSEVDSyBOT05FCkVOVFJZUE9JTlQgWyJ5cSJdCg==",
                "fulldigest": "registry1.dso.mil/ironbank-staging/opensource/yq/yq@sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311",
                "fulltag": "registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-460876",
                "imageDigest": "sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311",
                "imageId": "26f2a571300b511f58a73848d34e982b5d50006948565dbb39198e7e9703d40e",
                "last_updated": "2021-09-04T09:18:26Z",
                "registry": "registry1.dso.mil",
                "repo": "ironbank-staging/opensource/yq/yq",
                "tag": "ibci-460876",
                "tag_detected_at": "2021-09-04T09:18:26Z",
                "userId": "ironbank-users"
            }
        ],
        "image_status": "active",
        "image_type": "docker",
        "last_updated": "2021-09-04T09:18:26Z",
        "parentDigest": "sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311",
        "userId": "ironbank-users"
    }
]

INFO: Waiting for Anchore to scan sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311
INFO: anchore-cli --u [MASKED] --url [MASKED] image wait --timeout 3600 sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3598
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3592
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3586
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3580
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3574
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3569
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3563
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3557
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3551
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3546
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3540
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3534
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3529
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3523
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3517
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3511
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3506
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3500
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3494
INFO: Image Digest: sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311
INFO: Parent Digest: sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311
INFO: Analysis Status: analyzed
INFO: Image Type: docker
INFO: Analyzed At: 2021-09-04T09:20:14Z
INFO: Image ID: 26f2a571300b511f58a73848d34e982b5d50006948565dbb39198e7e9703d40e
INFO: Dockerfile Mode: Actual
INFO: Distro: rhel
INFO: Distro Version: 8.4
INFO: Size: 167649280
INFO: Architecture: amd64
INFO: Layer Count: 4
INFO: Full Tag: registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-460876
INFO: Tag Detected At: 2021-09-04T09:18:26Z
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 os
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 files
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 npm
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 gem
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 python
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 java
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 binary
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 go
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 malware
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311 nuget
INFO: Getting vulnerability results
INFO: Fetching [MASKED]/enterprise/images/sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311/ancestors
INFO: Fetching [MASKED]/enterprise/images/sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311/vuln/all?base_digest=sha256:82a2c51c0e666de6301387fa4f1678bf5983bda810769838077e1f3494127b4f
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3580
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3580
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-24370
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-24370
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20232
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20232
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36084
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36084
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20231
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20231
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-28153
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-28153
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36087
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36087
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36086
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36086
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23841
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23841
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33560
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33560
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14155
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14155
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3712
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3712
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-37750
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-37750
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: [MASKED]/query/vulnerabilities?id=CVE-2019-20838
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2019-20838
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3200
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3200
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36222
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36222
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36085
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36085
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23840
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23840
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Getting compliance results
INFO: Fetching [MASKED]/enterprise/images/sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311/ancestors
INFO: Fetching [MASKED]/enterprise/images/sha256:027ea7d555e4e4b6f8e94e42edad83a9b36d3b2ca30dee2ba978bd1041f83311/check?tag=registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-460876&detail=true&base_digest=sha256:82a2c51c0e666de6301387fa4f1678bf5983bda810769838077e1f3494127b4f
INFO: Getting Anchore version
INFO: Fetching [MASKED]/version
section_end:1630747254:step_script
section_start:1630747254:upload_artifacts_on_success
Uploading artifacts for successful job
Uploading artifacts...
ci-artifacts/scan-results/anchore/: found 17 matching files and directories 
Uploading artifacts as "archive" to coordinator... ok  id=6235295 responseStatus=201 Created token=iyb8JAr3
section_end:1630747255:upload_artifacts_on_success
section_start:1630747255:cleanup_file_variables
Cleaning up file based variables
section_end:1630747256:cleanup_file_variables
Job succeeded