Running with gitlab-runner 13.12.0 (7a6612da)
  on dsop-shared-gitlab-runner-5fcd8977b8-m6qmr JrExJ6yx
  feature flags: FF_USE_LEGACY_KUBERNETES_EXECUTION_STRATEGY:false
section_start:1630880611:resolve_secrets
Resolving secrets
section_end:1630880611:resolve_secrets
section_start:1630880611:prepare_executor
Preparing the "kubernetes" executor
Using Kubernetes namespace: gitlab-runner-ironbank-dsop
Using Kubernetes executor with image registry1.dso.mil/ironbank/anchore/cli/cli:0.9.1 ...
Using attach strategy to execute scripts...
section_end:1630880611:prepare_executor
section_start:1630880611:prepare_script
Preparing environment
Waiting for pod gitlab-runner-ironbank-dsop/runner-jrexj6yx-project-7104-concurrent-06nm2p to be running, status is Pending
Waiting for pod gitlab-runner-ironbank-dsop/runner-jrexj6yx-project-7104-concurrent-06nm2p to be running, status is Pending
	ContainersNotReady: "containers with unready status: [build helper istio-proxy]"
	ContainersNotReady: "containers with unready status: [build helper istio-proxy]"
Running on runner-jrexj6yx-project-7104-concurrent-06nm2p via dsop-shared-gitlab-runner-5fcd8977b8-m6qmr...
section_end:1630880617:prepare_script
section_start:1630880617:get_sources
Getting source from Git repository
$ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available;
Sidecar available
Fetching changes with git depth set to 50...
Initialized empty Git repository in /builds/JrExJ6yx/0/dsop/opensource/yq/yq/.git/
Created fresh repository.
Checking out 15299b70 as master...

Skipping Git submodules setup
section_end:1630880618:get_sources
section_start:1630880618:download_artifacts
Downloading artifacts
Downloading artifacts for build (6249340)...
Downloading artifacts from coordinator... ok        id=6249340 responseStatus=200 OK token=BiB6Qeck
WARNING: ci-artifacts/build/: lchown ci-artifacts/build/: operation not permitted (suppressing repeats) 
Downloading artifacts for load-scripts (6249333)...
Downloading artifacts from coordinator... ok        id=6249333 responseStatus=200 OK token=SF9GZRSq
WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) 
section_end:1630880618:download_artifacts
section_start:1630880618:step_script
Executing "step_script" stage of the job script
$ python3 "${PIPELINE_REPO_DIR}/stages/scanning/anchore/anchore_scan.py"
INFO: Log level set to info
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image add --noautosubscribe --dockerfile ./Dockerfile --force registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-461809
INFO: registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-461809 added to Anchore
INFO: [
    {
        "analysis_status": "analyzing",
        "analyzed_at": null,
        "annotations": {},
        "created_at": "2021-09-05T22:23:39Z",
        "imageDigest": "sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b",
        "image_content": {
            "metadata": {
                "arch": null,
                "distro": null,
                "distro_version": null,
                "dockerfile_mode": "Actual",
                "image_size": null,
                "layer_count": null
            }
        },
        "image_detail": [
            {
                "created_at": "2021-09-05T22:23:39Z",
                "digest": "sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b",
                "dockerfile": "QVJHIEJBU0VfUkVHSVNUUlk9cmVnaXN0cnkxLmRzby5taWwKQVJHIEJBU0VfSU1BR0U9aXJvbmJhbmsvcmVkaGF0L3ViaS91Ymk4LW1pbmltYWwKQVJHIEJBU0VfVEFHPTguNAoKRlJPTSBtaWtlZmFyYWgveXE6NC45LjMgQVMgYmFzZQoKRlJPTSAke0JBU0VfUkVHSVNUUll9LyR7QkFTRV9JTUFHRX06JHtCQVNFX1RBR30KClJVTiBtaWNyb2RuZiB1cGRhdGUgLS1ub2RvY3MgJiYgXAogIG1pY3JvZG5mIGNsZWFuIGFsbCAmJiBcCiAgcm0gLXJmIC92YXIveXVtL2NhY2hlCgpDT1BZIC0tZnJvbT1iYXNlIC91c3IvYmluL3lxIC91c3IvYmluL3lxClVTRVIgMTAwMApIRUFMVEhDSEVDSyBOT05FCkVOVFJZUE9JTlQgWyJ5cSJdCg==",
                "fulldigest": "registry1.dso.mil/ironbank-staging/opensource/yq/yq@sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b",
                "fulltag": "registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-461809",
                "imageDigest": "sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b",
                "imageId": "141cd4a0a3969dd03a4a294a1658b81ecb967540586e20f0e274836a428ef376",
                "last_updated": "2021-09-05T22:23:39Z",
                "registry": "registry1.dso.mil",
                "repo": "ironbank-staging/opensource/yq/yq",
                "tag": "ibci-461809",
                "tag_detected_at": "2021-09-05T22:23:39Z",
                "userId": "ironbank-users"
            }
        ],
        "image_status": "active",
        "image_type": "docker",
        "last_updated": "2021-09-05T22:23:41Z",
        "parentDigest": "sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b",
        "userId": "ironbank-users"
    }
]

INFO: Waiting for Anchore to scan sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b
INFO: anchore-cli --u [MASKED] --url [MASKED] image wait --timeout 3600 sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3599
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3593
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3587
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3581
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3575
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3568
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3563
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3557
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3551
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3546
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3540
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3534
INFO: Status: analyzing
INFO: Waiting 5.0 seconds for next retry. Total timeout remaining: 3529
INFO: Image Digest: sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b
INFO: Parent Digest: sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b
INFO: Analysis Status: analyzed
INFO: Image Type: docker
INFO: Analyzed At: 2021-09-05T22:24:53Z
INFO: Image ID: 141cd4a0a3969dd03a4a294a1658b81ecb967540586e20f0e274836a428ef376
INFO: Dockerfile Mode: Actual
INFO: Distro: rhel
INFO: Distro Version: 8.4
INFO: Size: 167649280
INFO: Architecture: amd64
INFO: Layer Count: 4
INFO: Full Tag: registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-461809
INFO: Tag Detected At: 2021-09-05T22:23:39Z
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b os
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b files
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b npm
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b gem
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b python
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b java
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b binary
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b go
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b malware
INFO: anchore-cli --json --u [MASKED] --url [MASKED] image content sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b nuget
INFO: Getting vulnerability results
INFO: Fetching [MASKED]/enterprise/images/sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b/ancestors
INFO: Fetching [MASKED]/enterprise/images/sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b/vuln/all?base_digest=sha256:82a2c51c0e666de6301387fa4f1678bf5983bda810769838077e1f3494127b4f
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23840
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23840
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20231
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20231
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33560
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33560
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36085
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36085
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36086
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36086
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-23841
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-23841
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36087
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36087
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36084
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36084
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-36222
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-36222
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-37750
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-37750
INFO: [MASKED]/query/vulnerabilities?id=CVE-2019-20838
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2019-20838
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-16135
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-24370
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-24370
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3712
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3712
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3572
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22922
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22925
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3421
INFO: [MASKED]/query/vulnerabilities?id=CVE-2020-14155
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2020-14155
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35939
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-27645
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22898
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35942
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20232
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20232
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22876
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3634
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3445
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35937
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3737
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-20266
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-28153
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-28153
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3580
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3580
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-33574
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22923
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-22924
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3426
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3200
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3200
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-3733
INFO: [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Fetching [MASKED]/query/vulnerabilities?id=CVE-2021-35938
INFO: Getting compliance results
INFO: Fetching [MASKED]/enterprise/images/sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b/ancestors
INFO: Fetching [MASKED]/enterprise/images/sha256:31c8b5945c4d40cdbd7ebab94d287d383690ad5df8fdb6a859f9326a5119145b/check?tag=registry1.dso.mil/ironbank-staging/opensource/yq/yq:ibci-461809&detail=true&base_digest=sha256:82a2c51c0e666de6301387fa4f1678bf5983bda810769838077e1f3494127b4f
INFO: Getting Anchore version
INFO: Fetching [MASKED]/version
section_end:1630880725:step_script
section_start:1630880725:upload_artifacts_on_success
Uploading artifacts for successful job
Uploading artifacts...
ci-artifacts/scan-results/anchore/: found 17 matching files and directories 
Uploading artifacts as "archive" to coordinator... ok  id=6249342 responseStatus=201 Created token=riAV5u8w
section_end:1630880728:upload_artifacts_on_success
section_start:1630880728:cleanup_file_variables
Cleaning up file based variables
section_end:1630880728:cleanup_file_variables
Job succeeded