Running with gitlab-runner 13.8.0 (775dd39d)  on dsop-shared-gitlab-runner-f887cbcbd-srgz6 E82_g8RG section_start:1628703102:resolve_secrets Resolving secrets section_end:1628703102:resolve_secrets section_start:1628703102:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner-ironbank-dsop WARNING: Pulling GitLab Runner helper image from Docker Hub. Helper image is migrating to registry.gitlab.com, for more information see https://docs.gitlab.com/runner/configuration/advanced-configuration.html#migrating-helper-image-to-registrygitlabcom Using Kubernetes executor with image registry1.dso.mil/ironbank/ironbank-pipelines/pipeline-runner:0.3 ... section_end:1628703102:prepare_executor section_start:1628703102:prepare_script Preparing environment Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-448-concurrent-0jxbn5 to be running, status is Pending Waiting for pod gitlab-runner-ironbank-dsop/runner-e82g8rg-project-448-concurrent-0jxbn5 to be running, status is Pending ContainersNotReady: "containers with unready status: [build helper istio-proxy]" ContainersNotReady: "containers with unready status: [build helper istio-proxy]" Running on runner-e82g8rg-project-448-concurrent-0jxbn5 via dsop-shared-gitlab-runner-f887cbcbd-srgz6... section_end:1628703108:prepare_script section_start:1628703108:get_sources Getting source from Git repository $ until [ $(curl --fail --silent --output /dev/stderr --write-out "%{http_code}" localhost:15020/healthz/ready) -eq 200 ]; do echo Waiting for Sidecar; sleep 3 ; done ; echo Sidecar available; Sidecar available Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/parasoft/parasoft/soavirt/.git/ Created fresh repository. Checking out 3c42ff62 as 2021.2... Skipping object checkout, Git LFS is not installed. Skipping Git submodules setup section_end:1628703108:get_sources section_start:1628703108:download_artifacts Downloading artifacts Downloading artifacts for anchore-scan (5573393)... Downloading artifacts from coordinator... ok  id=5573393 responseStatus=200 OK token=yeAcQGre WARNING: ci-artifacts/scan-results/anchore/: lchown ci-artifacts/scan-results/anchore/: operation not permitted (suppressing repeats) Downloading artifacts for hardening-manifest (5573388)... Downloading artifacts from coordinator... ok  id=5573388 responseStatus=200 OK token=YKnrJ8Np WARNING: ci-artifacts/preflight/: lchown ci-artifacts/preflight/: operation not permitted (suppressing repeats) Downloading artifacts for load-scripts (5573385)... Downloading artifacts from coordinator... ok  id=5573385 responseStatus=200 OK token=PKUmEdt9 WARNING: ci-artifacts/[MASKED]/: lchown ci-artifacts/[MASKED]/: operation not permitted (suppressing repeats) Downloading artifacts for openscap-compliance (5573394)... Downloading artifacts from coordinator... ok  id=5573394 responseStatus=200 OK token=7r6uRdvP WARNING: ci-artifacts/scan-results/openscap/: lchown ci-artifacts/scan-results/openscap/: operation not permitted (suppressing repeats) Downloading artifacts for twistlock-scan (5573395)... Downloading artifacts from coordinator... ok  id=5573395 responseStatus=200 OK token=Avx5UZdE WARNING: ci-artifacts/scan-results/twistlock/: lchown ci-artifacts/scan-results/twistlock/: operation not permitted (suppressing repeats) Downloading artifacts for wl-compare-lint (5573389)... Downloading artifacts from coordinator... ok  id=5573389 responseStatus=200 OK token=mgvaxRav WARNING: ci-artifacts/lint/: lchown ci-artifacts/lint/: operation not permitted (suppressing repeats) section_end:1628703109:download_artifacts section_start:1628703109:step_script Executing "step_script" stage of the job script $ pip3 install jsonschema # collapsed multi-line command Requirement already satisfied: jsonschema in /usr/local/lib/python3.9/site-packages (3.2.0) Requirement already satisfied: pyrsistent>=0.14.0 in /usr/local/lib/python3.9/site-packages (from jsonschema) (0.17.3) Requirement already satisfied: setuptools in /usr/local/lib/python3.9/site-packages (from jsonschema) (56.1.0) Requirement already satisfied: attrs>=17.4.0 in /usr/local/lib/python3.9/site-packages (from jsonschema) (21.2.0) Requirement already satisfied: six>=1.11.0 in /usr/local/lib/python3.9/site-packages (from jsonschema) (1.15.0) WARNING: Running pip as root will break packages and permissions. You should install packages reliably by using venv: https://pip.pypa.io/warnings/venv WARNING: You are using pip version 21.1.1; however, version 21.2.3 is available. You should consider upgrading via the '/usr/local/bin/python3.9 -m pip install --upgrade pip' command. INFO: Log level set to info INFO: Number of whitelisted vulnerabilities: 137 INFO: Whitelisted vulnerabilities: {Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='abb121e9621abdd452f65844954cf1c1', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82214-8', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22924', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3200', package='libsolv-0.7.16-2.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82168-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='python3-libs-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='util-linux-2.32.1-27.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22924', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36086', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22923', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33574', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22922', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33574', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-config-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='34de21e516c0ca50a96e5386f163f8bf', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82267-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-16135', package='libssh-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36087', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-24370', package='lua-5.3.4-11.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35942', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='463a9a24225c26f7a5bf3f38908e5cb3', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='320a97c6816565eedf3545833df99dd0', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36085', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-sysinit-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22925', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82474-8', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82395-5', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3572', package='python3-pip-wheel-9.0.3-19.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36084', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-17541', package='libjpeg-turbo-1.5.3-10.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-3.53.1-17.el8_3', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82979-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82220-5', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-softokn-3.53.1-17.el8_3', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-25648', package='nss-3.53.1-17.el8_3', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3580', package='nettle-3.4.1-4.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36222', package='krb5-libs-1.18.2-8.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82959-8', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22924', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libmount-2.32.1-27.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33560', package='libgcrypt-1.8.5-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-37600', package='util-linux-2.32.1-27.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36086', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='3456a263793066e9b5063ada6e47917d', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35942', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82473-0', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22922', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-80935-0', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='698044205a9c4a6d48b7937e66a6bf4f', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3580', package='nettle-3.4.1-4.el8_3', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82472-2', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-hawkey-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-10.el8_4.1', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-17541', package='libjpeg-turbo-1.5.3-10.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22922', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36087', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_comp', cve_id='bcd159901fe47efddae5c095b4b0d7fd', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libuuid-2.32.1-27.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36084', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='platform-python-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libfdisk-2.32.1-27.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-24370', package='lua-libs-5.3.4-11.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36085', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22923', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-83401-0', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-softokn-freebl-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_comp', cve_id='c4ad80832b361f81df2a31e5b6b09864', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='e7573262736ef52353cde3bae2617782', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82949-9', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23841', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82360-9', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-10.el8_4.1', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3200', package='libsolv-0.7.16-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23840', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-33560', package='libgcrypt-1.8.5-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22898', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33574', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82494-6', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22898', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='addbb93c22e9b0988b8b40392a4538cb', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82880-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22898', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libsmartcols-2.32.1-27.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-80938-4', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-10001', package='cups-libs-2.2.6-38.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-35942', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35942', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='639f6f1177735759703e928c14714a59', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22923', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-util-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_comp', cve_id='3e5fad1c039f3ecfd1dcdc94d2f1f9a0', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='c2e44319ae5b3b040044d8ae116d1c2f', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82368-2', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-33574', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libblkid-2.32.1-27.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82985-3', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22925', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='libcurl-7.61.1-18.el8', package_path=None)} INFO: Vulnerabilities found in scanning stage: 190 INFO: {Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-remote-driver.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='abb121e9621abdd452f65844954cf1c1', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2015-5262', package='commons-httpclient-3.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar'), Finding(scan_source='oscap_comp', cve_id='CCE-82214-8', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22924', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3200', package='libsolv-0.7.16-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-0822', package='axis2-1.7.9', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-kernel-1.7.9.jar'), Finding(scan_source='oscap_comp', cve_id='CCE-82168-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='python3-libs-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='util-linux-2.32.1-27.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-api.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-ie-driver.jar'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36090', package='org.apache.commons_commons-compress-1.19', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22924', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36086', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22923', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2017-15806', package='mail-1.6.2', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/javax.mail-1.6.2.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-java.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33574', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22922', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33574', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-8908', package='com.google.guava_guava-22.0', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2012-6127', package='commons-httpclient-3.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-config-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='34de21e516c0ca50a96e5386f163f8bf', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-7hfm-57qf-j43q', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='anchore_cve', cve_id='GHSA-crv7-7245-f45f', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='oscap_comp', cve_id='CCE-82267-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2011-5034', package='geronimo-1.2', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/org.apache.servicemix.specs.stax-api-1.2-2.5.0.jar:geronimo-stax-api_1.2_spec'), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-support.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='VULNDB-87160', package='commons-httpclient-3.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3421', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-16135', package='libssh-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-safari-driver.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36087', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35942', package='glibc-common-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-24370', package='lua-5.3.4-11.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='463a9a24225c26f7a5bf3f38908e5cb3', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='320a97c6816565eedf3545833df99dd0', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36085', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22925', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-sysinit-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-0822', package='axis2-1.7.9', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-jaxws-1.7.9.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2020-0822', package='axis2-1.7.9', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-transport-http-1.7.9.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82474-8', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82395-5', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3572', package='python3-pip-wheel-9.0.3-19.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-0822', package='axis2-1.7.9', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-transport-local-1.7.9.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36084', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-17541', package='libjpeg-turbo-1.5.3-10.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-3.53.1-17.el8_3', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82979-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-0822', package='axis2-1.7.9', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-transport-tcp-1.7.9.jar'), Finding(scan_source='oscap_comp', cve_id='CCE-82220-5', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-25648', package='nss-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-softokn-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='VULNDB-163401', package='javassist-3.18.1-GA', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.javassist/javassist.jar'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3580', package='nettle-3.4.1-4.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36222', package='krb5-libs-1.18.2-8.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82959-8', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22924', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-xqfj-vm6h-2x34', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='VULNDB-106409', package='commons_digester-2.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-digester-2.1.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libmount-2.32.1-27.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33560', package='libgcrypt-1.8.5-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-37600', package='util-linux-2.32.1-27.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36086', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='3456a263793066e9b5063ada6e47917d', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35517', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-14155', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35942', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-0822', package='axis2-1.7.9', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-adb-1.7.9.jar'), Finding(scan_source='anchore_cve', cve_id='VULNDB-58760', package='commons_vfs-1.0', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.xtest.common-10.5.2-20210809.210951-65.jar:lib/commons-vfs.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-5mg8-w23w-74h3', package='guava-10.0.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava-10.0.1.jar'), Finding(scan_source='oscap_comp', cve_id='CCE-82473-0', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-8908', package='com.google.guava_guava-28.0-android', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22922', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-80935-0', package=None, package_path=None), Finding(scan_source='anchore_comp', cve_id='698044205a9c4a6d48b7937e66a6bf4f', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3580', package='nettle-3.4.1-4.el8_3', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82472-2', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-hawkey-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-10.el8_4.1', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22922', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-17541', package='libjpeg-turbo-1.5.3-10.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-mvr2-9pj6-7w5j', package='guava-22.0', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava.jar'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36087', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libuuid-2.32.1-27.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_comp', cve_id='bcd159901fe47efddae5c095b4b0d7fd', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-36084', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35516', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3421', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3426', package='platform-python-3.6.8-37.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libfdisk-2.32.1-27.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='VULNDB-243848', package='commons-httpclient-3.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2020-24370', package='lua-libs-5.3.4-11.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36085', package='libsepol-2.9-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22923', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35515', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20231', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-chrome-driver.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='python3-libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='rpm-build-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-83401-0', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2020-8908', package='com.google.guava_guava-10.0.1', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-35517', package='org.apache.commons_commons-compress-1.19', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-softokn-freebl-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_comp', cve_id='c4ad80832b361f81df2a31e5b6b09864', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='rpm-libs-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='e7573262736ef52353cde3bae2617782', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82949-9', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-20232', package='gnutls-3.6.14-8.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23841', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-5mg8-w23w-74h3', package='guava-28.0-android', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:guava'), Finding(scan_source='oscap_comp', cve_id='CCE-82360-9', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-28153', package='glib2-2.56.4-10.el8_4.1', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-edge-driver.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3200', package='libsolv-0.7.16-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-23840', package='openssl-libs-1.1.1g-15.el8_3', package_path=None), Finding(scan_source='anchore_cve', cve_id='VULNDB-264109', package='xstream-1.4.17', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.thoughtworks.xstream/xstream.jar'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-33560', package='libgcrypt-1.8.5-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2018-10237', package='com.google.guava_guava-22.0', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22898', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2019-20445', package='io.netty_netty-3.5.7.Final', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-33574', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2018-10237', package='guava-22.0', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava.jar'), Finding(scan_source='oscap_comp', cve_id='CCE-82494-6', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-22898', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-21295', package='io.netty_netty-3.5.7.Final', package_path=None), Finding(scan_source='anchore_comp', cve_id='addbb93c22e9b0988b8b40392a4538cb', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82880-6', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22898', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35938', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35937', package='python3-rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libsmartcols-2.32.1-27.el8', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-80938-4', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-10001', package='cups-libs-2.2.6-38.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-35942', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='VULNDB-145331', package='xom-1.2.10', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/xom-1.2.10.jar'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-36090', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='anchore_cve', cve_id='GHSA-5mg8-w23w-74h3', package='guava-22.0', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava.jar'), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-35516', package='org.apache.commons_commons-compress-1.19', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-16135', package='libssh-0.9.4-2.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35942', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-2196', package='selenium-2.53.1', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-firefox-driver.jar'), Finding(scan_source='anchore_comp', cve_id='639f6f1177735759703e928c14714a59', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22923', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2020-25648', package='nss-util-3.53.1-17.el8_3', package_path=None), Finding(scan_source='anchore_comp', cve_id='3e5fad1c039f3ecfd1dcdc94d2f1f9a0', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-20266', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-21409', package='io.netty_netty-3.5.7.Final', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2019-20444', package='io.netty_netty-3.5.7.Final', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-27645', package='glibc-minimal-langpack-2.28-151.el8', package_path=None), Finding(scan_source='anchore_comp', cve_id='c2e44319ae5b3b040044d8ae116d1c2f', package=None, package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82368-2', package=None, package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-33574', package='glibc-2.28-151.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-37600', package='libblkid-2.32.1-27.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2019-16869', package='io.netty_netty-3.5.7.Final', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2019-20838', package='pcre-8.42-4.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-35515', package='org.apache.commons_commons-compress-1.19', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-35939', package='rpm-4.14.3-14.el8_4', package_path=None), Finding(scan_source='oscap_comp', cve_id='CCE-82985-3', package=None, package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='GHSA-mc84-pj99-q6hh', package='commons-compress-1.19', package_path='/usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress'), Finding(scan_source='anchore_cve', cve_id='CVE-2021-3445', package='libdnf-0.55.0-7.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22925', package='curl-7.61.1-18.el8', package_path=None), Finding(scan_source='anchore_cve', cve_id='CVE-2021-22876', package='libcurl-7.61.1-18.el8', package_path=None), Finding(scan_source='twistlock_cve', cve_id='CVE-2021-21290', package='io.netty_netty-3.5.7.Final', package_path=None)} ERROR: NON-WHITELISTED VULNERABILITIES FOUND ERROR: Number of non-whitelisted vulnerabilities: 53 ERROR: The following vulnerabilities are not whitelisted: ERROR: scan_source cve_id package package_path ERROR: anchore_cve CVE-2020-0822 axis2-1.7.9 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-transport-local-1.7.9.jar ERROR: anchore_cve CVE-2020-0822 axis2-1.7.9 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-transport-tcp-1.7.9.jar ERROR: anchore_cve CVE-2020-0822 axis2-1.7.9 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-kernel-1.7.9.jar ERROR: anchore_cve CVE-2020-0822 axis2-1.7.9 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-adb-1.7.9.jar ERROR: anchore_cve CVE-2020-0822 axis2-1.7.9 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-jaxws-1.7.9.jar ERROR: anchore_cve CVE-2020-0822 axis2-1.7.9 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.libs.soap-1.0-202108102000.jar:axis2-transport-http-1.7.9.jar ERROR: anchore_cve CVE-2021-35515 commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve CVE-2021-35516 commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve CVE-2021-35517 commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve CVE-2021-36090 commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve GHSA-7hfm-57qf-j43q commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve GHSA-crv7-7245-f45f commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve GHSA-mc84-pj99-q6hh commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve GHSA-xqfj-vm6h-2x34 commons-compress-1.19 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:commons-compress ERROR: anchore_cve CVE-2012-6127 commons-httpclient-3.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar ERROR: anchore_cve CVE-2015-5262 commons-httpclient-3.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar ERROR: anchore_cve VULNDB-243848 commons-httpclient-3.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar ERROR: anchore_cve VULNDB-87160 commons-httpclient-3.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-httpclient-3.1.jar ERROR: anchore_cve VULNDB-106409 commons_digester-2.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/commons-digester-2.1.jar ERROR: anchore_cve VULNDB-58760 commons_vfs-1.0 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.xtest.common-10.5.2-20210809.210951-65.jar:lib/commons-vfs.jar ERROR: anchore_cve CVE-2011-5034 geronimo-1.2 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/org.apache.servicemix.specs.stax-api-1.2-2.5.0.jar:geronimo-stax-api_1.2_spec ERROR: anchore_cve GHSA-5mg8-w23w-74h3 guava-10.0.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava-10.0.1.jar ERROR: anchore_cve CVE-2018-10237 guava-22.0 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava.jar ERROR: anchore_cve GHSA-5mg8-w23w-74h3 guava-22.0 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava.jar ERROR: anchore_cve GHSA-mvr2-9pj6-7w5j guava-22.0 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.google.guava/guava.jar ERROR: anchore_cve GHSA-5mg8-w23w-74h3 guava-28.0-android /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.bundles.jython-2.7.2-202108102000.jar:guava ERROR: anchore_cve VULNDB-163401 javassist-3.18.1-GA /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.javassist/javassist.jar ERROR: anchore_cve CVE-2017-15806 mail-1.6.2 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/javax.mail-1.6.2.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-remote-driver.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-ie-driver.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-api.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-firefox-driver.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-java.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-chrome-driver.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-support.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-safari-driver.jar ERROR: anchore_cve CVE-2020-2196 selenium-2.53.1 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/org.seleniumhq.selenium/selenium-edge-driver.jar ERROR: anchore_cve VULNDB-145331 xom-1.2.10 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/zap/lib/xom-1.2.10.jar ERROR: anchore_cve VULNDB-264109 xstream-1.4.17 /usr/local/parasoft/soavirt/webapps/ROOT/WEB-INF/bundles/com.parasoft.soavirt.libs_10.5.2-202108102000/root/lib-java/com.thoughtworks.xstream/xstream.jar ERROR: twistlock_cve CVE-2020-8908 com.google.guava_guava-10.0.1 None ERROR: twistlock_cve CVE-2018-10237 com.google.guava_guava-22.0 None ERROR: twistlock_cve CVE-2020-8908 com.google.guava_guava-22.0 None ERROR: twistlock_cve CVE-2020-8908 com.google.guava_guava-28.0-android None ERROR: twistlock_cve CVE-2019-16869 io.netty_netty-3.5.7.Final None ERROR: twistlock_cve CVE-2019-20444 io.netty_netty-3.5.7.Final None ERROR: twistlock_cve CVE-2019-20445 io.netty_netty-3.5.7.Final None ERROR: twistlock_cve CVE-2021-21290 io.netty_netty-3.5.7.Final None ERROR: twistlock_cve CVE-2021-21295 io.netty_netty-3.5.7.Final None ERROR: twistlock_cve CVE-2021-21409 io.netty_netty-3.5.7.Final None ERROR: twistlock_cve CVE-2021-35515 org.apache.commons_commons-compress-1.19 None ERROR: twistlock_cve CVE-2021-35516 org.apache.commons_commons-compress-1.19 None ERROR: twistlock_cve CVE-2021-35517 org.apache.commons_commons-compress-1.19 None ERROR: twistlock_cve CVE-2021-36090 org.apache.commons_commons-compress-1.19 None section_end:1628703114:step_script section_start:1628703114:cleanup_file_variables Cleaning up file based variables section_end:1628703114:cleanup_file_variables ERROR: Job failed: command terminated with exit code 1