Running with gitlab-runner 13.2.0 (353dd94e)  on global-shared-gitlab-runner-74d5bd4795-j8zps oFz8WHMZ section_start:1603396451:prepare_executor Preparing the "kubernetes" executor Using Kubernetes namespace: gitlab-runner Using Kubernetes executor with image ${GITLAB_INTERNAL_REGISTRY}/ironbank-tools/ironbank-pipeline/jenkins-oscap-agent:1.1 ... section_end:1603396451:prepare_executor section_start:1603396451:prepare_script Preparing environment Waiting for pod gitlab-runner/runner-ofz8whmz-project-1349-concurrent-0zsfws to be running, status is Pending Waiting for pod gitlab-runner/runner-ofz8whmz-project-1349-concurrent-0zsfws to be running, status is Pending Running on runner-ofz8whmz-project-1349-concurrent-0zsfws via global-shared-gitlab-runner-74d5bd4795-j8zps... section_end:1603396457:prepare_script section_start:1603396457:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Initialized empty Git repository in /builds/dsop/pivotal/rabbitmq/rabbitmq38/.git/ Created fresh repository. Checking out 9497c63f as development... Skipping Git submodules setup section_end:1603396457:get_sources section_start:1603396457:download_artifacts Downloading artifacts Downloading artifacts for anchore scan (498940)... Downloading artifacts from coordinator... ok  id=498940 responseStatus=200 OK token=r5aMMkug Downloading artifacts for load scripts (498930)... Downloading artifacts from coordinator... ok  id=498930 responseStatus=200 OK token=tCtz-wfz Downloading artifacts for openscap compliance (498937)... Downloading artifacts from coordinator... ok  id=498937 responseStatus=200 OK token=yxPasoZH Downloading artifacts for openscap cve (498938)... Downloading artifacts from coordinator... ok  id=498938 responseStatus=200 OK token=BdSVUMxo Downloading artifacts for twistlock scan (498939)... Downloading artifacts from coordinator... ok  id=498939 responseStatus=200 OK token=pv9sBk-2 section_end:1603396458:download_artifacts section_start:1603396458:step_script Executing "step_script" stage of the job script $ "${PIPELINE_REPO_DIR}/stages/check-cves/check-cves.sh" INFO: Log level set to info Fetching Whitelisted CVEs from parent: redhat/ubi/ubi8:8.2 Whitelist Set: {'CVE-2019-20388', 'CCE-82267-6', '698044205a9c4a6d48b7937e66a6bf4f', 'CVE-2019-19906', 'CVE-2020-13630', 'CCE-82368-2', 'CVE-2020-7595', 'CVE-2020-24370', 'CVE-2020-15945', 'CVE-2019-19234', 'CVE-2020-26116', 'CVE-2020-1730', 'addbb93c22e9b0988b8b40392a4538cb', 'CCE-82968-9', 'CVE-2019-20916', '953dfbea1b1e9d5829fbed2e390bd3af', 'CVE-2019-20218', 'CVE-2019-19221', 'CVE-2020-6405', 'CCE-82979-6', 'CVE-2020-13434', 'CCE-82949-9', 'CVE-2020-15358', 'CVE-2020-24659', 'CVE-2019-2708', 'abb121e9621abdd452f65844954cf1c1', '34de21e516c0ca50a96e5386f163f8bf', 'CCE-82360-9', '3456a263793066e9b5063ada6e47917d', 'CVE-2019-1551', '3e5fad1c039f3ecfd1dcdc94d2f1f9a0', 'CCE-82985-3', 'CVE-2020-8927', 'CVE-2019-12900', '639f6f1177735759703e928c14714a59', 'CCE-80938-4', 'CVE-2019-20387', 'CVE-2019-19956', 'CVE-2020-13632', 'c4ad80832b361f81df2a31e5b6b09864', '320a97c6816565eedf3545833df99dd0', 'CCE-82472-2', 'CCE-82494-6', 'CVE-2019-13012', 'CVE-2020-16135', 'c2e44319ae5b3b040044d8ae116d1c2f', 'CVE-2020-13776', 'CVE-2019-15165', 'CCE-82474-8', 'CVE-2020-8492', 'CCE-82168-6', 'CVE-2019-20907', 'CCE-82959-8', 'CCE-82473-0', 'e7573262736ef52353cde3bae2617782', 'CVE-2019-18276', 'bcd159901fe47efddae5c095b4b0d7fd', '41cb7cdf04850e33a11f80c42bf660b3', '463a9a24225c26f7a5bf3f38908e5cb3', 'CVE-2020-14382', 'CVE-2020-24977', 'CVE-2019-14889', 'CVE-2020-9327', 'CVE-2020-14422', 'CCE-80935-0', 'CVE-2020-8231', 'CVE-2020-21674', 'CVE-2020-1752', 'CCE-82220-5', 'CVE-2020-8177', 'CVE-2019-20807', 'CVE-2019-20386', 'CVE-2020-1751', 'CVE-2020-10029', 'CVE-2020-13631', '68e630cef4a8533b139875aa5fc54da5', 'CVE-2019-15903'} Whitelist Set Length: 77 Vuln Set: {'CVE-2019-20388', 'CCE-82267-6', 'CVE-2019-19906', 'CVE-2020-13630', 'CCE-82368-2', 'CVE-2020-7595', 'CVE-2020-24370', 'CVE-2020-15945', 'CVE-2020-26116', 'CVE-2019-19234', 'CCE-82968-9', 'CVE-2020-1730', 'CVE-2019-20916', 'CVE-2019-20218', 'CCE-82979-6', 'CVE-2019-19221', 'CVE-2020-6405', 'CVE-2020-13434', 'CCE-82949-9', 'CVE-2020-24659', 'CVE-2020-15358', 'CVE-2019-2708', 'CCE-82360-9', 'CCE-82985-3', 'CVE-2019-1551', 'CVE-2020-8927', 'CVE-2020-13631', 'CVE-2019-12900', 'CCE-80938-4', 'CVE-2019-20387', 'CVE-2019-19956', 'CVE-2020-13632', 'CCE-82472-2', 'CVE-2019-13012', 'CVE-2020-16135', 'CVE-2020-13776', 'CVE-2019-15165', 'CCE-82474-8', 'CVE-2020-8492', 'CCE-82168-6', 'CVE-2019-20907', 'CCE-82959-8', 'CCE-82473-0', 'CVE-2019-18276', 'CVE-2020-14382', 'CVE-2020-24977', 'CCE-80935-0', 'CVE-2019-14889', 'CVE-2020-14422', 'CVE-2020-9327', 'CVE-2020-8231', 'CVE-2020-1752', 'CCE-82220-5', 'CVE-2020-8177', 'CVE-2019-20807', 'CVE-2020-27619', 'CVE-2019-20386', 'CVE-2020-1751', 'CVE-2020-10029', 'CCE-82494-6', 'CVE-2019-15903'} Vuln Set Length: 61 NON-WHITELISTED VULNERABILITIES FOUND Vuln Set Delta: {'CVE-2020-27619'} Vuln Set Delta Length: 1 Scans are not passing 100%. Vuln Set Delta Length: 1 section_end:1603396466:step_script Job succeeded