Pipeline · Ironbank Containers / Red Hat / openjdk / openjdk11

add missing fonts

14 jobs for add-fonts in 8 minutes and 52 seconds (queued for 19 seconds)

Status	Job ID	Name
.Pre
passed	#2574350 ironbank	load scripts	00:00:07 Apr 02, 2021

Preflight
passed	#2574351 ironbank	folder structure	00:00:05 Apr 02, 2021
passed	#2574352 ironbank	hardening_manifest	00:00:09 Apr 02, 2021

Lint
passed	#2574353 ironbank	wl compare lint	00:00:09 Apr 02, 2021

Finding Compare
failed	#2574354 ironbank allowed to fail	vat compare	00:00:07 Apr 02, 2021

Import Artifacts
passed	#2574355 ironbank	import artifacts	00:00:06 Apr 02, 2021

Scan Artifacts
passed	#2574356 ironbank	clamav scan	00:00:06 Apr 02, 2021

Build
passed	#2574357 ironbank-isolated	build	00:02:27 Apr 02, 2021

Scanning
passed	#2574361 ironbank	anchore scan	00:02:28 Apr 02, 2021
passed	#2574358 ironbank	openscap compliance	00:00:59 Apr 02, 2021
passed	#2574359 ironbank	openscap cve	00:04:28 Apr 02, 2021
passed	#2574360 ironbank	twistlock scan	00:00:35 Apr 02, 2021

Csv Output
passed	#2574362 ironbank	csv output	00:00:51 Apr 02, 2021

Check Cves
passed	#2574363 ironbank	check cves	00:00:16 Apr 02, 2021

Name Stage Failure

	Name	Stage	Failure
failed	vat compare	Finding Compare
	('41cb7cdf04850e33a11f80c42bf660b3', 'anchore_comp', "Dockerfile directive 'HEALTHCHECK' not found, matching condition 'not_exists' check\n Gate: dockerfile\n Trigger: instruction\n Policy ID: DoDDockerfileChecks", None, None) ('cbff271f45d32e78dcc1979dbca9c14d', 'anchore_comp', 'User root found as effective user, which is explicity not allowed\n Gate: dockerfile\n Trigger: effective_user\n Policy ID: DoDEffectiveUserChecks', None, None) ('CVE-2021-22876', 'twistlock_cve', 'curl 7.1.1 to and including 7.75.0 is vulnerable to an \\"Exposure of Private Personal Information to an Unauthorized Actor\\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.', 'curl-7.61.1-14.el8_3.1', None) Uploading artifacts for failed job Uploading artifacts... ci-artifacts/compare/: found 2 matching files and directories Uploading artifacts as "archive" to coordinator... ok id=2574354 responseStatus=201 Created token=LKUw_Ehd Cleaning up file based variables ERROR: Job failed: command terminated with exit code 4

failed

vat compare

Finding Compare

('41cb7cdf04850e33a11f80c42bf660b3', 'anchore_comp', "Dockerfile directive 'HEALTHCHECK' not found, matching condition 'not_exists' check\n Gate: dockerfile\n Trigger: instruction\n Policy ID: DoDDockerfileChecks", None, None)
('cbff271f45d32e78dcc1979dbca9c14d', 'anchore_comp', 'User root found as effective user, which is explicity not allowed\n Gate: dockerfile\n Trigger: effective_user\n Policy ID: DoDEffectiveUserChecks', None, None)
('CVE-2021-22876', 'twistlock_cve', 'curl 7.1.1 to and including 7.75.0 is vulnerable to an \\"Exposure of Private Personal Information to an Unauthorized Actor\\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.', 'curl-7.61.1-14.el8_3.1', None)
Uploading artifacts for failed job
Uploading artifacts...
ci-artifacts/compare/: found 2 matching files and directories 
Uploading artifacts as "archive" to coordinator... ok  id=2574354 responseStatus=201 Created token=LKUw_Ehd
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 4