UNCLASSIFIED

Skip to content

GitLab

Merge branch 'fix/CVE-2021-22918' into 'development' 

addressing twistlock finding

See merge request !21
16 jobs for development in 25 minutes (queued for 25 minutes and 52 seconds)
db3479d4
1 related merge request: !23 Development
Status Job ID Name Coverage
  .Pre
passed #5375480
load-scripts

00:00:17

 
  Preflight
passed #5375482
folder-structure

00:00:19

passed #5375483
hardening-manifest

00:00:22

passed #5375481
trufflehog

00:00:13

 
  Lint
passed #5375484
wl-compare-lint

00:00:17

 
  Import Artifacts
passed #5375485
import-artifacts

00:00:24

 
  Scan Artifacts
passed #5375486
clamav-scan

00:01:43

 
  Build
passed #5375487
build

00:02:47

 
  Scanning
passed #5375488
anchore-scan

00:08:00

passed #5375489
ironbank-dsop-privileged
openscap-compliance

00:01:26

passed #5375490
twistlock-scan

00:15:22

 
  Csv Output
passed #5375491
csv-output

00:00:51

 
  Check Cves
failed #5375492
allowed to fail
check-cves

00:00:13

 
  Documentation
passed #5375493
documentation

00:01:01

 
  S3 Publish
passed #5375494
upload-to-s3

00:01:13

 
  Vat
passed #5375495
vat

00:00:16

 
Name Stage Failure
failed
check-cves Check Cves 
ERROR: The following vulnerabilities are not whitelisted:
ERROR: scan_source                   cve_id                        package                       package_path                  
ERROR: anchore_cve                   CVE-2021-32761                redis-3.1.2                   /reporting/node_modules/redis/package.json    
ERROR: anchore_cve                   GHSA-3jfq-g458-7qm9           tar-4.4.13                    /usr/local/lib/node_modules/npm/node_modules/tar/package.json    
ERROR: anchore_cve                   GHSA-r628-mhmh-qjhw           tar-4.4.13                    /usr/local/lib/node_modules/npm/node_modules/tar/package.json    
ERROR: twistlock_cve                 CVE-2021-32803                tar-4.4.13                    None                          
ERROR: twistlock_cve                 CVE-2021-32804                tar-4.4.13                    None                          
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1

UNCLASSIFIED