UNCLASSIFIED

Skip to content

GitLab

Merge branch 'renovate/docker-sonarqube-8.7-community' into 'development' 

Update sonarqube:8.7-community Docker digest to 0ecf7b8

See merge request !28
18 jobs for development in 16 minutes and 30 seconds (queued for 16 minutes and 19 seconds)
390cd35f
1 related merge request: !31 Development
Status Job ID Name Coverage
  .Pre
passed #2332333
ironbank
load scripts

00:00:06

 
  Preflight
passed #2332334
ironbank
folder structure

00:00:05

passed #2332335
ironbank
hardening_manifest

00:00:09

 
  Lint
passed #2332336
ironbank
wl compare lint

00:00:09

 
  Import Artifacts
passed #2332337
ironbank
import artifacts

00:01:05

 
  Scan Artifacts
passed #2332338
ironbank
clamav scan

00:02:16

 
  Build
passed #2332339
ironbank-isolated
build

00:03:31

 
  Scanning
passed #2332343
ironbank
anchore scan

00:02:58

passed #2332340
ironbank
openscap compliance

00:01:15

passed #2332341
ironbank
openscap cve

00:04:06

passed #2332342
ironbank
twistlock scan

00:00:49

 
  Csv Output
passed #2332344
ironbank
csv output

00:00:58

 
  Check Cves
failed #2332345
ironbank allowed to fail
check cves

00:00:14

 
  Documentation
passed #2332346
ironbank
sign image

00:00:56

passed #2332347
ironbank
sign manifest

00:00:29

passed #2332348
ironbank
write json documentation

00:00:26

 
  Publish
passed #2332349
ironbank
upload to s3

00:02:27

 
  Vat
passed #2332350
ironbank
vat

00:00:26

 
Name Stage Failure
failed
check cves Check Cves 
ERROR: anchore_cve                   CVE-2018-19360                jackson-core-2.9.7            /opt/sonarqube/lib/common/hazelcast-3.12.9.jar:jackson-core    
ERROR: anchore_cve                   CVE-2018-19361                jackson-core-2.9.7            /opt/sonarqube/lib/common/hazelcast-3.12.9.jar:jackson-core    
ERROR: anchore_cve                   CVE-2018-19362                jackson-core-2.9.7            /opt/sonarqube/lib/common/hazelcast-3.12.9.jar:jackson-core    
ERROR: anchore_cve                   CVE-2020-13697                nanohttpd-2.3.1               /opt/sonarqube/lib/common/nanohttpd-2.3.1.jar    
ERROR: twistlock_cve                 CVE-2021-25122                apache tomcat_tomcat-embed-core-8.5.60                                  
ERROR: twistlock_cve                 CVE-2021-25329                apache tomcat_tomcat-embed-core-8.5.60                                  
ERROR: twistlock_cve                 CVE-2021-21290                io.netty_netty-codec-4.1.49.Final                                  
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1

UNCLASSIFIED