UNCLASSIFIED

Skip to content

GitLab

You need to sign in or sign up before continuing.

Update dependency SonarSource/docker-sonarqube to v8.9.1

14 jobs for renovate/sonarsource-docker-sonarqube-8.x in 10 minutes and 40 seconds (queued for 11 seconds)
07c9cf5e
1 related merge request: !45 Update dependency SonarSource/docker-sonarqube to v8.9.1 - autoclosed
Status Job ID Name Coverage
  .Pre
passed #4127004
load-scripts

00:00:09

 
  Preflight
passed #4127006
folder-structure

00:00:08

passed #4127007
hardening-manifest

00:00:11

passed #4127005
trufflehog

00:00:09

 
  Lint
passed #4127008
wl-compare-lint

00:00:10

 
  Import Artifacts
passed #4127009
import-artifacts

00:01:02

 
  Scan Artifacts
passed #4127010
clamav-scan

00:02:07

 
  Build
passed #4127011
build

00:02:41

 
  Scanning
passed #4127012
anchore-scan

00:03:19

passed #4127013
ironbank-dsop-privileged
openscap-compliance

00:01:15

passed #4127014
twistlock-scan

00:01:20

 
  Csv Output
passed #4127015
csv-output

00:00:29

 
  Check Cves
failed #4127016
allowed to fail
check-cves

00:00:11

 
  Documentation
passed #4127017
create-tar

00:00:58

 
Name Stage Failure
failed
check-cves Check Cves 
ERROR: scan_source                   cve_id                        package                       package_path                  
ERROR: anchore_cve                   VULNDB-256815                 commons-compress-1.20         /opt/sonarqube/lib/extensions/sonar-javascript-plugin-7.4.4.15624.jar:commons-compress    
ERROR: anchore_cve                   VULNDB-257084                 commons-compress-1.20         /opt/sonarqube/lib/extensions/sonar-javascript-plugin-7.4.4.15624.jar:commons-compress    
ERROR: anchore_cve                   GHSA-5mg8-w23w-74h3           guava-28.2-jre                /opt/sonarqube/lib/scanner/sonar-scanner-engine-shaded-8.9.1.44547-all.jar:guava    
ERROR: anchore_cve                   GHSA-5mg8-w23w-74h3           guava-28.2-jre                /opt/sonarqube/lib/sonar-application-8.9.1.44547.jar:guava    
ERROR: anchore_cve                   CVE-2020-13697                nanohttpd-2.3.1               /opt/sonarqube/lib/sonar-application-8.9.1.44547.jar:nanohttpd    
ERROR: twistlock_cve                 CVE-2020-17541                libjpeg-turbo-1.5.3-10.el8    None                          
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1

UNCLASSIFIED