UNCLASSIFIED

Skip to content

GitLab

Merge branch 'renovate/docker-sonarqube-8.x' into 'development' 

Update sonarqube Docker tag to v8.9

See merge request !20
16 jobs for development in 14 minutes and 59 seconds (queued for 16 minutes and 16 seconds)
f6d8ce74
1 related merge request: !21 Development
Status Job ID Name Coverage
  .Pre
passed #3890099
load-scripts

00:00:06

 
  Preflight
passed #3890101
folder-structure

00:00:05

passed #3890102
hardening-manifest

00:00:08

passed #3890100
trufflehog

00:00:06

 
  Lint
passed #3890103
wl-compare-lint

00:00:07

 
  Import Artifacts
passed #3890104
import-artifacts

00:01:08

 
  Scan Artifacts
passed #3890105
clamav-scan

00:02:26

 
  Build
passed #3890106
build

00:03:08

 
  Scanning
passed #3890107
anchore-scan

00:03:37

passed #3890108
ironbank-dsop-privileged
openscap-compliance

00:01:17

passed #3890109
twistlock-scan

00:00:47

 
  Csv Output
passed #3890110
csv-output

00:00:30

 
  Check Cves
failed #3890111
allowed to fail
check-cves

00:00:09

 
  Documentation
passed #3890112
documentation

00:01:18

 
  S3 Publish
passed #3890113
upload-to-s3

00:01:56

 
  Vat
passed #3890114
vat

00:00:10

 
Name Stage Failure
failed
check-cves Check Cves 
ERROR: anchore_cve                   VULNDB-256815                 commons-compress-1.20         /opt/sonarqube/lib/extensions/sonar-javascript-plugin-7.4.2.15501.jar:commons-compress    
ERROR: anchore_cve                   VULNDB-257084                 commons-compress-1.20         /opt/sonarqube/lib/extensions/sonar-cfamily-plugin-6.20.0.31240.jar:commons-compress    
ERROR: anchore_cve                   VULNDB-257084                 commons-compress-1.20         /opt/sonarqube/lib/extensions/sonar-javascript-plugin-7.4.2.15501.jar:commons-compress    
ERROR: anchore_cve                   CVE-2018-10237                guava-19.0                    /opt/sonarqube/elasticsearch/modules/x-pack-security/guava-19.0.jar    
ERROR: anchore_cve                   GHSA-7r82-7xv7-xcpj           httpclient-4.5.10             /opt/sonarqube/elasticsearch/modules/x-pack-core/httpclient-4.5.10.jar    
ERROR: twistlock_cve                 CVE-2020-28491                com.fasterxml.jackson.dataformat_jackson-dataformat-cbor-2.10.4    None                          
ERROR: twistlock_cve                 CVE-2020-28491                com.fasterxml.jackson.dataformat_jackson-dataformat-cbor-2.10.5    None                          
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1

UNCLASSIFIED