UNCLASSIFIED

Merge branch 'renovate/sonarqube-8.9-developer' into 'development'

Update sonarqube:8.9-developer Docker digest to 4de9a8a

See merge request !43
16 jobs for development in 54 minutes and 6 seconds (queued for 53 minutes and 28 seconds)
Status Job ID Name Coverage
  .Pre
passed #5224254
load-scripts

00:00:10

 
  Preflight
passed #5224256
folder-structure

00:00:09

passed #5224257
hardening-manifest

00:00:14

passed #5224255
trufflehog

00:00:10

 
  Lint
passed #5224258
wl-compare-lint

00:00:15

 
  Import Artifacts
passed #5224259
import-artifacts

00:01:11

 
  Scan Artifacts
passed #5224260
clamav-scan

00:02:35

 
  Build
passed #5224261
build

00:04:31

 
  Scanning
passed #5224262
anchore-scan

00:07:08

passed #5224263
ironbank-dsop-privileged
openscap-compliance

00:02:22

passed #5224264
twistlock-scan

00:39:07

 
  Csv Output
passed #5224265
csv-output

00:00:38

 
  Check Cves
failed #5224266
allowed to fail
check-cves

00:00:24

 
  Documentation
passed #5224267
documentation

00:01:42

 
  S3 Publish
passed #5224268
upload-to-s3

00:02:45

 
  Vat
passed #5224269
vat

00:00:25

 
Name Stage Failure
failed
check-cves Check Cves
ERROR: anchore_cve                   CVE-2021-0555                 protobuf-3.11.4               /opt/sonarqube/lib/scanner/scanner-developer-8.9.2.46101-all.jar:protobuf-java    
ERROR: anchore_cve CVE-2021-0555 protobuf-3.11.4 /opt/sonarqube/lib/sonar-application-8.9.2.46101.jar:protobuf-java
ERROR: twistlock_cve CVE-2021-21290 io.netty_netty-codec-http-4.1.49.Final None
ERROR: twistlock_cve CVE-2021-35515 org.apache.commons_commons-compress-1.20 None
ERROR: twistlock_cve CVE-2021-35516 org.apache.commons_commons-compress-1.20 None
ERROR: twistlock_cve CVE-2021-35517 org.apache.commons_commons-compress-1.20 None
ERROR: twistlock_cve CVE-2021-36090 org.apache.commons_commons-compress-1.20 None
Cleaning up file based variables
ERROR: Job failed: command terminated with exit code 1