Flawfinder failes to execute
Summary
When using the SAST template, the job is failing when running Flawfinder.
Example Project
https://gitlab.com/quantum-core/core/-/jobs/529274301
What is the current bug behavior?
The Flawfinder failes to run and no sast report is generated.
What is the expected correct behavior?
The Flawfinder should run without any issues and generate a SAST report.
Relevant logs and/or screenshots
Unable to find image 'registry.gitlab.com/gitlab-org/security-products/sast:2' locally
2: Pulling from gitlab-org/security-products/sast
8c4c4836e381: Pulling fs layer
8c4c4836e381: Download complete
8c4c4836e381: Pull complete
Digest: sha256:a0e3fb00e424379fbc40be2415d2006a7cc9501dc3c45c8b9be2ba88d8098e61
Status: Downloaded newer image for registry.gitlab.com/gitlab-org/security-products/sast:2
2020/04/28 06:31:24 Copy project directory to containers
2020/04/28 06:31:24 [bandit] Detect project using plugin
2020/04/28 06:31:24 [bandit] Project is compatible
2020/04/28 06:31:24 [bandit] Downloading analyzer...
......................................................................2020/04/28 06:31:45 [bandit] Starting analyzer...
Found project in /tmp/app/docs
[main] INFO profile include tests: None
[main] INFO profile exclude tests: None
[main] INFO cli include tests: None
[main] INFO cli exclude tests: None
[json] INFO JSON output written to file: /tmp/bandit.json
2020/04/28 06:31:53 [brakeman] Detect project using plugin
2020/04/28 06:31:53 [brakeman] Project not compatible
2020/04/28 06:31:53 [gosec] Detect project using plugin
2020/04/28 06:31:53 [gosec] Project not compatible
2020/04/28 06:31:53 [spotbugs] Detect project using plugin
2020/04/28 06:31:53 [spotbugs] Project not compatible
2020/04/28 06:31:53 [flawfinder] Detect project using plugin
2020/04/28 06:31:53 [flawfinder] Project is compatible
2020/04/28 06:31:53 [flawfinder] Downloading analyzer...
........................2020/04/28 06:31:56 [flawfinder] Starting analyzer...
Found project in /tmp/app/src
2020/04/28 06:31:58 record on line 2: wrong number of fields
2020/04/28 06:31:59 Container exited with non zero status code
Running after_script
00:02
Uploading artifacts for failed job
00:02
Uploading artifacts...
WARNING: gl-sast-report.json: no matching files
ERROR: No files to upload
ERROR: Job failed: exit code 1
Output of checks
This bug happens on GitLab.com