container_scanning: [main]
Passed Started
by
@fcatteau

Fabien Catteau
1Running with gitlab-runner 17.7.0~pre.103.g896916a8 (896916a8)2 on green-3.saas-linux-small-amd64.runners-manager.gitlab.com/default Jhc_Jxvh, system ID: s_0e6850b2bce13Resolving secrets5Using Docker executor with image registry.gitlab.com/security-products/container-scanning:7 ...6Authenticating with credentials from job payload (GitLab Registry)7Pulling docker image registry.gitlab.com/security-products/container-scanning:7 ...8Using docker image sha256:f7825802b97b61ccf9ec05ab424597f329cf8021eab6e0e88cbf8e69fef07834 for registry.gitlab.com/security-products/container-scanning:7 with digest registry.gitlab.com/security-products/container-scanning@sha256:ae83a11870001731357301bdd17321cf0d8093ffc88bc4215763873d181c7b3a ...10Running on runner-jhcjxvh-project-9450192-concurrent-0 via runner-jhcjxvh-s-l-s-amd64-1740372908-381adea9...12Skipping Git repository setup13Skipping Git checkout14Skipping Git submodules setup16Using docker image sha256:f7825802b97b61ccf9ec05ab424597f329cf8021eab6e0e88cbf8e69fef07834 for registry.gitlab.com/security-products/container-scanning:7 with digest registry.gitlab.com/security-products/container-scanning@sha256:ae83a11870001731357301bdd17321cf0d8093ffc88bc4215763873d181c7b3a ...17$ gtcs scan18[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > {19 "DESTDIR": "",20 "MAJOR": "3",21 "MINOR": "3",22 "TEENY": "7",23 "PATCHLEVEL": "123",24 "INSTALL": "/usr/bin/install -c",25 "EXEEXT": "",26 "prefix": "/usr/local",27 "ruby_install_name": "ruby",28 "RUBY_INSTALL_NAME": "ruby",29 "RUBY_SO_NAME": "ruby",30 "exec": "exec",31 "ruby_pc": "ruby-3.3.pc",32 "CC_WRAPPER": "",33 "PACKAGE": "ruby",34 "BUILTIN_TRANSSRCS": " enc/trans/newline.c",35 "MKMF_VERBOSE": "0",36 "MANTYPE": "man",37 "vendorarchhdrdir": "/usr/local/include/ruby-3.3.0/vendor_ruby/x86_64-linux",38 "sitearchhdrdir": "/usr/local/include/ruby-3.3.0/site_ruby/x86_64-linux",39 "rubyarchhdrdir": "/usr/local/include/ruby-3.3.0/x86_64-linux",40 "vendorhdrdir": "/usr/local/include/ruby-3.3.0/vendor_ruby",41 "sitehdrdir": "/usr/local/include/ruby-3.3.0/site_ruby",42 "rubyhdrdir": "/usr/local/include/ruby-3.3.0",43 "RUBY_SEARCH_PATH": "",44 "UNIVERSAL_INTS": "",45 "UNIVERSAL_ARCHNAMES": "",46 "configure_args": " '--build=x86_64-linux-gnu' '--disable-install-doc' '--enable-shared' '--enable-yjit' 'build_alias=x86_64-linux-gnu'",47 "CONFIGURE": "configure",48 "vendorarchdir": "/usr/local/lib/ruby/vendor_ruby/3.3.0/x86_64-linux",49 "vendorlibdir": "/usr/local/lib/ruby/vendor_ruby/3.3.0",50 "vendordir": "/usr/local/lib/ruby/vendor_ruby",51 "sitearchdir": "/usr/local/lib/ruby/site_ruby/3.3.0/x86_64-linux",52 "sitelibdir": "/usr/local/lib/ruby/site_ruby/3.3.0",53 "sitedir": "/usr/local/lib/ruby/site_ruby",54 "rubyarchdir": "/usr/local/lib/ruby/3.3.0/x86_64-linux",55 "rubylibdir": "/usr/local/lib/ruby/3.3.0",56 "ruby_version": "3.3.0",57 "sitearch": "x86_64-linux",58 "arch": "x86_64-linux",59 "sitearchincludedir": "/usr/local/include/x86_64-linux",60 "archincludedir": "/usr/local/include/x86_64-linux",61 "sitearchlibdir": "/usr/local/lib/x86_64-linux",62 "archlibdir": "/usr/local/lib/x86_64-linux",63 "libdirname": "libdir",64 "RUBY_EXEC_PREFIX": "/usr/local",65 "RUBY_LIB_VERSION": "",66 "RUBY_LIB_VERSION_STYLE": "3\t/* full */",67 "RI_BASE_NAME": "ri",68 "ridir": "/usr/local/share/ri",69 "rubysitearchprefix": "/usr/local/lib/ruby/x86_64-linux",70 "rubyarchprefix": "/usr/local/lib/ruby/x86_64-linux",71 "MAKEFILES": "Makefile GNUmakefile",72 "USE_LLVM_WINDRES": "",73 "PLATFORM_DIR": "",74 "COROUTINE_TYPE": "amd64",75 "THREAD_MODEL": "pthread",76 "SYMBOL_PREFIX": "",77 "EXPORT_PREFIX": "",78 "COMMON_HEADERS": "",79 "COMMON_MACROS": "",80 "COMMON_LIBS": "",81 "MAINLIBS": "-lz -lrt -lrt -lgmp -ldl -lcrypt -lm -lpthread ",82 "ENABLE_SHARED": "yes",83 "DLDSHARED": "gcc -shared",84 "DLDLIBS": "-lc",85 "SOLIBS": "-lz -lrt -lrt -lgmp -ldl -lcrypt -lm -lpthread ",86 "LIBRUBYARG_SHARED": "-Wl,-rpath,/usr/local/lib -L/usr/local/lib -lruby",87 "LIBRUBYARG_STATIC": "-Wl,-rpath,/usr/local/lib -L/usr/local/lib -lruby-static -lz -lrt -lrt -lgmp -ldl -lcrypt -lm -lpthread ",88 "LIBRUBYARG": "-Wl,-rpath,/usr/local/lib -L/usr/local/lib -lruby",89 "LIBRUBY": "libruby.so.3.3.7",90 "LIBRUBY_ALIASES": "libruby.so.3.3 libruby.so",91 "LIBRUBY_SONAME": "libruby.so.3.3",92 "LIBRUBY_SO": "libruby.so.3.3.7",93 "LIBRUBY_A": "libruby-static.a",94 "RUBYW_INSTALL_NAME": "",95 "rubyw_install_name": "",96 "EXTDLDFLAGS": "",97 "EXTLDFLAGS": "",98 "strict_warnflags": "",99 "warnflags": "-Wall -Wextra -Wdeprecated-declarations -Wdiv-by-zero -Wduplicated-cond -Wimplicit-function-declaration -Wimplicit-int -Wpointer-arith -Wwrite-strings -Wold-style-definition -Wimplicit-fallthrough=0 -Wmissing-noreturn -Wno-cast-function-type -Wno-constant-logical-operand -Wno-long-long -Wno-missing-field-initializers -Wno-overlength-strings -Wno-packed-bitfield-compat -Wno-parentheses-equality -Wno-self-assign -Wno-tautological-compare -Wno-unused-parameter -Wno-unused-value -Wsuggest-attribute=format -Wsuggest-attribute=noreturn -Wunused-variable -Wmisleading-indentation -Wundef",100 "debugflags": "-ggdb3",101 "optflags": "-O3 -fno-fast-math",102 "NULLCMD": ":",103 "ENABLE_DEBUG_ENV": "",104 "DLNOBJ": "dln.o",105 "RJIT_SUPPORT": "yes",106 "YJIT_OBJ": "yjit.o",107 "YJIT_LIBS": "yjit/target/release/libyjit.a",108 "CARGO_BUILD_ARGS": "",109 "YJIT_SUPPORT": "yes",110 "CARGO": "",111 "RUSTC": "rustc",112 "INSTALL_STATIC_LIBRARY": "no",113 "EXECUTABLE_EXTS": "",114 "ARCHFILE": "",115 "LIBRUBY_RELATIVE": "no",116 "EXTOUT": ".ext",117 "PREP": "miniruby",118 "CROSS_COMPILING": "no",119 "TEST_RUNNABLE": "yes",120 "rubylibprefix": "/usr/local/lib/ruby",121 "setup": "Setup",122 "SOEXT": "so",123 "TRY_LINK": "",124 "PRELOADENV": "LD_PRELOAD",125 "LIBPATHENV": "LD_LIBRARY_PATH",126 "RPATHFLAG": " -Wl,-rpath,%1$-s",127 "LIBPATHFLAG": " -L%1$-s",128 "LINK_SO": "",129 "ADDITIONAL_DLDFLAGS": "",130 "ENCSTATIC": "",131 "EXTSTATIC": "",132 "ASMEXT": "S",133 "LIBEXT": "a",134 "DLEXT": "so",135 "LDSHAREDXX": "g++ -shared",136 "LDSHARED": "gcc -shared",137 "CCDLFLAGS": "-fPIC",138 "STATIC": "",139 "ARCH_FLAG": "",140 "DLDFLAGS": "-Wl,--compress-debug-sections=zlib",141 "ALLOCA": "",142 "EGREP": "/usr/bin/grep -E",143 "GREP": "/usr/bin/grep",144 "dsymutil": "",145 "codesign": "",146 "cleanlibs": "",147 "POSTLINK": ":",148 "incflags": "",149 "WERRORFLAG": "-Werror",150 "RUBY_DEVEL": "",151 "CHDIR": "cd -P",152 "RMALL": "rm -fr",153 "RMDIRS": "rmdir --ignore-fail-on-non-empty -p",154 "RMDIR": "rmdir --ignore-fail-on-non-empty",155 "CP": "cp",156 "RM": "rm -f",157 "PKG_CONFIG": "pkg-config",158 "DOXYGEN": "",159 "DOT": "",160 "MKDIR_P": "/usr/bin/mkdir -p",161 "INSTALL_DATA": "/usr/bin/install -c -m 644",162 "INSTALL_SCRIPT": "/usr/bin/install -c",163 "INSTALL_PROGRAM": "/usr/bin/install -c",164 "SET_MAKE": "",165 "LN_S": "ln -s",166 "DLLWRAP": "",167 "WINDRES": "",168 "ASFLAGS": "",169 "ARFLAGS": "rcD ",170 "try_header": "",171 "CC_VERSION_MESSAGE": "gcc (Debian 12.2.0-14) 12.2.0\nCopyright (C) 2022 Free Software Foundation, Inc.\nThis is free software; see the source for copying conditions. There is NO\nwarranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.",172 "CC_VERSION": "gcc --version",173 "CSRCFLAG": "",174 "COUTFLAG": "-o ",175 "OUTFLAG": "-o ",176 "CPPOUTFILE": "-o conftest.i",177 "GNU_LD": "yes",178 "GCC": "yes",179 "CPP": "gcc -E",180 "CXXFLAGS": "",181 "OBJEXT": "o",182 "CPPFLAGS": " ",183 "LDFLAGS": "-L. -fstack-protector-strong -rdynamic -Wl,-export-dynamic -Wl,--no-as-needed",184 "CFLAGS": "-O3 -fno-fast-math -ggdb3 -Wall -Wextra -Wdeprecated-declarations -Wdiv-by-zero -Wduplicated-cond -Wimplicit-function-declaration -Wimplicit-int -Wpointer-arith -Wwrite-strings -Wold-style-definition -Wimplicit-fallthrough=0 -Wmissing-noreturn -Wno-cast-function-type -Wno-constant-logical-operand -Wno-long-long -Wno-missing-field-initializers -Wno-overlength-strings -Wno-packed-bitfield-compat -Wno-parentheses-equality -Wno-self-assign -Wno-tautological-compare -Wno-unused-parameter -Wno-unused-value -Wsuggest-attribute=format -Wsuggest-attribute=noreturn -Wunused-variable -Wmisleading-indentation -Wundef -fPIC",185 "STRIP": "strip -S -x",186 "RANLIB": "gcc-ranlib",187 "OBJDUMP": "objdump",188 "OBJCOPY": "objcopy",189 "NM": "gcc-nm",190 "LD": "ld",191 "CXX": "g++",192 "AS": "as",193 "AR": "gcc-ar",194 "CC": "gcc",195 "wasmoptflags": "",196 "WASMOPT": "",197 "target_os": "linux",198 "target_vendor": "pc",199 "target_cpu": "x86_64",200 "target": "x86_64-pc-linux",201 "host_os": "linux",202 "host_vendor": "pc",203 "host_cpu": "x86_64",204 "host": "x86_64-pc-linux",205 "build_os": "linux-gnu",206 "build_vendor": "pc",207 "build_cpu": "x86_64",208 "build": "x86_64-pc-linux-gnu",209 "RUBY_VERSION_NAME": "ruby-3.3.0",210 "RUBYW_BASE_NAME": "rubyw",211 "RUBY_BASE_NAME": "ruby",212 "RUBY_PROGRAM_VERSION": "3.3.7",213 "RUBY_API_VERSION": "3.3",214 "HAVE_GIT": "no",215 "GIT": "git",216 "cxxflags": "",217 "cppflags": "",218 "cflags": "-O3 -fno-fast-math -ggdb3 -Wall -Wextra -Wdeprecated-declarations -Wdiv-by-zero -Wduplicated-cond -Wimplicit-function-declaration -Wimplicit-int -Wpointer-arith -Wwrite-strings -Wold-style-definition -Wimplicit-fallthrough=0 -Wmissing-noreturn -Wno-cast-function-type -Wno-constant-logical-operand -Wno-long-long -Wno-missing-field-initializers -Wno-overlength-strings -Wno-packed-bitfield-compat -Wno-parentheses-equality -Wno-self-assign -Wno-tautological-compare -Wno-unused-parameter -Wno-unused-value -Wsuggest-attribute=format -Wsuggest-attribute=noreturn -Wunused-variable -Wmisleading-indentation -Wundef",219 "MAKEDIRS": "/usr/bin/mkdir -p",220 "target_alias": "",221 "host_alias": "",222 "build_alias": "x86_64-linux-gnu",223 "LIBS": "-lm -lpthread ",224 "ECHO_T": "",225 "ECHO_N": "-n",226 "ECHO_C": "",227 "DEFS": "",228 "mandir": "/usr/local/share/man",229 "localedir": "/usr/local/share/locale",230 "libdir": "/usr/local/lib",231 "psdir": "/usr/local/share/doc/ruby",232 "pdfdir": "/usr/local/share/doc/ruby",233 "dvidir": "/usr/local/share/doc/ruby",234 "htmldir": "/usr/local/share/doc/ruby",235 "infodir": "/usr/local/share/info",236 "docdir": "/usr/local/share/doc/ruby",237 "oldincludedir": "/usr/include",238 "includedir": "/usr/local/include",239 "runstatedir": "/usr/local/var/run",240 "localstatedir": "/usr/local/var",241 "sharedstatedir": "/usr/local/com",242 "sysconfdir": "/usr/local/etc",243 "datadir": "/usr/local/share",244 "datarootdir": "/usr/local/share",245 "libexecdir": "/usr/local/libexec",246 "sbindir": "/usr/local/sbin",247 "bindir": "/usr/local/bin",248 "exec_prefix": "/usr/local",249 "PACKAGE_URL": "",250 "PACKAGE_BUGREPORT": "",251 "PACKAGE_STRING": "",252 "PACKAGE_VERSION": "",253 "PACKAGE_TARNAME": "",254 "PACKAGE_NAME": "",255 "PATH_SEPARATOR": ":",256 "SHELL": "/bin/bash",257 "UNICODE_VERSION": "15.0.0",258 "UNICODE_EMOJI_VERSION": "15.0",259 "platform": "x86_64-linux",260 "archdir": "/usr/local/lib/ruby/3.3.0/x86_64-linux",261 "topdir": "/usr/local/lib/ruby/3.3.0/x86_64-linux"262}263[INFO] [2025-02-24 04:56:55 +0000] [container-scanning] > Remediation is disabled; /builds/gitlab-org/security-products/analyzers/gemnasium/Dockerfile cannot be found. Have you set `GIT_STRATEGY` and264`CS_DOCKERFILE_PATH`?265See https://docs.gitlab.com/ee/user/application_security/container_scanning/#solutions-for-vulnerabilities-auto-remediation266[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > 268[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > trivy --version269[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > Version: 0.59.1270Vulnerability DB:271 Version: 2272 UpdatedAt: 2025-02-23 03:42:16.590154603 +0000 UTC273 NextUpdate: 2025-02-24 03:42:16.590154443 +0000 UTC274 DownloadedAt: 0001-01-01 00:00:00 +0000 UTC275[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > 2025-02-24T04:56:55Z DEBUG No plugins loaded2762025-02-24T04:56:55Z DEBUG Default config file "file_path=trivy.yaml" not found, using built in values2772025-02-24T04:56:55Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"2782025-02-24T04:56:55Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"2792025-02-24T04:56:55Z DEBUG Failed to get Java DB metadata err="unable to open a file: open /home/gitlab/.cache/trivy/ee/java-db/metadata.json: no such file or directory"2802025-02-24T04:56:55Z DEBUG [misconfig] Failed to open the check metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"2812025-02-24T04:56:55Z DEBUG Failed to get policy metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"282[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > 283[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > 285[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > trivy --version286[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > Version: 0.59.1287Vulnerability DB:288 Version: 2289 UpdatedAt: 2025-02-23 03:42:16.590154603 +0000 UTC290 NextUpdate: 2025-02-24 03:42:16.590154443 +0000 UTC291 DownloadedAt: 0001-01-01 00:00:00 +0000 UTC292[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > 2025-02-24T04:56:55Z DEBUG No plugins loaded2932025-02-24T04:56:55Z DEBUG Default config file "file_path=trivy.yaml" not found, using built in values2942025-02-24T04:56:55Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"2952025-02-24T04:56:55Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"2962025-02-24T04:56:55Z DEBUG Failed to get Java DB metadata err="unable to open a file: open /home/gitlab/.cache/trivy/ee/java-db/metadata.json: no such file or directory"2972025-02-24T04:56:55Z DEBUG [misconfig] Failed to open the check metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"2982025-02-24T04:56:55Z DEBUG Failed to get policy metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"299[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > 300[INFO] [2025-02-24 04:56:55 +0000] [container-scanning] > Scanning container from registry registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium/tmp/main:3984dc1f79af84aa1987dfccad2aa41d5cd1f969 for vulnerabilities with severity level UNKNOWN or higher, with gcs 7.3.18 and Trivy Version: 0.59.1, advisories updated at 2025-02-23T03:42:16+00:00301[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > 302 trivy image --vuln-type os --ignore-status not_affected --no-progress --offline-scan --skip-db-update --scanners vuln --java-db-repository registry.gitlab.com/gitlab-org/security-products/dependencies/trivy-java-db --format template --template @/usr/local/bundle/gems/gcs-7.3.18/lib/template/trivy.tpl --output tmp.json registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium/tmp/main:3984dc1f79af84aa1987dfccad2aa41d5cd1f969
00:11
303[DEBUG] [2025-02-24 04:56:55 +0000] [container-scanning] > trivy image --vuln-type os --ignore-status not_affected --no-progress --offline-scan --skip-db-update --scanners vuln --java-db-repository registry.gitlab.com/gitlab-org/security-products/dependencies/trivy-java-db --format template --template @/usr/local/bundle/gems/gcs-7.3.18/lib/template/trivy.tpl --output tmp.json registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium/tmp/main:3984dc1f79af84aa1987dfccad2aa41d5cd1f969304[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 2025-02-24T04:56:55Z DEBUG No plugins loaded3052025-02-24T04:56:55Z WARN '--vuln-type' is deprecated. Use '--pkg-types' instead.3062025-02-24T04:56:55Z DEBUG Default config file "file_path=trivy.yaml" not found, using built in values3072025-02-24T04:56:55Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3082025-02-24T04:56:55Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3092025-02-24T04:56:55Z INFO Adding schema version to the DB repository for backward compatibility repository="registry.gitlab.com/gitlab-org/security-products/dependencies/trivy-java-db:1"3102025-02-24T04:56:55Z DEBUG Parsed severities severities=[UNKNOWN LOW MEDIUM HIGH CRITICAL]3112025-02-24T04:56:55Z DEBUG Ignore statuses statuses=[1]3122025-02-24T04:56:55Z DEBUG [vulndb] Skipping DB update...3132025-02-24T04:56:55Z DEBUG DB info schema=2 updated_at=2025-02-23T03:42:16.590154603Z next_update=2025-02-24T03:42:16.590154443Z downloaded_at=0001-01-01T00:00:00Z3142025-02-24T04:56:55Z DEBUG [pkg] Package types types=[os]3152025-02-24T04:56:55Z DEBUG [pkg] Package relationships relationships=[unknown root workspace direct indirect]3162025-02-24T04:56:55Z INFO [vuln] Vulnerability scanning is enabled3172025-02-24T04:56:55Z DEBUG Initializing scan cache... type="fs"3182025-02-24T04:56:57Z DEBUG [image] Detected image ID image_id="sha256:6e04321e1a4d76579927582b1f2dff7907be5448e76e9f027fac887c6a134e19"3192025-02-24T04:56:57Z DEBUG [image] Detected diff ID diff_ids=[sha256:ba79b2c0127890636a791eb3ec3993cce08a50cc01fcb1513f0e8fbae41977af sha256:2a27ab6dd00acba04bf22e0fa9f1602f393f375dddea64534c1eb89ab8a42dfa sha256:ae4f294bb1466b906ae76de33241d1f093a5f8c5ad9d71b4340c46c03a727c54 sha256:ea4b3b167592552676c38dc7472bc26544b2a33b9c5bb7842857c87b5f9f4a07 sha256:30eafc45f1684ded25b28245e194a373e586ecbd79e2014f03704afa4a535a1c sha256:3f72dfad4d682a98137097675bcf3c052b3505104324489dc0575509574c4f7b sha256:4bc83bc63cb140f0f447cad606717bf1ed4f2b446adb0ec299f608863497f3b0 sha256:727c5d1321846657a84b654550cfc239d807553e767fe584c2e261574cff34af]3202025-02-24T04:56:57Z DEBUG [image] Detected base layers diff_ids=[sha256:ba79b2c0127890636a791eb3ec3993cce08a50cc01fcb1513f0e8fbae41977af sha256:2a27ab6dd00acba04bf22e0fa9f1602f393f375dddea64534c1eb89ab8a42dfa sha256:ae4f294bb1466b906ae76de33241d1f093a5f8c5ad9d71b4340c46c03a727c54 sha256:ea4b3b167592552676c38dc7472bc26544b2a33b9c5bb7842857c87b5f9f4a07]3212025-02-24T04:56:57Z DEBUG [image] Missing image ID in cache image_id="sha256:6e04321e1a4d76579927582b1f2dff7907be5448e76e9f027fac887c6a134e19"3222025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:ba79b2c0127890636a791eb3ec3993cce08a50cc01fcb1513f0e8fbae41977af"3232025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:30eafc45f1684ded25b28245e194a373e586ecbd79e2014f03704afa4a535a1c"3242025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:2a27ab6dd00acba04bf22e0fa9f1602f393f375dddea64534c1eb89ab8a42dfa"3252025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:ae4f294bb1466b906ae76de33241d1f093a5f8c5ad9d71b4340c46c03a727c54"3262025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:ea4b3b167592552676c38dc7472bc26544b2a33b9c5bb7842857c87b5f9f4a07"3272025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:3f72dfad4d682a98137097675bcf3c052b3505104324489dc0575509574c4f7b"3282025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:4bc83bc63cb140f0f447cad606717bf1ed4f2b446adb0ec299f608863497f3b0"3292025-02-24T04:56:57Z DEBUG [image] Missing diff ID in cache diff_id="sha256:727c5d1321846657a84b654550cfc239d807553e767fe584c2e261574cff34af"3302025-02-24T04:57:06Z DEBUG No secrets found in container image config3312025-02-24T04:57:06Z INFO Detected OS family="alpine" version="3.19.4"3322025-02-24T04:57:06Z INFO [alpine] Detecting vulnerabilities... os_version="3.19" repository="3.19" pkg_num=703332025-02-24T04:57:06Z DEBUG [alpine] Failed to parse the fixed version version="- ALPINE-13661" err="invalid version"3342025-02-24T04:57:06Z DEBUG [alpine] Failed to parse the fixed version version="- ALPINE-13661" err="invalid version"3352025-02-24T04:57:06Z DEBUG [alpine] Failed to parse the fixed version version="- ALPINE-13661" err="invalid version"3362025-02-24T04:57:06Z DEBUG Specified ignore file does not exist file=".trivyignore"3372025-02-24T04:57:06Z DEBUG [vex] VEX filtering is disabled338[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 339[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > Allowlist failed with No such file or directory @ rb_sysopen - /builds/gitlab-org/security-products/analyzers/gemnasium/vulnerability-allowlist.yml for /builds/gitlab-org/security-products/analyzers/gemnasium/vulnerability-allowlist.yml 340[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > writing results to /builds/gitlab-org/security-products/analyzers/gemnasium/gl-container-scanning-report.json341[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 343[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > trivy --version344[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > Version: 0.59.1345Vulnerability DB:346 Version: 2347 UpdatedAt: 2025-02-23 03:42:16.590154603 +0000 UTC348 NextUpdate: 2025-02-24 03:42:16.590154443 +0000 UTC349 DownloadedAt: 0001-01-01 00:00:00 +0000 UTC350[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 2025-02-24T04:57:06Z DEBUG No plugins loaded3512025-02-24T04:57:06Z DEBUG Default config file "file_path=trivy.yaml" not found, using built in values3522025-02-24T04:57:06Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3532025-02-24T04:57:06Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3542025-02-24T04:57:06Z DEBUG Failed to get Java DB metadata err="unable to open a file: open /home/gitlab/.cache/trivy/ee/java-db/metadata.json: no such file or directory"3552025-02-24T04:57:06Z DEBUG [misconfig] Failed to open the check metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"3562025-02-24T04:57:06Z DEBUG Failed to get policy metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"357[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 358[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 360[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > trivy --version361[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > Version: 0.59.1362Vulnerability DB:363 Version: 2364 UpdatedAt: 2025-02-23 03:42:16.590154603 +0000 UTC365 NextUpdate: 2025-02-24 03:42:16.590154443 +0000 UTC366 DownloadedAt: 0001-01-01 00:00:00 +0000 UTC367[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 2025-02-24T04:57:06Z DEBUG No plugins loaded3682025-02-24T04:57:06Z DEBUG Default config file "file_path=trivy.yaml" not found, using built in values3692025-02-24T04:57:06Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3702025-02-24T04:57:06Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3712025-02-24T04:57:06Z DEBUG Failed to get Java DB metadata err="unable to open a file: open /home/gitlab/.cache/trivy/ee/java-db/metadata.json: no such file or directory"3722025-02-24T04:57:06Z DEBUG [misconfig] Failed to open the check metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"3732025-02-24T04:57:06Z DEBUG Failed to get policy metadata err="open /home/gitlab/.cache/trivy/ee/policy/metadata.json: no such file or directory"374[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 375[INFO] [2025-02-24 04:57:06 +0000] [container-scanning] > Scanning container from registry registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium/tmp/main:3984dc1f79af84aa1987dfccad2aa41d5cd1f969 for vulnerabilities with severity level UNKNOWN or higher, with gcs 7.3.18 and Trivy Version: 0.59.1, advisories updated at 2025-02-23T03:42:16+00:00376[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > 377 trivy image --vuln-type os --format cyclonedx --java-db-repository registry.gitlab.com/gitlab-org/security-products/dependencies/trivy-java-db --output tmp.json registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium/tmp/main:3984dc1f79af84aa1987dfccad2aa41d5cd1f969
00:01
378[DEBUG] [2025-02-24 04:57:06 +0000] [container-scanning] > trivy image --vuln-type os --format cyclonedx --java-db-repository registry.gitlab.com/gitlab-org/security-products/dependencies/trivy-java-db --output tmp.json registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium/tmp/main:3984dc1f79af84aa1987dfccad2aa41d5cd1f969379[DEBUG] [2025-02-24 04:57:07 +0000] [container-scanning] > 2025-02-24T04:57:06Z DEBUG No plugins loaded3802025-02-24T04:57:06Z WARN '--vuln-type' is deprecated. Use '--pkg-types' instead.3812025-02-24T04:57:06Z DEBUG Default config file "file_path=trivy.yaml" not found, using built in values3822025-02-24T04:57:06Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3832025-02-24T04:57:06Z DEBUG Cache dir dir="/home/gitlab/.cache/trivy/ee"3842025-02-24T04:57:06Z INFO Adding schema version to the DB repository for backward compatibility repository="registry.gitlab.com/gitlab-org/security-products/dependencies/trivy-java-db:1"3852025-02-24T04:57:06Z DEBUG Parsed severities severities=[UNKNOWN LOW MEDIUM HIGH CRITICAL]3862025-02-24T04:57:06Z DEBUG Ignore statuses statuses=[]3872025-02-24T04:57:06Z INFO "--format cyclonedx" disables security scanning. Specify "--scanners vuln" explicitly if you want to include vulnerabilities in the "cyclonedx" report.3882025-02-24T04:57:06Z DEBUG [pkg] Package types types=[os]3892025-02-24T04:57:06Z DEBUG [pkg] Package relationships relationships=[unknown root workspace direct indirect]3902025-02-24T04:57:06Z DEBUG Initializing scan cache... type="fs"3912025-02-24T04:57:07Z DEBUG [image] Detected image ID image_id="sha256:6e04321e1a4d76579927582b1f2dff7907be5448e76e9f027fac887c6a134e19"3922025-02-24T04:57:07Z DEBUG [image] Detected diff ID diff_ids=[sha256:ba79b2c0127890636a791eb3ec3993cce08a50cc01fcb1513f0e8fbae41977af sha256:2a27ab6dd00acba04bf22e0fa9f1602f393f375dddea64534c1eb89ab8a42dfa sha256:ae4f294bb1466b906ae76de33241d1f093a5f8c5ad9d71b4340c46c03a727c54 sha256:ea4b3b167592552676c38dc7472bc26544b2a33b9c5bb7842857c87b5f9f4a07 sha256:30eafc45f1684ded25b28245e194a373e586ecbd79e2014f03704afa4a535a1c sha256:3f72dfad4d682a98137097675bcf3c052b3505104324489dc0575509574c4f7b sha256:4bc83bc63cb140f0f447cad606717bf1ed4f2b446adb0ec299f608863497f3b0 sha256:727c5d1321846657a84b654550cfc239d807553e767fe584c2e261574cff34af]3932025-02-24T04:57:07Z DEBUG [image] Detected base layers diff_ids=[sha256:ba79b2c0127890636a791eb3ec3993cce08a50cc01fcb1513f0e8fbae41977af sha256:2a27ab6dd00acba04bf22e0fa9f1602f393f375dddea64534c1eb89ab8a42dfa sha256:ae4f294bb1466b906ae76de33241d1f093a5f8c5ad9d71b4340c46c03a727c54 sha256:ea4b3b167592552676c38dc7472bc26544b2a33b9c5bb7842857c87b5f9f4a07]3942025-02-24T04:57:07Z INFO Detected OS family="alpine" version="3.19.4"3952025-02-24T04:57:07Z DEBUG Specified ignore file does not exist file=".trivyignore"3962025-02-24T04:57:07Z DEBUG [vex] VEX filtering is disabled397[DEBUG] [2025-02-24 04:57:07 +0000] [container-scanning] > 398[DEBUG] [2025-02-24 04:57:07 +0000] [container-scanning] > writing results to /builds/gitlab-org/security-products/analyzers/gemnasium/gl-sbom-report.cdx.json400Uploading artifacts...401gl-container-scanning-report.json: found 1 matching artifact files and directories 402WARNING: gl-dependency-scanning-report.json: no matching files. Ensure that the artifact path is relative to the working directory (/builds/gitlab-org/security-products/analyzers/gemnasium) 403**/gl-sbom-*.cdx.json: found 1 matching artifact files and directories 404WARNING: Upload request redirected location=https://gitlab.com/api/v4/jobs/9221416193/artifacts?artifact_format=zip&artifact_type=archive new-url=https://gitlab.com405WARNING: Retrying... context=artifacts-uploader error=request redirected406Uploading artifacts as "archive" to coordinator... 201 Created id=9221416193 responseStatus=201 Created token=glcbt-66407Uploading artifacts...408**/gl-sbom-*.cdx.json: found 1 matching artifact files and directories 409WARNING: Upload request redirected location=https://gitlab.com/api/v4/jobs/9221416193/artifacts?artifact_format=gzip&artifact_type=cyclonedx new-url=https://gitlab.com410WARNING: Retrying... context=artifacts-uploader error=request redirected411Uploading artifacts as "cyclonedx" to coordinator... 201 Created id=9221416193 responseStatus=201 Created token=glcbt-66412Uploading artifacts...413gl-container-scanning-report.json: found 1 matching artifact files and directories 414WARNING: Upload request redirected location=https://gitlab.com/api/v4/jobs/9221416193/artifacts?artifact_format=raw&artifact_type=container_scanning new-url=https://gitlab.com415WARNING: Retrying... context=artifacts-uploader error=request redirected416Uploading artifacts as "container_scanning" to coordinator... 201 Created id=9221416193 responseStatus=201 Created token=glcbt-66418Job succeeded