Skip to content

ADDITIONAL_CA_CERT_BUNDLE can break gemnasium

I am unable to create an issue in analyzers/gemnasium directly, but currently my gitlab pipeline is breaking for the gemnasium job. I tried to debug and was able to determine that the environment variable ADDITIONAL_CA_CERT_BUNDLE appears to be causing analyzer to exit with a 128 status. Let me know if there is anything else I can do to debug for you.

docker run --privileged -it --rm --volume "$PWD":/tmp/app --env CI_PROJECT_DIR=/tmp/app registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium:2 sh
/analyzer run
[INFO] [Gemnasium] [2021-06-06T00:39:15Z] ▶ GitLab Gemnasium analyzer v2.29.6
[INFO] [Gemnasium] [2021-06-06T00:39:16Z] ▶ Using commit 47649dd4418405650aaf9f6f605c835da43d7532
 of vulnerability database

[INFO] [Gemnasium] [2021-06-06T00:39:16Z] ▶ Cannot auto-remediate dependency file, not supported: composer.lock
export 'ADDITIONAL_CA_CERT_BUNDLE=-----BEGIN CERTIFICATE-----
<cut>
-----END CERTIFICATE-----'
/analyzer run
[INFO] [Gemnasium] [2021-06-06T00:39:48Z] ▶ GitLab Gemnasium analyzer v2.29.6
exit status 128