Skip to content
Snippets Groups Projects

container_scanning

Passed Started by
Jose Ivan Vargas Lopez
@jivanvl
This job is archived. Only the complete pipeline can be retried.
1Running with gitlab-runner 12.7.1 (003fe500)
2 on docker-auto-scale 72989761
3 Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ... 01:25
4Starting service arminc/clair-db:latest ...
5Pulling docker image arminc/clair-db:latest ...
6Using docker image sha256:890aeb2c8be4aa5ddbb806081e9bb2c473991b31cd41a8506771101d1a4d7fd4 for arminc/clair-db:latest ...
7Waiting for services to be up and running...
8Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
9Using docker image sha256:525f4697f5a6aa3c277141653cd0876f31115a02c379f5caf16509a8407d85d6 for registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
10 Running on runner-72989761-project-4422333-concurrent-0 via runner-72989761-stg-srm-1581695970-f571fccf... 00:02
11 Skipping Git repository setup 00:01
12Skipping Git checkout
13Skipping Git submodules setup
14 $ /container-scanner/start.sh 00:09
15[INFO] ▶ GitLab klar analyzer v2.0.3
16[WARN] ▶ Whitelist file with path '/builds/gitlab-org/monitor/monitor-sandbox/clair-whitelist.yml' does not exist, skipping
17[INFO] ▶ DOCKER_USER and DOCKER_PASSWORD environment variables have not been configured. Defaulting to DOCKER_USER=$CI_REGISTRY_USER and DOCKER_PASSWORD=$CI_REGISTRY_PASSWORD
18[INFO] ▶ Successfully connected to the vulnerabilities database
19[INFO] ▶ Started Clair server process with PID: 16
20[INFO] ▶ Waiting for Clair API to start...
21[WARN] ▶ Clair API not ready, waiting 2s before retrying. Retry 1 of 10
22[WARN] ▶ Clair log contents:
23 {"Event":"running database migrations","Level":"info","Location":"pgsql.go:216","Time":"2020-02-14 16:01:02.576667"}
24
25[WARN] ▶ Clair log contents:
26 {"Event":"database migration ran successfully","Level":"info","Location":"pgsql.go:223","Time":"2020-02-14 16:01:02.763201"}
27
28[WARN] ▶ Clair log contents:
29 {"Event":"notifier service is disabled","Level":"info","Location":"notifier.go:77","Time":"2020-02-14 16:01:02.764005"}
30
31[WARN] ▶ Clair log contents:
32 {"Event":"starting main API","Level":"info","Location":"api.go:52","Time":"2020-02-14 16:01:02.764263","port":6060}
33
34[INFO] ▶ Clair API started successfully.
35[INFO] ▶ Scanning container from registry 'registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:c8cb41c1f8205c0e4873af02f405abf0291d755b' for vulnerabilities with severity level 'Unknown' or higher with klar '2.4.0' and clair 'v2.1.2'
36[INFO] ▶ Shutting down Clair server with PID: 16
37[INFO] ▶ Clair server shut down successfully
38[WARN] ▶ Encountered error while reading Dockerfile for remediation, halting remediation processing. Error: Dockerfile does not exist
39[INFO] ▶ Image [registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:c8cb41c1f8205c0e4873af02f405abf0291d755b] contains NO unapproved vulnerabilities
40 Uploading artifacts... 00:03
41gl-container-scanning-report.json: found 1 matching files
42Uploading artifacts to coordinator... ok id=37081923 responseStatus=201 Created token=NKfSm18Y
43Job succeeded