container_scanning

Passed Started 4 years ago by
This job is archived. Only the complete pipeline can be retried.
1Running with gitlab-runner 12.10.0-rc2 (6c8c540f)
2  on docker-auto-scale fa6cab46
 3  Preparing the "docker+machine" executor  
  01:20
4Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
5Starting service arminc/clair-db:latest ...
6Pulling docker image arminc/clair-db:latest ...
7Using docker image sha256:e28868bbe66ed825482f95f31adda0e4db385f2cc63ede30d15687a8c13bc351 for arminc/clair-db:latest ...
8Waiting for services to be up and running...
9Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
10Using docker image sha256:743cf4e14efe4ffa12b4167e7f82bc8f6676ffa5c1055ca77a0422d95476b225 for registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
 11  Preparing environment  
  00:02
12Running on runner-fa6cab46-project-4422333-concurrent-0 via runner-fa6cab46-stg-srm-1589212743-bcf41791...
 13  Getting source from Git repository  
  00:02
14Skipping Git repository setup
15Skipping Git checkout
16Skipping Git submodules setup
 17  Restoring cache  
  00:01
 18  Downloading artifacts  
  00:02
 19  Running before_script and script  
  00:08
20$ /analyzer run
21[INFO] ▶ GitLab klar analyzer v2.4.3
22[WARN] ▶ Whitelist file with path '/builds/gitlab-org/monitor/monitor-sandbox/clair-whitelist.yml' does not exist, skipping
23[INFO] ▶ DOCKER_USER and DOCKER_PASSWORD environment variables have not been configured. Defaulting to DOCKER_USER=$CI_REGISTRY_USER and DOCKER_PASSWORD=$CI_REGISTRY_PASSWORD
24[INFO] ▶ Successfully connected to the vulnerabilities database
25[INFO] ▶ Started Clair server process with PID: 15
26[INFO] ▶ Waiting for Clair API to start...
27[WARN] ▶ Clair API not ready, waiting 2s before retrying. Retry 1 of 10
28[WARN] ▶ Clair log contents: 
29  {"Event":"running database migrations","Level":"info","Location":"pgsql.go:216","Time":"2020-05-11 16:00:30.916143"}
30  
31[WARN] ▶ Clair log contents: 
32  {"Event":"database migration ran successfully","Level":"info","Location":"pgsql.go:223","Time":"2020-05-11 16:00:30.984298"}
33  
34[WARN] ▶ Clair log contents: 
35  {"Event":"notifier service is disabled","Level":"info","Location":"notifier.go:77","Time":"2020-05-11 16:00:30.984872"}
36  
37[WARN] ▶ Clair log contents: 
38  {"Event":"starting main API","Level":"info","Location":"api.go:52","Time":"2020-05-11 16:00:30.985122","port":6060}
39  
40[INFO] ▶ Clair API started successfully.
41[INFO] ▶ Scanning container from registry 'registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:f7838a7055b98d3a07d6791612cd54da8d9dd7ba' for vulnerabilities with severity level 'Unknown' or higher with klar '2.4.0' and clair 'v2.1.2'
42[INFO] ▶ Shutting down Clair server with PID: 15
43[INFO] ▶ Clair server shut down successfully
44[WARN] ▶ Encountered error while reading Dockerfile for remediation, halting remediation processing. Error: Dockerfile does not exist
45[INFO] ▶ Image [registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:f7838a7055b98d3a07d6791612cd54da8d9dd7ba] contains NO unapproved vulnerabilities
 46  Running after_script  
  00:02
 47  Saving cache  
  00:01
 48  Uploading artifacts for successful job  
  00:03
49Uploading artifacts...
50gl-container-scanning-report.json: found 1 matching files 
51Uploading artifacts to coordinator... ok            id=37208309 responseStatus=201 Created token=p6fj5eqZ
52Job succeeded
Admin message

Admin message
