Skip to content
Snippets Groups Projects

gemnasium-dependency_scanning

Passed Started by
Miguel Rincon
@mrincon
This job is archived. Only the complete pipeline can be retried.
1Running with gitlab-runner 13.0.0 (c127439c)
2 on docker-auto-scale 72989761
3 Preparing the "docker+machine" executor 01:08
4Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium:2 ...
5Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium:2 ...
6Using docker image sha256:f589bd523cdd8b158968312353fb0fa3bb2b10dd4c8f77a6cd509d870d8adcf9 for registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium:2 ...
7 Preparing environment 00:05
8Running on runner-72989761-project-4422333-concurrent-0 via runner-72989761-stg-srm-1590736539-de99a75e...
9 Getting source from Git repository 00:01
10$ eval "$CI_PRE_CLONE_SCRIPT"
11Fetching changes with git depth set to 50...
12Initialized empty Git repository in /builds/gitlab-org/monitor/monitor-sandbox/.git/
13Created fresh repository.
14From https://ci-api.gstg.gitlab.net/gitlab-org/monitor/monitor-sandbox
15 * [new ref] refs/pipelines/12779161 -> refs/pipelines/12779161
16 * [new branch] master -> origin/master
17Checking out 274ed2c0 as master...
18Skipping Git submodules setup
19 Restoring cache 00:01
20 Downloading artifacts 00:02
21 Running before_script and script 00:02
22$ /analyzer run
23Found project in /builds/gitlab-org/monitor/monitor-sandbox
24Fetching origin
25From https://gitlab.com/gitlab-org/security-products/gemnasium-db
26 c54314cf..45a66dd5 master -> origin/master
27 * [new branch] adbcurate/gem_puma_CVE_2020_11076_yml -> origin/adbcurate/gem_puma_CVE_2020_11076_yml
28 * [new branch] adbcurate/maven_org_apache_tomcat_embed_tomcat_embed_core_CVE_2020_9484_yml -> origin/adbcurate/maven_org_apache_tomcat_embed_tomcat_embed_core_CVE_2020_9484_yml
29 * [new branch] adbcurate/packagist_verbb_image_resizer_CVE_2020_13458_yml -> origin/adbcurate/packagist_verbb_image_resizer_CVE_2020_13458_yml
30 * [new branch] adbcurate/packagist_verbb_image_resizer_CVE_2020_13459_yml -> origin/adbcurate/packagist_verbb_image_resizer_CVE_2020_13459_yml
31 * [new tag] v1.0.0 -> v1.0.0
32 * [new tag] v1.0.103 -> v1.0.103
33 * [new tag] version_latest -> version_latest
34 * [new tag] v1.0.1 -> v1.0.1
35 * [new tag] v1.0.10 -> v1.0.10
36 * [new tag] v1.0.100 -> v1.0.100
37 * [new tag] v1.0.101 -> v1.0.101
38 * [new tag] v1.0.102 -> v1.0.102
39 * [new tag] v1.0.11 -> v1.0.11
40 * [new tag] v1.0.12 -> v1.0.12
41 * [new tag] v1.0.13 -> v1.0.13
42 * [new tag] v1.0.14 -> v1.0.14
43 * [new tag] v1.0.15 -> v1.0.15
44 * [new tag] v1.0.16 -> v1.0.16
45 * [new tag] v1.0.17 -> v1.0.17
46 * [new tag] v1.0.18 -> v1.0.18
47 * [new tag] v1.0.19 -> v1.0.19
48 * [new tag] v1.0.2 -> v1.0.2
49 * [new tag] v1.0.20 -> v1.0.20
50 * [new tag] v1.0.21 -> v1.0.21
51 * [new tag] v1.0.22 -> v1.0.22
52 * [new tag] v1.0.23 -> v1.0.23
53 * [new tag] v1.0.24 -> v1.0.24
54 * [new tag] v1.0.25 -> v1.0.25
55 * [new tag] v1.0.26 -> v1.0.26
56 * [new tag] v1.0.27 -> v1.0.27
57 * [new tag] v1.0.28 -> v1.0.28
58 * [new tag] v1.0.29 -> v1.0.29
59 * [new tag] v1.0.3 -> v1.0.3
60 * [new tag] v1.0.30 -> v1.0.30
61 * [new tag] v1.0.31 -> v1.0.31
62 * [new tag] v1.0.32 -> v1.0.32
63 * [new tag] v1.0.33 -> v1.0.33
64 * [new tag] v1.0.34 -> v1.0.34
65 * [new tag] v1.0.35 -> v1.0.35
66 * [new tag] v1.0.36 -> v1.0.36
67 * [new tag] v1.0.37 -> v1.0.37
68 * [new tag] v1.0.38 -> v1.0.38
69 * [new tag] v1.0.39 -> v1.0.39
70 * [new tag] v1.0.4 -> v1.0.4
71 * [new tag] v1.0.40 -> v1.0.40
72 * [new tag] v1.0.41 -> v1.0.41
73 * [new tag] v1.0.42 -> v1.0.42
74 * [new tag] v1.0.43 -> v1.0.43
75 * [new tag] v1.0.44 -> v1.0.44
76 * [new tag] v1.0.45 -> v1.0.45
77 * [new tag] v1.0.46 -> v1.0.46
78 * [new tag] v1.0.47 -> v1.0.47
79 * [new tag] v1.0.48 -> v1.0.48
80 * [new tag] v1.0.49 -> v1.0.49
81 * [new tag] v1.0.5 -> v1.0.5
82 * [new tag] v1.0.50 -> v1.0.50
83 * [new tag] v1.0.51 -> v1.0.51
84 * [new tag] v1.0.52 -> v1.0.52
85 * [new tag] v1.0.53 -> v1.0.53
86 * [new tag] v1.0.54 -> v1.0.54
87 * [new tag] v1.0.55 -> v1.0.55
88 * [new tag] v1.0.56 -> v1.0.56
89 * [new tag] v1.0.57 -> v1.0.57
90 * [new tag] v1.0.58 -> v1.0.58
91 * [new tag] v1.0.59 -> v1.0.59
92 * [new tag] v1.0.6 -> v1.0.6
93 * [new tag] v1.0.60 -> v1.0.60
94 * [new tag] v1.0.61 -> v1.0.61
95 * [new tag] v1.0.62 -> v1.0.62
96 * [new tag] v1.0.63 -> v1.0.63
97 * [new tag] v1.0.64 -> v1.0.64
98 * [new tag] v1.0.65 -> v1.0.65
99 * [new tag] v1.0.66 -> v1.0.66
100 * [new tag] v1.0.67 -> v1.0.67
101 * [new tag] v1.0.68 -> v1.0.68
102 * [new tag] v1.0.69 -> v1.0.69
103 * [new tag] v1.0.7 -> v1.0.7
104 * [new tag] v1.0.70 -> v1.0.70
105 * [new tag] v1.0.71 -> v1.0.71
106 * [new tag] v1.0.72 -> v1.0.72
107 * [new tag] v1.0.73 -> v1.0.73
108 * [new tag] v1.0.74 -> v1.0.74
109 * [new tag] v1.0.75 -> v1.0.75
110 * [new tag] v1.0.76 -> v1.0.76
111 * [new tag] v1.0.77 -> v1.0.77
112 * [new tag] v1.0.78 -> v1.0.78
113 * [new tag] v1.0.79 -> v1.0.79
114 * [new tag] v1.0.8 -> v1.0.8
115 * [new tag] v1.0.80 -> v1.0.80
116 * [new tag] v1.0.81 -> v1.0.81
117 * [new tag] v1.0.82 -> v1.0.82
118 * [new tag] v1.0.83 -> v1.0.83
119 * [new tag] v1.0.84 -> v1.0.84
120 * [new tag] v1.0.85 -> v1.0.85
121 * [new tag] v1.0.86 -> v1.0.86
122 * [new tag] v1.0.87 -> v1.0.87
123 * [new tag] v1.0.88 -> v1.0.88
124 * [new tag] v1.0.89 -> v1.0.89
125 * [new tag] v1.0.9 -> v1.0.9
126 * [new tag] v1.0.90 -> v1.0.90
127 * [new tag] v1.0.91 -> v1.0.91
128 * [new tag] v1.0.92 -> v1.0.92
129 * [new tag] v1.0.93 -> v1.0.93
130 * [new tag] v1.0.94 -> v1.0.94
131 * [new tag] v1.0.95 -> v1.0.95
132 * [new tag] v1.0.96 -> v1.0.96
133 * [new tag] v1.0.97 -> v1.0.97
134 * [new tag] v1.0.98 -> v1.0.98
135 * [new tag] v1.0.99 -> v1.0.99
136Already on 'master'
137Your branch is behind 'origin/master' by 318 commits, and can be fast-forwarded.
138 (use "git pull" to update your local branch)
1392020/05/29 07:16:57 Cannot auto-remediate dependency file, not supported: package-lock.json
140 Running after_script 00:02
141 Saving cache 00:01
142 Uploading artifacts for successful job 00:03
143Uploading artifacts...
144gl-dependency-scanning-report.json: found 1 matching files
145Uploading artifacts to coordinator... ok id=37240022 responseStatus=201 Created token=QzMnTkcp
146Job succeeded