Skip to content
Snippets Groups Projects

container_scanning

Passed Started by
Miguel Rincon
@mrincon
This job is archived. Only the complete pipeline can be retried.
1Running with gitlab-runner 13.1.0-rc1 (b9d289ed)
2 on docker-auto-scale 72989761
3 Preparing the "docker+machine" executor 01:19
4Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
5Starting service registry.gitlab.com/gitlab-org/security-products/analyzers/clair-vulnerabilities-db:latest ...
6Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/clair-vulnerabilities-db:latest ...
7Using docker image sha256:24a1ac7673adfe7849fac1e5af5b6b89df8310cea2914e47281fe5e148860792 for registry.gitlab.com/gitlab-org/security-products/analyzers/clair-vulnerabilities-db:latest ...
8Waiting for services to be up and running...
9Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
10Using docker image sha256:0ee30266ff6e71bfda5265198c7f2d0aa0135d46981cf38a3c6abf1f805ac8cc for registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
11 Preparing environment 00:01
12Running on runner-72989761-project-4422333-concurrent-0 via runner-72989761-stg-srm-1592801164-57895d73...
13 Getting source from Git repository 00:01
14Skipping Git repository setup
15Skipping Git checkout
16Skipping Git submodules setup
17 Executing "step_script" stage of the job script 00:08
18$ /analyzer run
19[INFO] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ GitLab klar analyzer v2.4.6
20[WARN] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Whitelist file with path '/builds/gitlab-org/monitor/monitor-sandbox/clair-whitelist.yml' does not exist, skipping
21[INFO] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ DOCKER_USER and DOCKER_PASSWORD environment variables have not been configured. Defaulting to DOCKER_USER=$CI_REGISTRY_USER and DOCKER_PASSWORD=$CI_REGISTRY_PASSWORD
22[INFO] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Successfully connected to the vulnerabilities database
23[INFO] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Started Clair server process with PID: 14
24[INFO] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Waiting for Clair API to start...
25[WARN] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Clair API not ready, waiting 2s before retrying. Retry 1 of 10
26[WARN] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Clair log contents:
27 {"Event":"running database migrations","Level":"info","Location":"pgsql.go:216","Time":"2020-06-22 04:47:26.095884"}
28
29[WARN] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Clair log contents:
30 {"Event":"database migration ran successfully","Level":"info","Location":"pgsql.go:223","Time":"2020-06-22 04:47:26.174625"}
31
32[WARN] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Clair log contents:
33 {"Event":"notifier service is disabled","Level":"info","Location":"notifier.go:77","Time":"2020-06-22 04:47:26.175208"}
34
35[WARN] [klar] [Mon, 22 Jun 2020 04:47:26 UTC] ▶ Clair log contents:
36 {"Event":"starting main API","Level":"info","Location":"api.go:52","Time":"2020-06-22 04:47:26.175420","port":6060}
37
38[INFO] [klar] [Mon, 22 Jun 2020 04:47:28 UTC] ▶ Clair API started successfully.
39[INFO] [klar] [Mon, 22 Jun 2020 04:47:28 UTC] ▶ Scanning container from registry 'registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:0f5f6e32067c78117de17239f430d0d5abd5a8ae' for vulnerabilities with severity level 'Unknown' or higher with klar '2.4.0' and clair 'v2.1.3'
40[INFO] [klar] [Mon, 22 Jun 2020 04:47:33 UTC] ▶ Shutting down Clair server with PID: 14
41[INFO] [klar] [Mon, 22 Jun 2020 04:47:33 UTC] ▶ Clair server shut down successfully
42[WARN] [klar] [Mon, 22 Jun 2020 04:47:33 UTC] ▶ Encountered error while reading Dockerfile for remediation, halting remediation processing. Error: Dockerfile does not exist
43[INFO] [klar] [Mon, 22 Jun 2020 04:47:33 UTC] ▶ Image [registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:0f5f6e32067c78117de17239f430d0d5abd5a8ae] contains NO unapproved vulnerabilities
44 Uploading artifacts for successful job 00:02
45Uploading artifacts...
46gl-container-scanning-report.json: found 1 matching files and directories
47Uploading artifacts as "container_scanning" to coordinator... ok id=37263178 responseStatus=201 Created token=1LoZCRD9
48Job succeeded