Skip to content
Snippets Groups Projects

container_scanning

Passed Started by
Mikołaj Wawrzyniak
@mikolaj_wawrzyniak
This job is archived. Only the complete pipeline can be retried.
1Running with gitlab-runner 13.3.1 (738bbe5a)
2 on docker-auto-scale fa6cab46
3 Preparing the "docker+machine" executor 01:13
4Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
5Starting service registry.gitlab.com/gitlab-org/security-products/analyzers/clair-vulnerabilities-db:latest ...
6Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/clair-vulnerabilities-db:latest ...
7Using docker image sha256:58e4f877c1c68d1e75e8cd22217d369a8f5853d645c6757cba75ad3e24d75df4 for registry.gitlab.com/gitlab-org/security-products/analyzers/clair-vulnerabilities-db:latest ...
8Waiting for services to be up and running...
9Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
10Using docker image sha256:a827709a97324662181722aea6dafe28cf986af1f9dffb02f9b4ea8c314e08d2 for registry.gitlab.com/gitlab-org/security-products/analyzers/klar:2 ...
11 Preparing environment 00:02
12Running on runner-fa6cab46-project-4422333-concurrent-0 via runner-fa6cab46-stg-srm-1598602475-9913af1c...
13 Getting source from Git repository 00:01
14Skipping Git repository setup
15Skipping Git checkout
16Skipping Git submodules setup
17 Executing "step_script" stage of the job script 00:08
18$ /analyzer run
19[INFO] [klar] [2020-08-28T08:15:51Z] ▶ GitLab klar analyzer v2.5.2
20[WARN] [klar] [2020-08-28T08:15:51Z] ▶ Allowlist file with path '/builds/gitlab-org/monitor/monitor-sandbox/clair-whitelist.yml' does not exist, skipping
21[WARN] [klar] [2020-08-28T08:15:51Z] ▶ Allowlist file with path '/builds/gitlab-org/monitor/monitor-sandbox/vulnerability-allowlist.yml' does not exist, skipping
22[INFO] [klar] [2020-08-28T08:15:51Z] ▶ DOCKER_USER and DOCKER_PASSWORD environment variables have not been configured. Defaulting to DOCKER_USER=$CI_REGISTRY_USER and DOCKER_PASSWORD=$CI_REGISTRY_PASSWORD
23[INFO] [klar] [2020-08-28T08:15:51Z] ▶ Successfully connected to the vulnerabilities database
24[INFO] [klar] [2020-08-28T08:15:51Z] ▶ Started Clair server process with PID: 15
25[INFO] [klar] [2020-08-28T08:15:51Z] ▶ Waiting for Clair API to start...
26[WARN] [klar] [2020-08-28T08:15:51Z] ▶ Clair API not ready, waiting 2s before retrying. Retry 1 of 10
27[WARN] [klar] [2020-08-28T08:15:51Z] ▶ Clair log contents:
28 {"Event":"running database migrations","Level":"info","Location":"pgsql.go:216","Time":"2020-08-28 08:15:51.669002"}
29
30[WARN] [klar] [2020-08-28T08:15:51Z] ▶ Clair log contents:
31 {"Event":"database migration ran successfully","Level":"info","Location":"pgsql.go:223","Time":"2020-08-28 08:15:51.738999"}
32
33[WARN] [klar] [2020-08-28T08:15:51Z] ▶ Clair log contents:
34 {"Event":"notifier service is disabled","Level":"info","Location":"notifier.go:77","Time":"2020-08-28 08:15:51.739517"}
35
36[WARN] [klar] [2020-08-28T08:15:51Z] ▶ Clair log contents:
37 {"Event":"starting main API","Level":"info","Location":"api.go:52","Time":"2020-08-28 08:15:51.739712","port":6060}
38
39[INFO] [klar] [2020-08-28T08:15:53Z] ▶ Clair API started successfully.
40[INFO] [klar] [2020-08-28T08:15:53Z] ▶ Scanning container from registry 'registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:ff3ac3799dbb664606ca7ee59515f5b5e7a157f4' for vulnerabilities with severity level 'Unknown' or higher with klar '2.4.0' and clair 'v2.1.4'
41[INFO] [klar] [2020-08-28T08:15:59Z] ▶ Shutting down Clair server with PID: 15
42[INFO] [klar] [2020-08-28T08:15:59Z] ▶ Clair server shut down successfully
43[WARN] [klar] [2020-08-28T08:15:59Z] ▶ Encountered error while reading Dockerfile for remediation, halting remediation processing. Error: Dockerfile does not exist
44[INFO] [klar] [2020-08-28T08:15:59Z] ▶ Image [registry.staging.gitlab.com/gitlab-org/monitor/monitor-sandbox/master:ff3ac3799dbb664606ca7ee59515f5b5e7a157f4] contains NO unapproved vulnerabilities
45 Uploading artifacts for successful job 00:02
46Uploading artifacts...
47gl-container-scanning-report.json: found 1 matching files and directories
48Uploading artifacts as "container_scanning" to coordinator... ok id=37682925 responseStatus=201 Created token=TYAanDVS
49Job succeeded