snyk-container-test-delta ○ success
⏱
Duration: 4m 19s
⏳
Queued: 0s
📁
Stage: test
🖥
Runner: linux-aws-1
Average Duration
3m 15s
This job: 4m 19s
Failure Rate
5.9%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
164 lines
Match - of 0
1
22:37:59
Running with gitlab-runner 18.9.0 (07e534ba)
2
22:37:59
on gitlab-runner-linux-1-746bdd58fd-cqwdq wRxjPbsJX, system ID: r_BbsT8E7thlM4
3
22:37:59
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
22:37:59
Resolving secrets
5
22:37:59
section_start:1778020679:prepare_executor
6
22:37:59
+Preparing the "kubernetes" executor
7
22:37:59
Using Kubernetes namespace: gitlab-runner
8
22:37:59
Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:ubuntu@sha256:c488e3de6b1d5adc01d19a85bd9753c1a3ae142e5e13d97e0bdb4d6659dfd958 ...
9
22:37:59
Using attach strategy to execute scripts...
10
22:37:59
Using effective pull policy of [Always] for container build
11
22:37:59
Using effective pull policy of [Always] for container helper
12
22:37:59
Using effective pull policy of [Always] for container init-permissions
13
22:37:59
section_end:1778020679:prepare_executor
14
22:37:59
+section_start:1778020679:prepare_script
15
22:37:59
+Preparing environment
16
22:37:59
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17
22:37:59
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18
22:38:00
Subscribing to Kubernetes Pod events...
19
22:38:00
Type Reason Message
20
22:38:00
Warning FailedScheduling 0/31 nodes are available: 1 node(s) had untolerated taint {node.kubernetes.io/not-ready: }, 1 node(s) had untolerated taint {scandit.io/clickhouse: production}, 1 node(s) had untolerated taint {scandit.io/clickhouse: staging}, 1 node(s) had untolerated taint {scandit.io/sonarqube: dedicated}, 21 node(s) didn't match Pod's node affinity/selector, 6 Insufficient cpu. preemption: 0/31 nodes are available: 25 Preemption is not helpful for scheduling, 6 No preemption victims found for incoming pod.
21
22:38:07
Warning FailedScheduling 0/31 nodes are available: 1 node(s) had untolerated taint {node.kubernetes.io/not-ready: }, 1 node(s) had untolerated taint {scandit.io/clickhouse: production}, 1 node(s) had untolerated taint {scandit.io/clickhouse: staging}, 1 node(s) had untolerated taint {scandit.io/sonarqube: dedicated}, 21 node(s) didn't match Pod's node affinity/selector, 6 Insufficient cpu. preemption: 0/31 nodes are available: 25 Preemption is not helpful for scheduling, 6 No preemption victims found for incoming pod.
22
22:38:07
Warning FailedScheduling 0/31 nodes are available: 1 node(s) had untolerated taint {node.kubernetes.io/not-ready: }, 1 node(s) had untolerated taint {scandit.io/clickhouse: production}, 1 node(s) had untolerated taint {scandit.io/clickhouse: staging}, 1 node(s) had untolerated taint {scandit.io/sonarqube: dedicated}, 21 node(s) didn't match Pod's node affinity/selector, 6 Insufficient cpu. preemption: 0/31 nodes are available: 25 Preemption is not helpful for scheduling, 6 No preemption victims found for incoming pod.
23
22:38:09
Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-0-u2u54eic to ip-10-0-27-85.eu-central-1.compute.internal
24
22:38:09
Normal TaintManagerEviction Cancelling deletion of Pod gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-0-u2u54eic
25
22:38:12
Normal Pulling Pulling image "gitlab/gitlab-runner-helper:x86_64-v18.8.0"
26
22:38:13
Normal Pulled Successfully pulled image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" in 1.185s (1.185s including waiting). Image size: 39949060 bytes.
27
22:38:15
Normal Created Created container: init-permissions
28
22:38:15
Normal Started Started container init-permissions
29
22:38:17
Normal Pulling Pulling image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:c488e3de6b1d5adc01d19a85bd9753c1a3ae142e5e13d97e0bdb4d6659dfd958"
30
22:38:50
Normal Pulled Successfully pulled image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:c488e3de6b1d5adc01d19a85bd9753c1a3ae142e5e13d97e0bdb4d6659dfd958" in 33.438s (33.438s including waiting). Image size: 123873044 bytes.
31
22:38:55
Normal Created Created container: build
32
22:38:56
Normal Started Started container build
33
22:38:56
Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
34
22:38:56
Normal Created Created container: helper
35
22:38:57
Normal Started Started container helper
36
22:38:58
Running on runner-wrxjpbsjx-project-621-concurrent-0-u2u54eic via gitlab-runner-linux-1-746bdd58fd-cqwdq...
37
22:38:58
38
22:38:58
section_end:1778020738:prepare_script
39
22:38:58
+section_start:1778020738:get_sources
40
22:38:58
+Getting source from Git repository
41
22:38:59
Gitaly correlation ID: 01KQX4MZMBXBFJVY25GJPK0Y8E
42
22:38:59
Fetching changes with git depth set to 50...
43
22:38:59
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
44
22:38:59
Created fresh repository.
45
22:39:01
Checking out 13881c4b as detached HEAD (ref is refs/merge-requests/638/merge)...
46
22:39:01
47
22:39:01
Skipping Git submodules setup
48
22:39:01
49
22:39:01
section_end:1778020741:get_sources
50
22:39:01
+section_start:1778020741:step_script
51
22:39:01
+Executing "step_script" stage of the job script
52
22:39:01
section_start:1778020741:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
53
22:39:01
rv=$?
54
22:39:01
if [ $rv -ne 0 ]; then
55
22:39:01
echo ""
56
22:39:01
echo " Failure Cause Analysis might help, please open this link:"
57
22:39:01
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
58
22:39:01
echo ""
59
22:39:01
fi
60
22:39:01
echo ""
61
22:39:01
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
62
22:39:01
echo ""
63
22:39:01
echo ""
64
22:39:01
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
65
22:39:01
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
66
22:39:01
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
67
22:39:01
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
68
22:39:01
echo ""
69
22:39:01
exit $rv
70
22:39:01
}
71
22:39:01
trap cleanup EXIT
72
22:39:01
echo "INFO: This is the CI job pre_build_script"
73
22:39:01
echo "INFO: It's defined in the backend/infra/aws repo."
74
22:39:01
echo "INFO: These additional Scandit variables are available to you:"
75
22:39:01
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
76
22:39:01
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
77
22:39:01
echo " SC_K8S_KYVERNO_PATCHES: |"
78
22:39:01
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
79
22:39:01
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
80
22:39:01
if command -v numfmt >/dev/null 2>&1; then
81
22:39:01
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
82
22:39:01
else
83
22:39:01
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
84
22:39:01
fi
85
22:39:01
__start_time=${EPOCHSECONDS}
86
22:39:01
echo ""
87
22:39:01
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
88
22:39:01
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
89
22:39:01
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
90
22:39:01
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
91
22:39:01
echo ""
92
22:39:01
echo "Setting up credentials for Gitlab Python registries"
93
22:39:01
mkdir -p ~
94
22:39:01
echo "machine gitlab.scandit.com" > ~/.netrc
95
22:39:01
echo "login gitlab-ci-token" >> ~/.netrc
96
22:39:01
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
97
22:39:01
chmod 600 ~/.netrc
98
22:39:01
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
99
22:39:01
git config --global --add safe.directory $CI_PROJECT_DIR
100
22:39:01
fi
101
22:39:01
# Sonarqube server is running on the same cluster. Use internal address
102
22:39:01
export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"
103
22:39:01
section_end:1778020741:section_pre_build_script_0
104
22:39:01
INFO: This is the CI job pre_build_script
105
22:39:01
INFO: It's defined in the backend/infra/aws repo.
106
22:39:01
INFO: These additional Scandit variables are available to you:
107
22:39:01
SC_K8S_NODE_NAME: ip-10-0-27-85.eu-central-1.compute.internal
108
22:39:01
SC_K8S_IMAGE_ID:
109
22:39:01
SC_K8S_KYVERNO_PATCHES: |
110
22:39:01
111
22:39:01
cpu (r/l): 1/4
112
22:39:01
memory (r/l): 1.0GB/16GB
113
22:39:01
114
22:39:01
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-27-85.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-0-u2u54eic&var-resolution=15&from=1778020741000&to=now
115
22:39:01
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-27-85.eu-central-1.compute.internal&var-resolution=15s&from=1778020741000&to=now
116
22:39:01
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1580353&var-filters=CI_JOB_ID|=|54442852&sortOrder=Ascending&from=1778020741000&to=now
117
22:39:01
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-28~2026-05-12&job_name=snyk-container-test-delta&project=internal/gitlab-templates
118
22:39:01
119
22:39:01
Setting up credentials for Gitlab Python registries
120
22:39:01
$ echo "This job scans the given image for known vulnerabilities and outputs the result in the console."
121
22:39:01
This job scans the given image for known vulnerabilities and outputs the result in the console.
122
22:39:01
$ echo "Running 'snyk container test | snyk-delta' on image $IMAGE_URL."
123
22:39:01
Running 'snyk container test | snyk-delta' on image registry.scandit.com/internal/gitlab-templates/python:3.12-MR638.
124
22:39:01
$ snyk container test ${IMAGE_URL} --file=${DOCKERFILE_PATH} --exclude-base-image-vulns --exclude-app-vulns --policy-path=${SNYK_POLICY_PATH} --org=${SNYK_ORG} --json --json-file-output=${OUTPUT_FILE} ${SNYK_EXTRA_PARAMETERS} | snyk-delta --debug
125
22:39:02
2026-05-05T22:39:01.913Z snyk inline mode
126
22:39:28
2026-05-05T22:39:28.709Z snyk Verify input data for JSON structure
127
22:39:29
2026-05-05T22:39:28.913Z snyk Retrieving Snyk Project c1f2e1f2-5df8-4ee1-bb92-12720868582b in org d688d452-cf04-4620-84f0-3431ce4d741a
128
22:42:17
2026-05-05T22:42:17.050Z snyk Monitored snapshot had 17563 issues
129
22:42:17
2026-05-05T22:42:17.051Z snyk Tested project has 0 issues
130
22:42:17
2026-05-05T22:42:17.057Z snyk Severity threshold low
131
22:42:17
2026-05-05T22:42:17.057Z snyk Monitored snapshot had 0 issues
132
22:42:17
2026-05-05T22:42:17.057Z snyk Tested project has 0 issues
133
22:42:17
2026-05-05T22:42:17.057Z snyk Severity threshold low
134
22:42:17
2026-05-05T22:42:17.057Z snyk New Vulns count =0
135
22:42:17
2026-05-05T22:42:17.057Z snyk New Licenses Issues count =0
136
22:42:17
No new issues found !
137
22:42:17
138
22:42:17
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54442852
139
22:42:17
140
22:42:17
141
22:42:17
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-27-85.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-0-u2u54eic&var-resolution=15&from=1778020741000&to=1778020937000
142
22:42:17
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-27-85.eu-central-1.compute.internal&var-resolution=15s&from=1778020741000&to=1778020937000
143
22:42:17
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1580353&var-filters=CI_JOB_ID|=|54442852&sortOrder=Ascending&from=1778020741000&to=1778020937000
144
22:42:17
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-28~2026-05-12&job_name=snyk-container-test-delta&project=internal/gitlab-templates
145
22:42:17
146
22:42:17
147
22:42:17
section_end:1778020937:step_script
148
22:42:17
+section_start:1778020937:upload_artifacts_on_success
149
22:42:17
+Uploading artifacts for successful job
150
22:42:18
Uploading artifacts...
151
22:42:18
snyk-container-test.json: found 1 matching artifact files and directories
152
22:42:18
Uploading artifacts as "archive" to coordinator... 201 Created correlation_id=01KQX4WW4G1XQQGFRFFJ20VHZ5 id=54442852 responseStatus=201 Created token=64_YtEYLP
153
22:42:18
Uploading artifacts...
154
22:42:18
snyk-container-test.json: found 1 matching artifact files and directories
155
22:42:18
Uploading artifacts as "container_scanning" to coordinator... 201 Created correlation_id=01KQX4WWJZ92RRSHK064DE4XE4 id=54442852 responseStatus=201 Created token=64_YtEYLP
156
22:42:18
157
22:42:18
section_end:1778020938:upload_artifacts_on_success
158
22:42:18
+section_start:1778020938:cleanup_file_variables
159
22:42:18
+Cleaning up project directory and file based variables
160
22:42:19
161
22:42:19
section_end:1778020939:cleanup_file_variables
162
22:42:19
+
163
22:42:19
Job succeeded
164