snyk-container-test-delta ○ success

Duration: 3m 44s
Queued: 0s
📁 Stage: test
🖥 Runner: linux-aws-1
Average Duration
3m 15s
This job: 3m 44s
Failure Rate
5.9%
last 30 days

Job Execution Phases

💡 Tip: Click on any phase bar to jump to that section in the log below

Job Analysis

Job Status: Passed

Status: Job passed successfully

Full Job Log

159 lines
Match - of 0
1 10:48:23 Running with gitlab-runner 18.9.0 (07e534ba)
2 10:48:23 on gitlab-runner-linux-1-746bdd58fd-tts8x wRxjPbsJX, system ID: r_m6TL6gRr35Rk
3 10:48:23 feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4 10:48:23 Resolving secrets
5 10:48:23 section_start:1778237303:prepare_executor
6 10:48:23 +Preparing the "kubernetes" executor
7 10:48:23 Using Kubernetes namespace: gitlab-runner
8 10:48:23 Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:ubuntu@sha256:980f0a2ea9c35afe7e5bee860ec61ff923eaad5dfcfbba0c143ec0f3e342c6f3 ...
9 10:48:23 Using attach strategy to execute scripts...
10 10:48:23 Using effective pull policy of [Always] for container init-permissions
11 10:48:23 Using effective pull policy of [Always] for container build
12 10:48:23 Using effective pull policy of [Always] for container helper
13 10:48:23 section_end:1778237303:prepare_executor
14 10:48:23 +section_start:1778237303:prepare_script
15 10:48:23 +Preparing environment
16 10:48:23 Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17 10:48:23 WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18 10:48:24 Subscribing to Kubernetes Pod events...
19 10:48:25 Type Reason Message
20 10:48:25 Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-0-zokbrmr7 to ip-10-0-17-81.eu-central-1.compute.internal
21 10:48:28 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
22 10:48:28 Normal Created Created container: init-permissions
23 10:48:28 Normal Started Started container init-permissions
24 10:49:04 Normal Pulling Pulling image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:980f0a2ea9c35afe7e5bee860ec61ff923eaad5dfcfbba0c143ec0f3e342c6f3"
25 10:49:10 Normal Pulled Successfully pulled image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:980f0a2ea9c35afe7e5bee860ec61ff923eaad5dfcfbba0c143ec0f3e342c6f3" in 5.392s (5.392s including waiting). Image size: 123994716 bytes.
26 10:49:10 Normal Created Created container: build
27 10:49:11 Normal Started Started container build
28 10:49:11 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
29 10:49:11 Normal Created Created container: helper
30 10:49:11 Normal Started Started container helper
31 10:49:13 Running on runner-wrxjpbsjx-project-621-concurrent-0-zokbrmr7 via gitlab-runner-linux-1-746bdd58fd-tts8x...
32 10:49:13
33 10:49:13 section_end:1778237353:prepare_script
34 10:49:13 +section_start:1778237353:get_sources
35 10:49:13 +Getting source from Git repository
36 10:49:14 Gitaly correlation ID: 01KR3K7S8J7JAHFT07QYAN6Q77
37 10:49:14 Fetching changes with git depth set to 50...
38 10:49:14 Initialized empty Git repository in /build/internal/gitlab-templates/.git/
39 10:49:14 Created fresh repository.
40 10:49:16 Checking out 6e76a6a0 as detached HEAD (ref is refs/merge-requests/641/merge)...
41 10:49:16
42 10:49:16 Skipping Git submodules setup
43 10:49:16
44 10:49:16 section_end:1778237356:get_sources
45 10:49:16 +section_start:1778237356:step_script
46 10:49:16 +Executing "step_script" stage of the job script
47 10:49:17 section_start:1778237356:section_pre_build_script_0[hide_duration=true,collapsed=true] $ function cleanup {
48 10:49:17 rv=$?
49 10:49:17 if [ $rv -ne 0 ]; then
50 10:49:17 echo ""
51 10:49:17 echo " Failure Cause Analysis might help, please open this link:"
52 10:49:17 echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
53 10:49:17 echo ""
54 10:49:17 fi
55 10:49:17 echo ""
56 10:49:17 echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
57 10:49:17 echo ""
58 10:49:17 echo ""
59 10:49:17 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
60 10:49:17 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
61 10:49:17 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
62 10:49:17 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
63 10:49:17 echo ""
64 10:49:17 exit $rv
65 10:49:17 }
66 10:49:17 trap cleanup EXIT
67 10:49:17 echo "INFO: This is the CI job pre_build_script"
68 10:49:17 echo "INFO: It's defined in the backend/infra/aws repo."
69 10:49:17 echo "INFO: These additional Scandit variables are available to you:"
70 10:49:17 echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
71 10:49:17 echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
72 10:49:17 echo " SC_K8S_KYVERNO_PATCHES: |"
73 10:49:17 echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
74 10:49:17 echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
75 10:49:17 if command -v numfmt >/dev/null 2>&1; then
76 10:49:17 echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
77 10:49:17 else
78 10:49:17 echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
79 10:49:17 fi
80 10:49:17 __start_time=${EPOCHSECONDS}
81 10:49:17 echo ""
82 10:49:17 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
83 10:49:17 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
84 10:49:17 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
85 10:49:17 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
86 10:49:17 echo ""
87 10:49:17 echo "Setting up credentials for Gitlab Python registries"
88 10:49:17 mkdir -p ~
89 10:49:17 echo "machine gitlab.scandit.com" > ~/.netrc
90 10:49:17 echo "login gitlab-ci-token" >> ~/.netrc
91 10:49:17 echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
92 10:49:17 chmod 600 ~/.netrc
93 10:49:17 if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
94 10:49:17 git config --global --add safe.directory $CI_PROJECT_DIR
95 10:49:17 fi
96 10:49:17 # Sonarqube server is running on the same cluster. Use internal address
97 10:49:17 export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"
98 10:49:17 section_end:1778237356:section_pre_build_script_0
99 10:49:17 INFO: This is the CI job pre_build_script
100 10:49:17 INFO: It's defined in the backend/infra/aws repo.
101 10:49:17 INFO: These additional Scandit variables are available to you:
102 10:49:17 SC_K8S_NODE_NAME: ip-10-0-17-81.eu-central-1.compute.internal
103 10:49:17 SC_K8S_IMAGE_ID:
104 10:49:17 SC_K8S_KYVERNO_PATCHES: |
105 10:49:17
106 10:49:17 cpu (r/l): 1/4
107 10:49:17 memory (r/l): 1.0GB/16GB
108 10:49:17
109 10:49:17 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-17-81.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-0-zokbrmr7&var-resolution=15&from=1778237356000&to=now
110 10:49:17 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-17-81.eu-central-1.compute.internal&var-resolution=15s&from=1778237356000&to=now
111 10:49:17 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1585539&var-filters=CI_JOB_ID|=|54677922&sortOrder=Ascending&from=1778237356000&to=now
112 10:49:17 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-05-01~2026-05-15&job_name=snyk-container-test-delta&project=internal/gitlab-templates
113 10:49:17
114 10:49:17 Setting up credentials for Gitlab Python registries
115 10:49:17 $ echo "This job scans the given image for known vulnerabilities and outputs the result in the console."
116 10:49:17 This job scans the given image for known vulnerabilities and outputs the result in the console.
117 10:49:17 $ echo "Running 'snyk container test | snyk-delta' on image $IMAGE_URL."
118 10:49:17 Running 'snyk container test | snyk-delta' on image registry.scandit.com/internal/gitlab-templates/python:3.12-MR641.
119 10:49:17 $ snyk container test ${IMAGE_URL} --file=${DOCKERFILE_PATH} --exclude-base-image-vulns --exclude-app-vulns --policy-path=${SNYK_POLICY_PATH} --org=${SNYK_ORG} --json --json-file-output=${OUTPUT_FILE} ${SNYK_EXTRA_PARAMETERS} | snyk-delta --debug
120 10:49:17 2026-05-08T10:49:16.980Z snyk inline mode
121 10:49:43 2026-05-08T10:49:43.193Z snyk Verify input data for JSON structure
122 10:49:43 2026-05-08T10:49:43.394Z snyk Retrieving Snyk Project c1f2e1f2-5df8-4ee1-bb92-12720868582b in org d688d452-cf04-4620-84f0-3431ce4d741a
123 10:52:04 2026-05-08T10:52:04.026Z snyk Monitored snapshot had 17563 issues
124 10:52:04 2026-05-08T10:52:04.027Z snyk Tested project has 0 issues
125 10:52:04 2026-05-08T10:52:04.035Z snyk Severity threshold low
126 10:52:04 2026-05-08T10:52:04.035Z snyk Monitored snapshot had 0 issues
127 10:52:04 2026-05-08T10:52:04.035Z snyk Tested project has 0 issues
128 10:52:04 2026-05-08T10:52:04.035Z snyk Severity threshold low
129 10:52:04 2026-05-08T10:52:04.035Z snyk New Vulns count =0
130 10:52:04 2026-05-08T10:52:04.035Z snyk New Licenses Issues count =0
131 10:52:04 No new issues found !
132 10:52:04
133 10:52:04 Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54677922
134 10:52:04
135 10:52:04
136 10:52:04 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-17-81.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-0-zokbrmr7&var-resolution=15&from=1778237356000&to=1778237524000
137 10:52:04 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-17-81.eu-central-1.compute.internal&var-resolution=15s&from=1778237356000&to=1778237524000
138 10:52:04 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1585539&var-filters=CI_JOB_ID|=|54677922&sortOrder=Ascending&from=1778237356000&to=1778237524000
139 10:52:04 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-05-01~2026-05-15&job_name=snyk-container-test-delta&project=internal/gitlab-templates
140 10:52:04
141 10:52:04
142 10:52:04 section_end:1778237524:step_script
143 10:52:04 +section_start:1778237524:upload_artifacts_on_success
144 10:52:04 +Uploading artifacts for successful job
145 10:52:04 Uploading artifacts...
146 10:52:04 snyk-container-test.json: found 1 matching artifact files and directories
147 10:52:05 Uploading artifacts as "archive" to coordinator... 201 Created correlation_id=01KR3KEJNM64VF13ZP5VFW6G8P id=54677922 responseStatus=201 Created token=64_pGziyD
148 10:52:05 Uploading artifacts...
149 10:52:05 snyk-container-test.json: found 1 matching artifact files and directories
150 10:52:05 Uploading artifacts as "container_scanning" to coordinator... 201 Created correlation_id=01KR3KEKEH5M57VHTAQPKKK7J3 id=54677922 responseStatus=201 Created token=64_pGziyD
151 10:52:05
152 10:52:05 section_end:1778237525:upload_artifacts_on_success
153 10:52:05 +section_start:1778237525:cleanup_file_variables
154 10:52:05 +Cleaning up project directory and file based variables
155 10:52:06
156 10:52:06 section_end:1778237526:cleanup_file_variables
157 10:52:06 +
158 10:52:06 Job succeeded
159