snyk-container-test-delta ○ success

Duration: 2m 55s
Queued: 2s
📁 Stage: test
🖥 Runner: linux-aws-1
Average Duration
3m 15s
This job: 2m 55s
Failure Rate
5.9%
last 30 days

Job Execution Phases

💡 Tip: Click on any phase bar to jump to that section in the log below

Job Analysis

Job Status: Passed

Status: Job passed successfully

Full Job Log

158 lines
Match - of 0
1 22:29:39 Running with gitlab-runner 18.9.0 (07e534ba)
2 22:29:39 on gitlab-runner-linux-1-746bdd58fd-wpv7t wRxjPbsJX, system ID: r_V0JwLtnOUv5T
3 22:29:39 feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4 22:29:39 Resolving secrets
5 22:29:39 section_start:1778279379:prepare_executor
6 22:29:39 +Preparing the "kubernetes" executor
7 22:29:39 Using Kubernetes namespace: gitlab-runner
8 22:29:39 Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:ubuntu@sha256:e9f07f80e6bc887eb337d47d91f337ea373b4ea8fd3f6a21bfb51107e0497764 ...
9 22:29:39 Using attach strategy to execute scripts...
10 22:29:39 Using effective pull policy of [Always] for container build
11 22:29:39 Using effective pull policy of [Always] for container helper
12 22:29:39 Using effective pull policy of [Always] for container init-permissions
13 22:29:39 section_end:1778279379:prepare_executor
14 22:29:39 +section_start:1778279379:prepare_script
15 22:29:39 +Preparing environment
16 22:29:39 Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17 22:29:39 WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18 22:29:40 Subscribing to Kubernetes Pod events...
19 22:29:40 Type Reason Message
20 22:29:40 Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-1-24gjkh6d to ip-10-0-33-146.eu-central-1.compute.internal
21 22:29:41 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
22 22:29:42 Normal Created Created container: init-permissions
23 22:29:42 Normal Started Started container init-permissions
24 22:29:43 Normal Pulled Container image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:e9f07f80e6bc887eb337d47d91f337ea373b4ea8fd3f6a21bfb51107e0497764" already present on machine
25 22:29:43 Normal Created Created container: build
26 22:29:43 Normal Started Started container build
27 22:29:43 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
28 22:29:43 Normal Created Created container: helper
29 22:29:43 Normal Started Started container helper
30 22:29:47 Running on runner-wrxjpbsjx-project-621-concurrent-1-24gjkh6d via gitlab-runner-linux-1-746bdd58fd-wpv7t...
31 22:29:47
32 22:29:47 section_end:1778279387:prepare_script
33 22:29:47 +section_start:1778279387:get_sources
34 22:29:47 +Getting source from Git repository
35 22:29:47 Gitaly correlation ID: 01KR4VBW0RAG5Y4M8VR08HG4BS
36 22:29:47 Fetching changes with git depth set to 50...
37 22:29:47 Initialized empty Git repository in /build/internal/gitlab-templates/.git/
38 22:29:47 Created fresh repository.
39 22:29:49 Checking out d5797a8b as detached HEAD (ref is refs/merge-requests/642/merge)...
40 22:29:49
41 22:29:49 Skipping Git submodules setup
42 22:29:49
43 22:29:49 section_end:1778279389:get_sources
44 22:29:49 +section_start:1778279389:step_script
45 22:29:49 +Executing "step_script" stage of the job script
46 22:29:49 section_start:1778279389:section_pre_build_script_0[hide_duration=true,collapsed=true] $ function cleanup {
47 22:29:49 rv=$?
48 22:29:49 if [ $rv -ne 0 ]; then
49 22:29:49 echo ""
50 22:29:49 echo " Failure Cause Analysis might help, please open this link:"
51 22:29:49 echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
52 22:29:49 echo ""
53 22:29:49 fi
54 22:29:49 echo ""
55 22:29:49 echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
56 22:29:49 echo ""
57 22:29:49 echo ""
58 22:29:49 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
59 22:29:49 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
60 22:29:49 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
61 22:29:49 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
62 22:29:49 echo ""
63 22:29:49 exit $rv
64 22:29:49 }
65 22:29:49 trap cleanup EXIT
66 22:29:49 echo "INFO: This is the CI job pre_build_script"
67 22:29:49 echo "INFO: It's defined in the backend/infra/aws repo."
68 22:29:49 echo "INFO: These additional Scandit variables are available to you:"
69 22:29:49 echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
70 22:29:49 echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
71 22:29:49 echo " SC_K8S_KYVERNO_PATCHES: |"
72 22:29:49 echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
73 22:29:49 echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
74 22:29:49 if command -v numfmt >/dev/null 2>&1; then
75 22:29:49 echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
76 22:29:49 else
77 22:29:49 echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
78 22:29:49 fi
79 22:29:49 __start_time=${EPOCHSECONDS}
80 22:29:49 echo ""
81 22:29:49 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
82 22:29:49 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
83 22:29:49 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
84 22:29:49 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
85 22:29:49 echo ""
86 22:29:49 echo "Setting up credentials for Gitlab Python registries"
87 22:29:49 mkdir -p ~
88 22:29:49 echo "machine gitlab.scandit.com" > ~/.netrc
89 22:29:49 echo "login gitlab-ci-token" >> ~/.netrc
90 22:29:49 echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
91 22:29:49 chmod 600 ~/.netrc
92 22:29:49 if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
93 22:29:49 git config --global --add safe.directory $CI_PROJECT_DIR
94 22:29:49 fi
95 22:29:49 # Sonarqube server is running on the same cluster. Use internal address
96 22:29:49 export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"
97 22:29:49 section_end:1778279389:section_pre_build_script_0
98 22:29:49 INFO: This is the CI job pre_build_script
99 22:29:49 INFO: It's defined in the backend/infra/aws repo.
100 22:29:49 INFO: These additional Scandit variables are available to you:
101 22:29:49 SC_K8S_NODE_NAME: ip-10-0-33-146.eu-central-1.compute.internal
102 22:29:49 SC_K8S_IMAGE_ID:
103 22:29:49 SC_K8S_KYVERNO_PATCHES: |
104 22:29:49
105 22:29:49 cpu (r/l): 1/4
106 22:29:49 memory (r/l): 1.0GB/16GB
107 22:29:49
108 22:29:49 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-33-146.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-1-24gjkh6d&var-resolution=15&from=1778279389000&to=now
109 22:29:49 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-33-146.eu-central-1.compute.internal&var-resolution=15s&from=1778279389000&to=now
110 22:29:49 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1586734&var-filters=CI_JOB_ID|=|54740781&sortOrder=Ascending&from=1778279389000&to=now
111 22:29:49 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-05-01~2026-05-15&job_name=snyk-container-test-delta&project=internal/gitlab-templates
112 22:29:49
113 22:29:49 Setting up credentials for Gitlab Python registries
114 22:29:49 $ echo "This job scans the given image for known vulnerabilities and outputs the result in the console."
115 22:29:49 This job scans the given image for known vulnerabilities and outputs the result in the console.
116 22:29:49 $ echo "Running 'snyk container test | snyk-delta' on image $IMAGE_URL."
117 22:29:49 Running 'snyk container test | snyk-delta' on image registry.scandit.com/internal/gitlab-templates/python:3.12-MR642.
118 22:29:49 $ snyk container test ${IMAGE_URL} --file=${DOCKERFILE_PATH} --exclude-base-image-vulns --exclude-app-vulns --policy-path=${SNYK_POLICY_PATH} --org=${SNYK_ORG} --json --json-file-output=${OUTPUT_FILE} ${SNYK_EXTRA_PARAMETERS} | snyk-delta --debug
119 22:29:49 2026-05-08T22:29:49.596Z snyk inline mode
120 22:30:05 2026-05-08T22:30:05.269Z snyk Verify input data for JSON structure
121 22:30:05 2026-05-08T22:30:05.455Z snyk Retrieving Snyk Project c1f2e1f2-5df8-4ee1-bb92-12720868582b in org d688d452-cf04-4620-84f0-3431ce4d741a
122 22:32:31 2026-05-08T22:32:31.388Z snyk Monitored snapshot had 17575 issues
123 22:32:31 2026-05-08T22:32:31.388Z snyk Tested project has 0 issues
124 22:32:31 2026-05-08T22:32:31.391Z snyk Severity threshold low
125 22:32:31 2026-05-08T22:32:31.391Z snyk Monitored snapshot had 0 issues
126 22:32:31 2026-05-08T22:32:31.391Z snyk Tested project has 0 issues
127 22:32:31 2026-05-08T22:32:31.391Z snyk Severity threshold low
128 22:32:31 2026-05-08T22:32:31.391Z snyk New Vulns count =0
129 22:32:31 2026-05-08T22:32:31.391Z snyk New Licenses Issues count =0
130 22:32:31 No new issues found !
131 22:32:31
132 22:32:31 Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54740781
133 22:32:31
134 22:32:31
135 22:32:31 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-33-146.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-1-24gjkh6d&var-resolution=15&from=1778279389000&to=1778279551000
136 22:32:31 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-33-146.eu-central-1.compute.internal&var-resolution=15s&from=1778279389000&to=1778279551000
137 22:32:31 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1586734&var-filters=CI_JOB_ID|=|54740781&sortOrder=Ascending&from=1778279389000&to=1778279551000
138 22:32:31 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-05-01~2026-05-15&job_name=snyk-container-test-delta&project=internal/gitlab-templates
139 22:32:31
140 22:32:31
141 22:32:31 section_end:1778279551:step_script
142 22:32:31 +section_start:1778279551:upload_artifacts_on_success
143 22:32:31 +Uploading artifacts for successful job
144 22:32:32 Uploading artifacts...
145 22:32:32 snyk-container-test.json: found 1 matching artifact files and directories
146 22:32:32 Uploading artifacts as "archive" to coordinator... 201 Created correlation_id=01KR4VH4SG279YMGMP1B1AEQ3P id=54740781 responseStatus=201 Created token=64_McHHEy
147 22:32:32 Uploading artifacts...
148 22:32:32 snyk-container-test.json: found 1 matching artifact files and directories
149 22:32:33 Uploading artifacts as "container_scanning" to coordinator... 201 Created correlation_id=01KR4VH550QB2QZ0FZJ7ZGJSY3 id=54740781 responseStatus=201 Created token=64_McHHEy
150 22:32:33
151 22:32:33 section_end:1778279553:upload_artifacts_on_success
152 22:32:33 +section_start:1778279553:cleanup_file_variables
153 22:32:33 +Cleaning up project directory and file based variables
154 22:32:34
155 22:32:34 section_end:1778279554:cleanup_file_variables
156 22:32:34 +
157 22:32:34 Job succeeded
158