Running with gitlab-runner 13.5.0 (ece86343)  on System Shared Runner J9EsdQ92 section_start:1635897793:resolve_secrets Resolving secrets section_end:1635897793:resolve_secrets section_start:1635897793:prepare_executor Preparing the "docker" executor Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python:2 ... Pulling docker image gitlab/gitlab-runner-helper:x86_64-6fbc7474 ... Using docker image sha256:4ab73fe41bd466dff16a0e732b568862dce676f1d49de2a85309349266c882f8 for gitlab/gitlab-runner-helper:x86_64-6fbc7474 with digest gitlab/gitlab-runner-helper@sha256:6275194f2d67051ee4538cbd086c4c61b35e15d4439f76b5b5b710bee7344895 ... Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python:2 ... Using docker image sha256:177120f6c342ece4077ddaaf745068ae0474489d2e354e898696649e4c54d4d6 for registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python:2 with digest registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python@sha256:426dca38f56a040f9a4aff6afb8979492c07f29987582392bfdc381f047abe90 ... section_end:1635897800:prepare_executor section_start:1635897800:prepare_script Preparing environment Running on osm-gitlab via 7dbf9d05aeed... section_end:1635897801:prepare_script section_start:1635897801:get_sources Getting source from Git repository Fetching changes with git depth set to 50... Reinitialized existing Git repository in /builds/gitlab/osm/im/.git/ Checking out 2ab6e9be as master... Removing gl-sast-report.json Removing semgrep.sarif Skipping Git submodules setup section_end:1635897808:get_sources section_start:1635897808:step_script Executing "step_script" stage of the job script $ /analyzer run [INFO] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ GitLab gemnasium-python analyzer v2.18.5 [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ scanning directory: . [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ skip ignored directory: .git [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ electing pip for pypi because this is the first match [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ rejecting setup.py as handled by setuptools [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ electing pip for pypi because this is the first match [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ rejecting setup.py as handled by setuptools [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ skipping sub-directories [DEBU] [gemnasium-python] [2021-11-03T00:03:29Z] ▶ Exporting dependencies for /builds/gitlab/osm/im/requirements.txt [DEBU] [gemnasium-python] [2021-11-03T00:03:36Z] ▶ /usr/local/bin/pip download --disable-pip-version-check --dest ./dist -r requirements.txt Collecting bitarray==1.8.1 Downloading bitarray-1.8.1.tar.gz (62 kB) Collecting enum34==1.1.10 Downloading enum34-1.1.10-py3-none-any.whl (11 kB) Collecting lxml==4.6.3 Downloading lxml-4.6.3-cp36-cp36m-manylinux2014_x86_64.whl (6.3 MB) Collecting pyang==2.4.0 Downloading pyang-2.4.0-py2.py3-none-any.whl (591 kB) Collecting pyangbind==0.8.1 Downloading pyangbind-0.8.1.tar.gz (48 kB) Collecting pyyaml==5.4.1 Downloading PyYAML-5.4.1-cp36-cp36m-manylinux1_x86_64.whl (640 kB) Collecting regex==2021.3.17 Downloading regex-2021.3.17-cp36-cp36m-manylinux2014_x86_64.whl (723 kB) Collecting six==1.15.0 Downloading six-1.15.0-py2.py3-none-any.whl (10 kB) Saved ./dist/bitarray-1.8.1.tar.gz Saved ./dist/enum34-1.1.10-py3-none-any.whl Saved ./dist/lxml-4.6.3-cp36-cp36m-manylinux2014_x86_64.whl Saved ./dist/pyang-2.4.0-py2.py3-none-any.whl Saved ./dist/pyangbind-0.8.1.tar.gz Saved ./dist/PyYAML-5.4.1-cp36-cp36m-manylinux1_x86_64.whl Saved ./dist/regex-2021.3.17-cp36-cp36m-manylinux2014_x86_64.whl Saved ./dist/six-1.15.0-py2.py3-none-any.whl Successfully downloaded bitarray enum34 lxml pyang pyangbind pyyaml regex six [DEBU] [gemnasium-python] [2021-11-03T00:03:47Z] ▶ /usr/local/bin/pip install --disable-pip-version-check --find-links ./dist --requirement requirements.txt Looking in links: ./dist Collecting bitarray==1.8.1 Using cached bitarray-1.8.1.tar.gz (62 kB) Collecting enum34==1.1.10 Using cached enum34-1.1.10-py3-none-any.whl (11 kB) Collecting lxml==4.6.3 Using cached lxml-4.6.3-cp36-cp36m-manylinux2014_x86_64.whl (6.3 MB) Collecting pyang==2.4.0 Using cached pyang-2.4.0-py2.py3-none-any.whl (591 kB) Collecting pyangbind==0.8.1 Using cached pyangbind-0.8.1.tar.gz (48 kB) Collecting pyyaml==5.4.1 Using cached PyYAML-5.4.1-cp36-cp36m-manylinux1_x86_64.whl (640 kB) Collecting regex==2021.3.17 Using cached regex-2021.3.17-cp36-cp36m-manylinux2014_x86_64.whl (723 kB) Collecting six==1.15.0 Using cached six-1.15.0-py2.py3-none-any.whl (10 kB) Building wheels for collected packages: bitarray, pyangbind Building wheel for bitarray (setup.py): started Building wheel for bitarray (setup.py): finished with status 'done' Created wheel for bitarray: filename=bitarray-1.8.1-cp36-cp36m-linux_x86_64.whl size=70576 sha256=7defcb9c5479610524bf5438d2b0add2c6339abd90d01b0ce8b18b0a527702af Stored in directory: /tmp/.cache/pip/wheels/06/56/e5/6eb78d4f54ad7874a6f68bcefc2c82663d5ca22d6503351a81 Building wheel for pyangbind (setup.py): started Building wheel for pyangbind (setup.py): finished with status 'done' Created wheel for pyangbind: filename=pyangbind-0.8.1-py3-none-any.whl size=47773 sha256=38224ceef1443924e3da631a356d4a1d8800ade909c76b6bdf484dea8a7a26ff Stored in directory: /tmp/.cache/pip/wheels/d7/5f/16/210e82959deac8e57e539448ff940505a957125a521cb2a828 Successfully built bitarray pyangbind Installing collected packages: lxml, six, regex, pyang, enum34, bitarray, pyyaml, pyangbind Attempting uninstall: six Found existing installation: six 1.14.0 Uninstalling six-1.14.0: Successfully uninstalled six-1.14.0 Successfully installed bitarray-1.8.1 enum34-1.1.10 lxml-4.6.3 pyang-2.4.0 pyangbind-0.8.1 pyyaml-5.4.1 regex-2021.3.17 six-1.15.0 WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv [DEBU] [gemnasium-python] [2021-11-03T00:03:48Z] ▶ /usr/bin/git -C /gemnasium-db remote set-url origin https://gitlab.com/gitlab-org/security-products/gemnasium-db.git [DEBU] [gemnasium-python] [2021-11-03T00:03:49Z] ▶ /usr/bin/git -C /gemnasium-db fetch --force --tags origin master From https://gitlab.com/gitlab-org/security-products/gemnasium-db * branch master -> FETCH_HEAD * [new tag] v2.0.16 -> v2.0.16 t [tag update] version_latest -> version_latest d8a3a38af..e5b75208e master -> origin/master [DEBU] [gemnasium-python] [2021-11-03T00:03:50Z] ▶ /usr/bin/git -C /gemnasium-db checkout master Already on 'master' Your branch is behind 'origin/master' by 1 commit, and can be fast-forwarded. (use "git pull" to update your local branch) [DEBU] [gemnasium-python] [2021-11-03T00:03:50Z] ▶ /usr/bin/git -C /gemnasium-db symbolic-ref -q HEAD [DEBU] [gemnasium-python] [2021-11-03T00:03:50Z] ▶ /usr/bin/git -C /gemnasium-db reset --hard origin/master HEAD is now at e5b75208e Update CVE-2021-41168.yml [DEBU] [gemnasium-python] [2021-11-03T00:03:50Z] ▶ /usr/bin/git -C /gemnasium-db rev-parse HEAD e5b75208ee68382bc0a7db065aad15fa837e8dfa [INFO] [gemnasium-python] [2021-11-03T00:03:50Z] ▶ Using commit e5b75208ee68382bc0a7db065aad15fa837e8dfa of vulnerability database section_end:1635897831:step_script section_start:1635897831:upload_artifacts_on_success Uploading artifacts for successful job Uploading artifacts... gl-dependency-scanning-report.json: found 1 matching files and directories Uploading artifacts as "dependency_scanning" to coordinator... ok id=15615 responseStatus=201 Created token=n2F7cMs9 section_end:1635897832:upload_artifacts_on_success section_start:1635897832:cleanup_file_variables Cleaning up file based variables section_end:1635897833:cleanup_file_variables Job succeeded