Running with gitlab-runner 14.7.0 (98daeee0)  on System Shared Runner J9EsdQ92 section_start:1645758207:resolve_secrets Resolving secrets section_end:1645758207:resolve_secrets section_start:1645758207:prepare_executor Preparing the "docker" executor Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python:2 ... Pulling docker image gitlab/gitlab-runner-helper:x86_64-6fbc7474 ... Using docker image sha256:4ab73fe41bd466dff16a0e732b568862dce676f1d49de2a85309349266c882f8 for gitlab/gitlab-runner-helper:x86_64-6fbc7474 with digest gitlab/gitlab-runner-helper@sha256:6275194f2d67051ee4538cbd086c4c61b35e15d4439f76b5b5b710bee7344895 ... Using docker image sha256:4ab73fe41bd466dff16a0e732b568862dce676f1d49de2a85309349266c882f8 for gitlab/gitlab-runner-helper:x86_64-6fbc7474 with digest gitlab/gitlab-runner-helper@sha256:6275194f2d67051ee4538cbd086c4c61b35e15d4439f76b5b5b710bee7344895 ... Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python:2 ... Using docker image sha256:5dca3d28417bf66b83f615afa63556d96032c60684d2c9884955b7b0c11324f9 for registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python:2 with digest registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python@sha256:0645a34fcf5f8e3a11b60e1f32b822402c571e36df2a112248a63069e9cab821 ... section_end:1645758214:prepare_executor section_start:1645758214:prepare_script Preparing environment Using docker image sha256:4ab73fe41bd466dff16a0e732b568862dce676f1d49de2a85309349266c882f8 for gitlab/gitlab-runner-helper:x86_64-6fbc7474 with digest gitlab/gitlab-runner-helper@sha256:6275194f2d67051ee4538cbd086c4c61b35e15d4439f76b5b5b710bee7344895 ... Running on osm-gitlab via 041affc38694... section_end:1645758216:prepare_script section_start:1645758216:get_sources Getting source from Git repository Using docker image sha256:4ab73fe41bd466dff16a0e732b568862dce676f1d49de2a85309349266c882f8 for gitlab/gitlab-runner-helper:x86_64-6fbc7474 with digest gitlab/gitlab-runner-helper@sha256:6275194f2d67051ee4538cbd086c4c61b35e15d4439f76b5b5b710bee7344895 ... Fetching changes with git depth set to 50... Reinitialized existing Git repository in /builds/gitlab/osm/lcm/.git/ Checking out f6bb9a10 as master... Removing .tool-versions Removing .venv/ Removing doc/ Removing gl-license-scanning-report.json Skipping Git submodules setup section_end:1645758238:get_sources section_start:1645758238:step_script Executing "step_script" stage of the job script Using docker image sha256:5dca3d28417bf66b83f615afa63556d96032c60684d2c9884955b7b0c11324f9 for registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python:2 with digest registry.gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python@sha256:0645a34fcf5f8e3a11b60e1f32b822402c571e36df2a112248a63069e9cab821 ... $ /analyzer run [INFO] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ GitLab gemnasium-python analyzer v2.19.3 [DEBU] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ inspect directory: . [DEBU] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ skip ignored directory: .git [DEBU] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ electing pip for pypi because this is the first match [DEBU] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ rejecting setup.py as handled by setuptools [DEBU] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ electing pip for pypi because this is the first match [DEBU] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ rejecting setup.py as handled by setuptools [INFO] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ Detected supported dependency files in '.'. Dependency files detected in this directory will be processed. Dependency files in other directories will be skipped. [DEBU] [gemnasium-python] [2022-02-25T03:04:01Z] ▶ Exporting dependencies for /builds/gitlab/osm/lcm/requirements.txt [DEBU] [gemnasium-python] [2022-02-25T03:04:31Z] ▶ /usr/local/bin/pip download --disable-pip-version-check --dest ./dist -r requirements.txt Collecting aiohttp==3.7.4.post0 Downloading aiohttp-3.7.4.post0-cp36-cp36m-manylinux2014_x86_64.whl (1.3 MB) Collecting async-timeout==3.0.1 Downloading async_timeout-3.0.1-py3-none-any.whl (8.2 kB) Collecting attrs==21.4.0 Downloading attrs-21.4.0-py2.py3-none-any.whl (60 kB) Collecting chardet==4.0.0 Downloading chardet-4.0.0-py2.py3-none-any.whl (178 kB) Collecting grpcio==1.43.0 Downloading grpcio-1.43.0-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (4.1 MB) Collecting grpcio-tools==1.43.0 Downloading grpcio_tools-1.43.0-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (2.4 MB) Collecting grpclib==0.4.2 Downloading grpclib-0.4.2.tar.gz (58 kB) Installing build dependencies: started Installing build dependencies: finished with status 'done' Getting requirements to build wheel: started Getting requirements to build wheel: finished with status 'done' Preparing wheel metadata: started Preparing wheel metadata: finished with status 'done' Collecting h2==4.1.0 Downloading h2-4.1.0-py3-none-any.whl (57 kB) Collecting hpack==4.0.0 Downloading hpack-4.0.0-py3-none-any.whl (32 kB) Collecting hyperframe==6.0.1 Downloading hyperframe-6.0.1-py3-none-any.whl (12 kB) Collecting idna==3.3 Downloading idna-3.3-py3-none-any.whl (61 kB) Collecting jinja2==3.0.3 Downloading Jinja2-3.0.3-py3-none-any.whl (133 kB) Collecting markupsafe==2.0.1 Downloading MarkupSafe-2.0.1-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl (30 kB) Collecting multidict==5.2.0 Downloading multidict-5.2.0-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl (159 kB) Collecting protobuf==3.19.3 Downloading protobuf-3.19.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (1.1 MB) Collecting pyyaml==5.4.1 Downloading PyYAML-5.4.1-cp36-cp36m-manylinux1_x86_64.whl (640 kB) Collecting six==1.16.0 Downloading six-1.16.0-py2.py3-none-any.whl (11 kB) Collecting typing-extensions==4.0.1 Downloading typing_extensions-4.0.1-py3-none-any.whl (22 kB) Collecting yarl==1.7.2 Downloading yarl-1.7.2-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl (270 kB) Collecting idna-ssl>=1.0 Downloading idna-ssl-1.1.0.tar.gz (3.4 kB) Collecting setuptools Using cached setuptools-59.6.0-py3-none-any.whl (952 kB) Collecting dataclasses Downloading dataclasses-0.8-py3-none-any.whl (19 kB) Saved ./dist/aiohttp-3.7.4.post0-cp36-cp36m-manylinux2014_x86_64.whl Saved ./dist/async_timeout-3.0.1-py3-none-any.whl Saved ./dist/attrs-21.4.0-py2.py3-none-any.whl Saved ./dist/chardet-4.0.0-py2.py3-none-any.whl Saved ./dist/grpcio-1.43.0-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl Saved ./dist/grpcio_tools-1.43.0-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl Saved ./dist/grpclib-0.4.2.tar.gz Saved ./dist/h2-4.1.0-py3-none-any.whl Saved ./dist/hpack-4.0.0-py3-none-any.whl Saved ./dist/hyperframe-6.0.1-py3-none-any.whl Saved ./dist/idna-3.3-py3-none-any.whl Saved ./dist/Jinja2-3.0.3-py3-none-any.whl Saved ./dist/MarkupSafe-2.0.1-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl Saved ./dist/multidict-5.2.0-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl Saved ./dist/protobuf-3.19.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl Saved ./dist/PyYAML-5.4.1-cp36-cp36m-manylinux1_x86_64.whl Saved ./dist/six-1.16.0-py2.py3-none-any.whl Saved ./dist/typing_extensions-4.0.1-py3-none-any.whl Saved ./dist/yarl-1.7.2-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl Saved ./dist/idna-ssl-1.1.0.tar.gz Saved ./dist/dataclasses-0.8-py3-none-any.whl Saved ./dist/setuptools-59.6.0-py3-none-any.whl Successfully downloaded aiohttp async-timeout attrs chardet grpcio grpcio-tools grpclib h2 hpack hyperframe idna jinja2 markupsafe multidict protobuf pyyaml six typing-extensions yarl idna-ssl dataclasses setuptools [DEBU] [gemnasium-python] [2022-02-25T03:04:58Z] ▶ /usr/local/bin/pip install --disable-pip-version-check --find-links ./dist --requirement requirements.txt Looking in links: ./dist Collecting aiohttp==3.7.4.post0 Using cached aiohttp-3.7.4.post0-cp36-cp36m-manylinux2014_x86_64.whl (1.3 MB) Collecting async-timeout==3.0.1 Using cached async_timeout-3.0.1-py3-none-any.whl (8.2 kB) Collecting attrs==21.4.0 Using cached attrs-21.4.0-py2.py3-none-any.whl (60 kB) Collecting chardet==4.0.0 Using cached chardet-4.0.0-py2.py3-none-any.whl (178 kB) Collecting grpcio==1.43.0 Using cached grpcio-1.43.0-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (4.1 MB) Collecting grpcio-tools==1.43.0 Using cached grpcio_tools-1.43.0-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (2.4 MB) Collecting grpclib==0.4.2 Using cached grpclib-0.4.2.tar.gz (58 kB) Installing build dependencies: started Installing build dependencies: finished with status 'done' Getting requirements to build wheel: started Getting requirements to build wheel: finished with status 'done' Preparing wheel metadata: started Preparing wheel metadata: finished with status 'done' Collecting h2==4.1.0 Using cached h2-4.1.0-py3-none-any.whl (57 kB) Collecting hpack==4.0.0 Using cached hpack-4.0.0-py3-none-any.whl (32 kB) Collecting hyperframe==6.0.1 Using cached hyperframe-6.0.1-py3-none-any.whl (12 kB) Collecting idna==3.3 Using cached idna-3.3-py3-none-any.whl (61 kB) Collecting jinja2==3.0.3 Using cached Jinja2-3.0.3-py3-none-any.whl (133 kB) Collecting markupsafe==2.0.1 Using cached MarkupSafe-2.0.1-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl (30 kB) Collecting multidict==5.2.0 Using cached multidict-5.2.0-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl (159 kB) Collecting protobuf==3.19.3 Using cached protobuf-3.19.3-cp36-cp36m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl (1.1 MB) Collecting pyyaml==5.4.1 Using cached PyYAML-5.4.1-cp36-cp36m-manylinux1_x86_64.whl (640 kB) Collecting six==1.16.0 Using cached six-1.16.0-py2.py3-none-any.whl (11 kB) Collecting typing-extensions==4.0.1 Using cached typing_extensions-4.0.1-py3-none-any.whl (22 kB) Collecting yarl==1.7.2 Using cached yarl-1.7.2-cp36-cp36m-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_12_x86_64.manylinux2010_x86_64.whl (270 kB) Collecting idna-ssl>=1.0 Using cached idna-ssl-1.1.0.tar.gz (3.4 kB) Requirement already satisfied: setuptools in /usr/local/lib/python3.6/site-packages (from grpcio-tools==1.43.0->-r requirements.txt (line 29)) (57.5.0) Collecting dataclasses Using cached dataclasses-0.8-py3-none-any.whl (19 kB) Building wheels for collected packages: grpclib, idna-ssl Building wheel for grpclib (PEP 517): started Building wheel for grpclib (PEP 517): finished with status 'done' Created wheel for grpclib: filename=grpclib-0.4.2-py3-none-any.whl size=70602 sha256=9da8c3541cb26c293fa2c272e8b364911dd483a713031ad7ea9099d02f305676 Stored in directory: /tmp/.cache/pip/wheels/ce/27/89/b840605c158edc0cdd47dff838d8b56a31558971ead8dd387f Building wheel for idna-ssl (setup.py): started Building wheel for idna-ssl (setup.py): finished with status 'done' Created wheel for idna-ssl: filename=idna_ssl-1.1.0-py3-none-any.whl size=3178 sha256=82d5ad4f85ac7f5620dbc8868fbe210c604c0d1313a537bb6e2b345ab46333cb Stored in directory: /tmp/.cache/pip/wheels/6a/f5/9c/f8331a854f7a8739cf0e74c13854e4dd7b1af11b04fe1dde13 Successfully built grpclib idna-ssl Installing collected packages: typing-extensions, six, multidict, idna, hyperframe, hpack, yarl, protobuf, markupsafe, idna-ssl, h2, grpcio, dataclasses, chardet, attrs, async-timeout, pyyaml, jinja2, grpclib, grpcio-tools, aiohttp Attempting uninstall: six Found existing installation: six 1.14.0 Uninstalling six-1.14.0: Successfully uninstalled six-1.14.0 Attempting uninstall: attrs Found existing installation: attrs 19.3.0 Uninstalling attrs-19.3.0: Successfully uninstalled attrs-19.3.0 Successfully installed aiohttp-3.7.4.post0 async-timeout-3.0.1 attrs-21.4.0 chardet-4.0.0 dataclasses-0.8 grpcio-1.43.0 grpcio-tools-1.43.0 grpclib-0.4.2 h2-4.1.0 hpack-4.0.0 hyperframe-6.0.1 idna-3.3 idna-ssl-1.1.0 jinja2-3.0.3 markupsafe-2.0.1 multidict-5.2.0 protobuf-3.19.3 pyyaml-5.4.1 six-1.16.0 typing-extensions-4.0.1 yarl-1.7.2 WARNING: Running pip as the 'root' user can result in broken permissions and conflicting behaviour with the system package manager. It is recommended to use a virtual environment instead: https://pip.pypa.io/warnings/venv [DEBU] [gemnasium-python] [2022-02-25T03:04:59Z] ▶ /usr/bin/git -C /gemnasium-db remote set-url origin https://gitlab.com/gitlab-org/security-products/gemnasium-db.git [DEBU] [gemnasium-python] [2022-02-25T03:05:01Z] ▶ /usr/bin/git -C /gemnasium-db fetch --force --tags origin master From https://gitlab.com/gitlab-org/security-products/gemnasium-db * branch master -> FETCH_HEAD * [new tag] v2.0.656 -> v2.0.656 * [new tag] v2.0.657 -> v2.0.657 * [new tag] v2.0.658 -> v2.0.658 * [new tag] v2.0.659 -> v2.0.659 * [new tag] v2.0.660 -> v2.0.660 t [tag update] version_latest -> version_latest deb74d191..3eeb01920 master -> origin/master [DEBU] [gemnasium-python] [2022-02-25T03:05:02Z] ▶ /usr/bin/git -C /gemnasium-db checkout master Already on 'master' Your branch is behind 'origin/master' by 37 commits, and can be fast-forwarded. (use "git pull" to update your local branch) [DEBU] [gemnasium-python] [2022-02-25T03:05:02Z] ▶ /usr/bin/git -C /gemnasium-db symbolic-ref -q HEAD [DEBU] [gemnasium-python] [2022-02-25T03:05:02Z] ▶ /usr/bin/git -C /gemnasium-db reset --hard origin/master HEAD is now at 3eeb01920 Merge branch 'adbcurate/maven_org_jenkins_ci_plugins_gitlab_oauth_CVE_2022_25196_yml' into 'master' [DEBU] [gemnasium-python] [2022-02-25T03:05:02Z] ▶ /usr/bin/git -C /gemnasium-db rev-parse HEAD 3eeb01920ed716b947b85caf8273aefdfbe19093 [INFO] [gemnasium-python] [2022-02-25T03:05:02Z] ▶ Using commit 3eeb01920ed716b947b85caf8273aefdfbe19093 of vulnerability database section_end:1645758308:step_script section_start:1645758308:upload_artifacts_on_success Uploading artifacts for successful job Using docker image sha256:4ab73fe41bd466dff16a0e732b568862dce676f1d49de2a85309349266c882f8 for gitlab/gitlab-runner-helper:x86_64-6fbc7474 with digest gitlab/gitlab-runner-helper@sha256:6275194f2d67051ee4538cbd086c4c61b35e15d4439f76b5b5b710bee7344895 ... Uploading artifacts... gl-dependency-scanning-report.json: found 1 matching files and directories Uploading artifacts as "dependency_scanning" to coordinator... ok id=26359 responseStatus=201 Created token=8wCXzVCc section_end:1645758311:upload_artifacts_on_success section_start:1645758311:cleanup_file_variables Cleaning up project directory and file based variables Using docker image sha256:4ab73fe41bd466dff16a0e732b568862dce676f1d49de2a85309349266c882f8 for gitlab/gitlab-runner-helper:x86_64-6fbc7474 with digest gitlab/gitlab-runner-helper@sha256:6275194f2d67051ee4538cbd086c4c61b35e15d4439f76b5b5b710bee7344895 ... section_end:1645758313:cleanup_file_variables Job succeeded