Console Output
Started by upstream project "buildall-stage_2-merge-v15" build number 105
originally caused by:
Started by user garciadeblas
> git rev-parse --is-inside-work-tree # timeout=10
Setting origin to https://osm.etsi.org/gerrit/osm/PLA.git
> git config remote.origin.url https://osm.etsi.org/gerrit/osm/PLA.git # timeout=10
Fetching origin...
Fetching upstream changes from origin
> git --version # timeout=10
> git config --get remote.origin.url # timeout=10
> git fetch --tags --progress origin +refs/heads/*:refs/remotes/origin/*
Seen branch in repository origin/bug1511
Seen branch in repository origin/hackfest
Seen branch in repository origin/master
Seen branch in repository origin/ng-ro-refactor
Seen branch in repository origin/paas
Seen branch in repository origin/sol006v331
Seen branch in repository origin/v10.0
Seen branch in repository origin/v11.0
Seen branch in repository origin/v12.0
Seen branch in repository origin/v13.0
Seen branch in repository origin/v14.0
Seen branch in repository origin/v15.0
Seen branch in repository origin/v8.0
Seen branch in repository origin/v9.0
Seen 14 remote branches
Obtained Jenkinsfile from 5fa7d6b3638b309669be7295535dd171e8615acb
Running in Durability level: MAX_SURVIVABILITY
[Pipeline] properties
[Pipeline] node
Running on osm-cicd-2 in /home/jenkins/workspace/PLA-stage_2-merge_v15.0
[Pipeline] {
[Pipeline] checkout
No credentials specified
Cloning the remote Git repository
Cloning with configured refspecs honoured and without tags
Cloning repository https://osm.etsi.org/gerrit/osm/PLA.git
> git init /home/jenkins/workspace/PLA-stage_2-merge_v15.0 # timeout=10
Fetching upstream changes from https://osm.etsi.org/gerrit/osm/PLA.git
> git --version # timeout=10
> git fetch --no-tags --force --progress https://osm.etsi.org/gerrit/osm/PLA.git +refs/heads/*:refs/remotes/origin/*
> git config remote.origin.url https://osm.etsi.org/gerrit/osm/PLA.git # timeout=10
> git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
> git config remote.origin.url https://osm.etsi.org/gerrit/osm/PLA.git # timeout=10
Fetching without tags
Fetching upstream changes from https://osm.etsi.org/gerrit/osm/PLA.git
> git fetch --no-tags --force --progress https://osm.etsi.org/gerrit/osm/PLA.git +refs/heads/*:refs/remotes/origin/*
Checking out Revision 5fa7d6b3638b309669be7295535dd171e8615acb (v15.0)
> git config core.sparsecheckout # timeout=10
> git checkout -f 5fa7d6b3638b309669be7295535dd171e8615acb
Commit message: "Update requirements-dev to use v15 for osm-common and osm-im"
> git rev-list --no-walk 5fa7d6b3638b309669be7295535dd171e8615acb # timeout=10
[Pipeline] dir
Running in /home/jenkins/workspace/PLA-stage_2-merge_v15.0/devops
[Pipeline] {
[Pipeline] git
No credentials specified
Cloning the remote Git repository
Cloning repository https://osm.etsi.org/gerrit/osm/devops
> git init /home/jenkins/workspace/PLA-stage_2-merge_v15.0/devops # timeout=10
Fetching upstream changes from https://osm.etsi.org/gerrit/osm/devops
> git --version # timeout=10
> git fetch --tags --force --progress https://osm.etsi.org/gerrit/osm/devops +refs/heads/*:refs/remotes/origin/*
> git config remote.origin.url https://osm.etsi.org/gerrit/osm/devops # timeout=10
> git config --add remote.origin.fetch +refs/heads/*:refs/remotes/origin/* # timeout=10
> git config remote.origin.url https://osm.etsi.org/gerrit/osm/devops # timeout=10
Fetching upstream changes from https://osm.etsi.org/gerrit/osm/devops
> git fetch --tags --force --progress https://osm.etsi.org/gerrit/osm/devops +refs/heads/*:refs/remotes/origin/*
> git rev-parse refs/remotes/origin/v15.0^{commit} # timeout=10
> git rev-parse refs/remotes/origin/origin/v15.0^{commit} # timeout=10
Checking out Revision f79e4d76cabf5d5e6d1b4aa5144ee0ac70992510 (refs/remotes/origin/v15.0)
> git config core.sparsecheckout # timeout=10
> git checkout -f f79e4d76cabf5d5e6d1b4aa5144ee0ac70992510
> git branch -a -v --no-abbrev # timeout=10
> git checkout -b v15.0 f79e4d76cabf5d5e6d1b4aa5144ee0ac70992510
Commit message: "Fix image tag in full_install_osm, helm chart and install_osm"
> git rev-list --no-walk f79e4d76cabf5d5e6d1b4aa5144ee0ac70992510 # timeout=10
[Pipeline] }
[Pipeline] // dir
[Pipeline] load
[Pipeline] { (devops/jenkins/ci-pipelines/ci_stage_2.groovy)
[Pipeline] }
[Pipeline] // load
[Pipeline] echo
do_stage_3= false
[Pipeline] load
[Pipeline] { (devops/jenkins/ci-pipelines/ci_helper.groovy)
[Pipeline] }
[Pipeline] // load
[Pipeline] stage
[Pipeline] { (Prepare)
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ env
JENKINS_HOME=/var/lib/jenkins
SSH_CLIENT=212.234.161.1 22456 22
USER=jenkins
RUN_CHANGES_DISPLAY_URL=https://osm.etsi.org/jenkins/job/PLA-stage_2-merge/job/v15.0/108/display/redirect?page=changes
GERRIT_PROJECT=osm/PLA
XDG_SESSION_TYPE=tty
SHLVL=0
NODE_LABELS=docker osm-cicd-2 osm2 pipeline stage_2
HUDSON_URL=https://osm.etsi.org/jenkins/
MOTD_SHOWN=pam
OLDPWD=/home/jenkins
HOME=/home/jenkins
BUILD_URL=https://osm.etsi.org/jenkins/job/PLA-stage_2-merge/job/v15.0/108/
HUDSON_COOKIE=35c642e5-77bd-468e-8f96-4db14e3062eb
JENKINS_SERVER_COOKIE=durable-f28291931b12055d32405ded59d81552
DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1001/bus
GERRIT_PATCHSET_REVISION=5fa7d6b3638b309669be7295535dd171e8615acb
WORKSPACE=/home/jenkins/workspace/PLA-stage_2-merge_v15.0
LOGNAME=jenkins
NODE_NAME=osm-cicd-2
GERRIT_BRANCH=v15.0
_=/usr/bin/java
RUN_ARTIFACTS_DISPLAY_URL=https://osm.etsi.org/jenkins/job/PLA-stage_2-merge/job/v15.0/108/display/redirect?page=artifacts
XDG_SESSION_CLASS=user
EXECUTOR_NUMBER=0
XDG_SESSION_ID=2054
RUN_TESTS_DISPLAY_URL=https://osm.etsi.org/jenkins/job/PLA-stage_2-merge/job/v15.0/108/display/redirect?page=tests
BUILD_DISPLAY_NAME=#108
PROJECT_URL_PREFIX=https://osm.etsi.org/gerrit
HUDSON_HOME=/var/lib/jenkins
JOB_BASE_NAME=v15.0
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games:/snap/bin
BUILD_ID=108
XDG_RUNTIME_DIR=/run/user/1001
BUILD_TAG=jenkins-PLA-stage_2-merge-v15.0-108
JENKINS_URL=https://osm.etsi.org/jenkins/
LANG=C.UTF-8
JOB_URL=https://osm.etsi.org/jenkins/job/PLA-stage_2-merge/job/v15.0/
BUILD_NUMBER=108
SHELL=/bin/bash
RUN_DISPLAY_URL=https://osm.etsi.org/jenkins/job/PLA-stage_2-merge/job/v15.0/108/display/redirect
ARTIFACTORY_SERVER=artifactory-osm
GERRIT_REFSPEC=refs/changes/35/14135/1
HUDSON_SERVER_COOKIE=6d3295a483c3e6d5
JOB_DISPLAY_URL=https://osm.etsi.org/jenkins/job/PLA-stage_2-merge/job/v15.0/display/redirect
JOB_NAME=PLA-stage_2-merge/v15.0
TEST_INSTALL=false
PWD=/home/jenkins/workspace/PLA-stage_2-merge_v15.0
SSH_CONNECTION=212.234.161.1 22456 172.21.249.2 22
BRANCH_NAME=v15.0
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (Checkout)
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ git fetch --tags
From https://osm.etsi.org/gerrit/osm/PLA
* [new tag] branch-bug1511-start -> branch-bug1511-start
* [new tag] branch-ng-ro-refactor-start -> branch-ng-ro-refactor-start
* [new tag] branch-sol006v331-start -> branch-sol006v331-start
* [new tag] release-v10.0-start -> release-v10.0-start
* [new tag] release-v11.0-start -> release-v11.0-start
* [new tag] release-v12.0-start -> release-v12.0-start
* [new tag] release-v13.0-start -> release-v13.0-start
* [new tag] release-v14.0-start -> release-v14.0-start
* [new tag] release-v15.0-start -> release-v15.0-start
* [new tag] release-v8.0-start -> release-v8.0-start
* [new tag] release-v9.0-start -> release-v9.0-start
* [new tag] v10.0.0 -> v10.0.0
* [new tag] v10.0.1 -> v10.0.1
* [new tag] v10.0.2 -> v10.0.2
* [new tag] v10.0.3 -> v10.0.3
* [new tag] v10.1.0 -> v10.1.0
* [new tag] v10.1.0-rc1 -> v10.1.0-rc1
* [new tag] v10.1.0rc2 -> v10.1.0rc2
* [new tag] v10.1.0rc3 -> v10.1.0rc3
* [new tag] v10.1.1 -> v10.1.1
* [new tag] v10.1.1-rc1 -> v10.1.1-rc1
* [new tag] v10.1.1rc2 -> v10.1.1rc2
* [new tag] v10.1.2 -> v10.1.2
* [new tag] v10.1.3 -> v10.1.3
* [new tag] v10.1.4 -> v10.1.4
* [new tag] v10.1.5 -> v10.1.5
* [new tag] v11.0.0 -> v11.0.0
* [new tag] v11.0.0rc1 -> v11.0.0rc1
* [new tag] v11.0.0rc2 -> v11.0.0rc2
* [new tag] v11.0.1 -> v11.0.1
* [new tag] v11.0.2 -> v11.0.2
* [new tag] v11.0.3 -> v11.0.3
* [new tag] v11.0.4 -> v11.0.4
* [new tag] v12.0.0 -> v12.0.0
* [new tag] v12.0.0rc1 -> v12.0.0rc1
* [new tag] v12.0.1 -> v12.0.1
* [new tag] v12.0.2 -> v12.0.2
* [new tag] v12.0.3 -> v12.0.3
* [new tag] v12.0.4 -> v12.0.4
* [new tag] v12.0.5 -> v12.0.5
* [new tag] v12.0.6 -> v12.0.6
* [new tag] v12.0.7 -> v12.0.7
* [new tag] v12.0.8 -> v12.0.8
* [new tag] v13.0.0 -> v13.0.0
* [new tag] v13.0.0rc1 -> v13.0.0rc1
* [new tag] v13.0.0rc2 -> v13.0.0rc2
* [new tag] v13.0.1 -> v13.0.1
* [new tag] v13.0.2 -> v13.0.2
* [new tag] v14.0.0 -> v14.0.0
* [new tag] v14.0.0rc1 -> v14.0.0rc1
* [new tag] v14.0.1 -> v14.0.1
* [new tag] v14.0.2 -> v14.0.2
* [new tag] v15.0.0 -> v15.0.0
* [new tag] v15.0.1 -> v15.0.1
* [new tag] v7.1.2 -> v7.1.2
* [new tag] v7.1.3 -> v7.1.3
* [new tag] v7.1.4 -> v7.1.4
* [new tag] v8.0.0 -> v8.0.0
* [new tag] v8.0.0rc1 -> v8.0.0rc1
* [new tag] v8.0.0rc2 -> v8.0.0rc2
* [new tag] v8.0.0rc3 -> v8.0.0rc3
* [new tag] v8.0.1 -> v8.0.1
* [new tag] v8.0.1rc1 -> v8.0.1rc1
* [new tag] v8.0.2 -> v8.0.2
* [new tag] v8.0.3 -> v8.0.3
* [new tag] v8.0.4 -> v8.0.4
* [new tag] v9.0.0 -> v9.0.0
* [new tag] v9.0.0rc1 -> v9.0.0rc1
* [new tag] v9.1.0 -> v9.1.0
* [new tag] v9.1.1 -> v9.1.1
* [new tag] v9.1.1rc1 -> v9.1.1rc1
* [new tag] v9.1.2 -> v9.1.2
* [new tag] v9.1.3 -> v9.1.3
* [new tag] v9.1.4 -> v9.1.4
* [new tag] v9.1.5 -> v9.1.5
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ git fetch origin refs/changes/35/14135/1
From https://osm.etsi.org/gerrit/osm/PLA
* branch refs/changes/35/14135/1 -> FETCH_HEAD
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ git checkout -f 5fa7d6b3638b309669be7295535dd171e8615acb
HEAD is now at 5fa7d6b Update requirements-dev to use v15 for osm-common and osm-im
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ sudo git clean -dfx
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (License Scan)
[Pipeline] echo
skip the scan for merge
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (Release Note Check)
[Pipeline] fileExists
[Pipeline] echo
No releasenote check present
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (Docker-Build)
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ docker build --build-arg APT_PROXY=http://172.21.1.1:3142 -t osm/pla-v15.0 .
Sending build context to Docker daemon 151.4MB
Step 1/11 : FROM ubuntu:22.04
---> ca2b0f26964c
Step 2/11 : ARG APT_PROXY
---> Using cache
---> ee734d7d031f
Step 3/11 : RUN if [ ! -z $APT_PROXY ] ; then echo "Acquire::http::Proxy \"$APT_PROXY\";" > /etc/apt/apt.conf.d/proxy.conf ; echo "Acquire::https::Proxy \"$APT_PROXY\";" >> /etc/apt/apt.conf.d/proxy.conf ; fi
---> Using cache
---> 7ff5aba90edd
Step 4/11 : RUN DEBIAN_FRONTEND=noninteractive apt-get update && DEBIAN_FRONTEND=noninteractive apt-get -y install debhelper dh-python git python3 python3-all python3-dev python3-setuptools python3-pip tox
---> Using cache
---> d60fa346fff4
Step 5/11 : ENV LC_ALL C.UTF-8
---> Using cache
---> 48c27d1cc85b
Step 6/11 : ENV LANG C.UTF-8
---> Using cache
---> dae44b8211df
Step 7/11 : ADD https://github.com/MiniZinc/MiniZincIDE/releases/download/2.4.2/MiniZincIDE-2.4.2-bundle-linux-x86_64.tgz /minizinc.tgz
---> Using cache
---> 8234f91b9eb4
Step 8/11 : RUN tar -zxf /minizinc.tgz && mv /MiniZincIDE-2.4.2-bundle-linux /minizinc
---> Using cache
---> 3bec189445c6
Step 9/11 : RUN mkdir /entry_data && mkdir /entry_data/mzn-lib && ln -s /entry_data/mzn-lib /minizinc/share/minizinc/exec
---> Using cache
---> 3849b9808c3a
Step 10/11 : ENV FZNEXEC "/entry_data/fzn-exec"
---> Using cache
---> d6def827231f
Step 11/11 : ENV PATH "/minizinc/bin:${PATH}"
---> Using cache
---> 935d86409052
Successfully built 935d86409052
Successfully tagged osm/pla-v15.0:latest
[Pipeline] }
[Pipeline] // stage
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ id -u
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ id -g
[Pipeline] withDockerContainer
osm-cicd-2 does not seem to be running inside a container
$ docker run -t -d -u 1001:1001 -u root -w /home/jenkins/workspace/PLA-stage_2-merge_v15.0 -v /home/jenkins/workspace/PLA-stage_2-merge_v15.0:/home/jenkins/workspace/PLA-stage_2-merge_v15.0:rw,z -v /home/jenkins/workspace/PLA-stage_2-merge_v15.0@tmp:/home/jenkins/workspace/PLA-stage_2-merge_v15.0@tmp:rw,z -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** -e ******** --entrypoint cat osm/pla-v15.0
[Pipeline] {
[Pipeline] stage
[Pipeline] { (Test)
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ groupadd -o -g 1001 -r jenkins
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ pwd
+ useradd -o -u 1001 -d /home/jenkins/workspace/PLA-stage_2-merge_v15.0 -r -g jenkins jenkins
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ echo #! /bin/sh
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ chmod 755 /usr/bin/mesg
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ runuser jenkins -c devops-stages/stage-test.sh
Launching tox
✔ OK black in 6.666 seconds
black create: /tmp/.tox/black
black installdeps: black
black installed: black==24.3.0,click==8.1.7,mypy-extensions==1.0.0,packaging==24.0,pathspec==0.12.1,platformdirs==4.2.0,tomli==2.0.1,typing_extensions==4.10.0
black run-test-pre: PYTHONHASHSEED='862304608'
black run-test: commands[0] | black --check --diff osm_pla/
All done! ✨ 🍰 ✨
13 files would be left unchanged.
✔ OK flake8 in 8.714 seconds
flake8 create: /tmp/.tox/flake8
flake8 installdeps: flake8
flake8 develop-inst: /home/jenkins/workspace/PLA-stage_2-merge_v15.0
flake8 installed: flake8==7.0.0,mccabe==0.7.0,-e git+https://osm.etsi.org/gerrit/osm/PLA.git@5fa7d6b3638b309669be7295535dd171e8615acb#egg=osm_pla,pycodestyle==2.11.1,pyflakes==3.2.0
flake8 run-test-pre: PYTHONHASHSEED='2757016356'
flake8 run-test: commands[0] | flake8 osm_pla/ setup.py
✔ OK safety in 22.747 seconds
safety create: /tmp/.tox/safety
safety installdeps: -r/home/jenkins/workspace/PLA-stage_2-merge_v15.0/requirements.txt, safety
safety develop-inst: /home/jenkins/workspace/PLA-stage_2-merge_v15.0
safety installed: annotated-types==0.6.0,Authlib==1.3.0,certifi==2024.2.2,cffi==1.16.0,charset-normalizer==3.3.2,click==8.1.7,cryptography==42.0.5,dparse==0.6.4b0,idna==3.6,Jinja2==3.1.2,markdown-it-py==3.0.0,MarkupSafe==2.1.3,marshmallow==3.21.1,mdurl==0.1.2,-e git+https://osm.etsi.org/gerrit/osm/PLA.git@5fa7d6b3638b309669be7295535dd171e8615acb#egg=osm_pla,packaging==24.0,pycparser==2.21,pydantic==2.6.4,pydantic_core==2.16.3,Pygments==2.17.2,pymzn==0.18.3,PyYAML==6.0.1,requests==2.31.0,rich==13.7.1,ruamel.yaml==0.18.6,ruamel.yaml.clib==0.2.8,safety==3.1.0,safety-schemas==0.0.2,tomli==2.0.1,typer==0.10.0,typing_extensions==4.10.0,urllib3==2.2.1
safety run-test-pre: PYTHONHASHSEED='2846594'
safety run-test: commands[0] | - safety check --full-report
+==============================================================================+
/$$$$$$ /$$
/$$__ $$ | $$
/$$$$$$$ /$$$$$$ | $$ \__//$$$$$$ /$$$$$$ /$$ /$$
/$$_____/ |____ $$| $$$$ /$$__ $$|_ $$_/ | $$ | $$
| $$$$$$ /$$$$$$$| $$_/ | $$$$$$$$ | $$ | $$ | $$
\____ $$ /$$__ $$| $$ | $$_____/ | $$ /$$| $$ | $$
/$$$$$$$/| $$$$$$$| $$ | $$$$$$$ | $$$$/| $$$$$$$
|_______/ \_______/|__/ \_______/ \___/ \____ $$
/$$ | $$
| $$$$$$/
by safetycli.com \______/
+==============================================================================+
[1mREPORT[0m
Safety [1mv3.1.0[0m is scanning for [1mVulnerabilities[0m[1m...[0m
[1m Scanning dependencies[0m in your [1menvironment:[0m
-> /tmp/.tox/safety/bin
-> /usr/lib/python310.zip
-> /home/jenkins/workspace/PLA-stage_2-merge_v15.0
-> /usr/lib/python3.10/lib-dynload
-> /tmp/.tox/safety/lib/python3.10/site-packages
-> /usr/lib/python3.10
Using [1mopen-source vulnerability database[0m
[1m Found and scanned 35 packages[0m
Timestamp [1m2024-03-26 11:55:48[0m
[1m 3[0m[1m vulnerabilities reported[0m
[1m 0[0m[1m vulnerabilities ignored[0m
+==============================================================================+
[1mVULNERABILITIES REPORTED[0m
+==============================================================================+
[31m-> Vulnerability found in wheel version 0.37.1[0m
[1m Vulnerability ID: [0m51499
[1m Affected spec: [0m<0.38.1
[1m ADVISORY: [0mWheel 0.38.1 includes a fix for CVE-2022-40898: An issue
discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier
allows remote attackers to cause a denial of service via attacker
controlled input to wheel cli.https://pyup.io/posts/pyup-discovers-redos-
vulnerabilities-in-top-python-packages
[1m CVE-2022-40898[0m
[1m For more information about this vulnerability, visit
[0mhttps://data.safetycli.com/v/51499/97c[0m
To ignore this vulnerability, use PyUp vulnerability id 51499 in safety’s
ignore command-line argument or add the ignore to your safety policy file.
[31m-> Vulnerability found in pip version 22.0.2[0m
[1m Vulnerability ID: [0m62044
[1m Affected spec: [0m<23.3
[1m ADVISORY: [0mPip 23.3 includes a fix for CVE-2023-5752: When
installing a package from a Mercurial VCS URL (ie "pip install hg+...")
with pip prior to v23.3, the specified Mercurial revision could be used to
inject arbitrary configuration options to the "hg clone" call (ie "--
config"). Controlling the Mercurial configuration can modify how and which
repository is installed. This vulnerability does not affect users who
aren't installing from Mercurial.https://github.com/pypa/pip/pull/12306
[1m CVE-2023-5752[0m
[1m For more information about this vulnerability, visit
[0mhttps://data.safetycli.com/v/62044/97c[0m
To ignore this vulnerability, use PyUp vulnerability id 62044 in safety’s
ignore command-line argument or add the ignore to your safety policy file.
[31m-> Vulnerability found in jinja2 version 3.1.2[0m
[1m Vulnerability ID: [0m64227
[1m Affected spec: [0m<3.1.3
[1m ADVISORY: [0mJinja2 before 3.1.3 is affected by a Cross-Site
Scripting vulnerability. Special placeholders in the template allow
writing code similar to Python syntax. It is possible to inject arbitrary
HTML attributes into the rendered HTML template. The Jinja 'xmlattr'
filter can be abused to inject arbitrary HTML attribute keys and values,
bypassing the auto escaping mechanism and potentially leading to XSS. It
may also be possible to bypass attribute validation checks if they are
blacklist-based.
[1m CVE-2024-22195[0m
[1m For more information about this vulnerability, visit
[0mhttps://data.safetycli.com/v/64227/97c[0m
To ignore this vulnerability, use PyUp vulnerability id 64227 in safety’s
ignore command-line argument or add the ignore to your safety policy file.
+==============================================================================+
[32m[1mREMEDIATIONS[0m
3 vulnerabilities were reported in 3 packages. For detailed remediation &
fix recommendations, upgrade to a commercial license.
+==============================================================================+
Scan was completed. 3 vulnerabilities were reported.
+==============================================================================+[0m
✔ OK pylint in 27.815 seconds
pylint create: /tmp/.tox/pylint
pylint installdeps: -r/home/jenkins/workspace/PLA-stage_2-merge_v15.0/requirements.txt, -r/home/jenkins/workspace/PLA-stage_2-merge_v15.0/requirements-dev.txt, -r/home/jenkins/workspace/PLA-stage_2-merge_v15.0/requirements-test.txt, pylint
pylint develop-inst: /home/jenkins/workspace/PLA-stage_2-merge_v15.0
pylint installed: aiokafka==0.8.1,astroid==3.1.0,async-timeout==4.0.3,coverage==7.3.1,dataclasses==0.6,dill==0.3.8,dnspython==2.4.2,isort==5.13.2,Jinja2==3.1.2,kafka-python==2.0.2,MarkupSafe==2.1.3,mccabe==0.7.0,mock==5.1.0,motor==3.3.1,nose2==0.13.0,osm-common @ git+https://osm.etsi.org/gerrit/osm/common.git@261e46f7125c8ebe473ee780654ffe42245d4c8d,-e git+https://osm.etsi.org/gerrit/osm/PLA.git@5fa7d6b3638b309669be7295535dd171e8615acb#egg=osm_pla,packaging==23.1,platformdirs==4.2.0,pycryptodome==3.19.0,pylint==3.1.0,pymongo==4.5.0,pymzn==0.18.3,PyYAML==6.0.1,tomli==2.0.1,tomlkit==0.12.4,typing_extensions==4.10.0
pylint run-test-pre: PYTHONHASHSEED='1733833418'
pylint run-test: commands[0] | pylint -E osm_pla
✔ OK cover in 28.338 seconds
cover create: /tmp/.tox/cover
cover installdeps: -r/home/jenkins/workspace/PLA-stage_2-merge_v15.0/requirements.txt, -r/home/jenkins/workspace/PLA-stage_2-merge_v15.0/requirements-dev.txt, -r/home/jenkins/workspace/PLA-stage_2-merge_v15.0/requirements-test.txt
cover develop-inst: /home/jenkins/workspace/PLA-stage_2-merge_v15.0
cover installed: aiokafka==0.8.1,async-timeout==4.0.3,coverage==7.3.1,dataclasses==0.6,dnspython==2.4.2,Jinja2==3.1.2,kafka-python==2.0.2,MarkupSafe==2.1.3,mock==5.1.0,motor==3.3.1,nose2==0.13.0,osm-common @ git+https://osm.etsi.org/gerrit/osm/common.git@261e46f7125c8ebe473ee780654ffe42245d4c8d,-e git+https://osm.etsi.org/gerrit/osm/PLA.git@5fa7d6b3638b309669be7295535dd171e8615acb#egg=osm_pla,packaging==23.1,pycryptodome==3.19.0,pymongo==4.5.0,pymzn==0.18.3,PyYAML==6.0.1
cover run-test-pre: PYTHONHASHSEED='2343642327'
cover run-test: commands[0] | sh -c 'rm -f nosetests.xml'
cover run-test: commands[1] | coverage erase
cover run-test: commands[2] | nose2 -C --coverage osm_pla
.......ERROR:pla.server:PLA fault. Exception: kaboom!
Traceback (most recent call last):
File "/home/jenkins/workspace/PLA-stage_2-merge_v15.0/osm_pla/server/server.py", line 200, in get_placement
nsd = self._get_nsd(nslcmop["operationParams"]["nsdId"])
File "/usr/lib/python3.10/unittest/mock.py", line 1114, in __call__
return self._mock_call(*args, **kwargs)
File "/usr/lib/python3.10/unittest/mock.py", line 1118, in _mock_call
return self._execute_mock_call(*args, **kwargs)
File "/usr/lib/python3.10/unittest/mock.py", line 1173, in _execute_mock_call
raise effect
RuntimeError: kaboom!
..........................................................................
----------------------------------------------------------------------
Ran 81 tests in 8.979s
OK
Name Stmts Miss Cover
-----------------------------------------------------------------
osm_pla/__init__.py 0 0 100%
osm_pla/cmd/__init__.py 0 0 100%
osm_pla/cmd/pla_server.py 23 23 0%
osm_pla/config/config.py 39 21 46%
osm_pla/placement/__init__.py 0 0 100%
osm_pla/placement/mznplacement.py 135 1 99%
osm_pla/server/server.py 129 26 80%
osm_pla/test/__init__.py 0 0 100%
osm_pla/test/test_mznModelGenerator.py 134 3 98%
osm_pla/test/test_mznPlacementConductor.py 31 0 100%
osm_pla/test/test_mznmodels.py 269 24 91%
osm_pla/test/test_nsPlacementDataFactory.py 262 3 99%
osm_pla/test/test_server.py 200 9 96%
-----------------------------------------------------------------
TOTAL 1222 110 91%
cover run-test: commands[3] | coverage report '--omit=*tests*'
Name Stmts Miss Cover
-----------------------------------------------------------------
osm_pla/__init__.py 0 0 100%
osm_pla/cmd/__init__.py 0 0 100%
osm_pla/cmd/pla_server.py 23 23 0%
osm_pla/config/config.py 39 21 46%
osm_pla/placement/__init__.py 0 0 100%
osm_pla/placement/mznplacement.py 135 1 99%
osm_pla/server/server.py 129 26 80%
osm_pla/test/__init__.py 0 0 100%
osm_pla/test/test_mznModelGenerator.py 134 3 98%
osm_pla/test/test_mznPlacementConductor.py 31 0 100%
osm_pla/test/test_mznmodels.py 269 24 91%
osm_pla/test/test_nsPlacementDataFactory.py 262 3 99%
osm_pla/test/test_server.py 200 9 96%
-----------------------------------------------------------------
TOTAL 1222 110 91%
cover run-test: commands[4] | coverage html -d ./cover '--omit=*tests*'
Wrote HTML report to ./cover/index.html
cover run-test: commands[5] | coverage xml -o coverage.xml '--omit=*tests*'
Wrote XML report to coverage.xml
___________________________________ summary ____________________________________
black: commands succeeded
cover: commands succeeded
flake8: commands succeeded
pylint: commands succeeded
safety: commands succeeded
congratulations :)
[Pipeline] fileExists
[Pipeline] step
[Cobertura] Publishing Cobertura coverage report...
[Cobertura] Publishing Cobertura coverage results...
[Cobertura] Cobertura coverage report found.
[Pipeline] fileExists
[Pipeline] junit
Recording test results
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (Build)
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ runuser jenkins -c devops-stages/stage-build.sh
[Pipeline] }
[Pipeline] // stage
[Pipeline] stage
[Pipeline] { (Archive)
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ runuser jenkins -c mkdir -p changelog
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ runuser jenkins -c devops/tools/generatechangelog-pipeline.sh > changelog/changelog-PLA.html
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ runuser jenkins -c devops-stages/stage-archive.sh
[Pipeline] getArtifactoryServer
[Pipeline] newBuildInfo
[Pipeline] artifactoryUpload
[consumer_0] Deploying artifact: https://artifactory-osm.etsi.org/artifactory/osm-PLA/v15.0/108/pool/PLA/python3-osm-pla_15.0.1%2Bg5fa7d6b-1_all.deb
[consumer_1] Deploying artifact: https://artifactory-osm.etsi.org/artifactory/osm-PLA/v15.0/108/changelog/changelog-PLA.html
[Pipeline] publishBuildInfo
Deploying build info to: https://artifactory-osm.etsi.org/artifactory/api/build
Deploying build descriptor to: https://artifactory-osm.etsi.org/artifactory/api/build
Build successfully deployed. Browse it in Artifactory under https://artifactory-osm.etsi.org/artifactory/webapp/builds/PLA-stage_2-merge%20::%20v15.0/108
[Pipeline] sh
[PLA-stage_2-merge_v15.0] Running shell script
+ env
[Pipeline] step
Archiving artifacts
Recording fingerprints
[Pipeline] }
[Pipeline] // stage
[Pipeline] }
$ docker stop --time=1 209bfeea6fb762257923abfbce07f5249497666639e34cd5dbfdeaaf18e70781
$ docker rm -f 209bfeea6fb762257923abfbce07f5249497666639e34cd5dbfdeaaf18e70781
[Pipeline] // withDockerContainer
[Pipeline] }
[Pipeline] // node
[Pipeline] End of Pipeline
Finished: SUCCESS
![[Jenkins]](/jenkins/static/0cf6feac/images/jenkins-header-logo-v2.svg){kind=logo}
