openshift-bot
commented
1 year ago Build #1
GLOB sdist-make: /mnt/workspace/jenkins/working/art-tools_elliott_PR-464/setup.py
py38 create: /mnt/workspace/jenkins/working/art-tools_elliott_PR-464/.tox/py38
py38 installdeps: -rrequirements-dev.txt
py38 inst: /mnt/workspace/jenkins/working/art-tools_elliott_PR-464/.tox/.tmp/package/1/rh-elliott-2.0.14.dev177+gd5adcfe.zip
py38 installed: aiodns==3.0.0,aiohttp==3.8.3,aiosignal==1.3.1,astroid==2.12.12,async-timeout==4.0.2,attrs==22.1.0,Brotli==1.0.9,cchardet==2.1.7,certifi==2022.9.24,cffi==1.15.1,charset-normalizer==2.1.1,click==8.1.3,coverage==6.5.0,cryptography==38.0.3,decorator==5.1.1,defusedxml==0.7.1,dill==0.3.6,distlib==0.3.6,errata-tool @ git+http://github.com/thegreyd/errata-tool.git@bad2cb9c3321a1179f018cd9ddcf1d51d634290b,exceptiongroup==1.0.4,filelock==3.8.0,flake8==5.0.4,flexmock==0.11.3,frozenlist==1.3.3,future==0.18.2,gssapi==1.8.2,idna==3.4,iniconfig==1.1.1,isort==5.10.1,jira==3.4.1,jsonpath-rw==1.4.0,koji==1.30.1,krb5==0.4.1,lazy-object-proxy==1.8.0,mccabe==0.7.0,mock==4.0.3,multidict==6.0.2,mypy==0.991,mypy-extensions==0.4.3,oauthlib==3.2.2,packaging==21.3,platformdirs==2.5.4,pluggy==1.0.0,ply==3.11,py==1.11.0,pycares==4.2.2,pycodestyle==2.9.1,pycparser==2.21,pyflakes==2.5.0,pygit2==1.10.1,pylint==2.15.5,pyparsing==3.0.9,pyspnego==0.6.3,pytest==7.2.0,python-bugzilla==3.2.0,python-dateutil==2.8.2,PyYAML==6.0,requests==2.28.1,requests-gssapi==1.2.3,requests-kerberos==0.14.0,requests-oauthlib==1.3.1,requests-toolbelt==0.10.1,rh-elliott @ file:///mnt/workspace/jenkins/working/art-tools_elliott_PR-464/.tox/.tmp/package/1/rh-elliott-2.0.14.dev177%2Bgd5adcfe.zip,ruamel.yaml==0.17.21,ruamel.yaml.clib==0.2.7,semver==2.13.0,setuptools-scm==7.0.5,six==1.16.0,tenacity==8.1.0,tomli==2.0.1,tomlkit==0.11.6,tox==3.27.1,typing_extensions==4.4.0,urllib3==1.26.12,virtualenv==20.16.7,wrapt==1.14.1,yarl==1.8.1
py38 run-test-pre: PYTHONHASHSEED='881690455'
py38 run-test: commands[0] | coverage run --branch --source elliottlib -m unittest discover -t . -s tests/
................................................BZ 9 is ignored because its status was MODIFIED at the moment of sweep cutoff (2021-06-30 12:30:00), however its status changed back to ['ASSIGNED'] afterwards
.....................No flaw bugs could be found for these trackers: {'OCPBUGS-2'}
...changed 123 from status1 to status2
.123 is already on status1
.changed 123 from status1 to status2
..changed 123 from status1 to status2
.123 is already on status1
.changed 123 from status1 to status2
........................../mnt/workspace/jenkins/working/art-tools_elliott_PR-464/elliottlib/errata_async.py:39: RuntimeWarning: coroutine 'AsyncMockMixin._execute_mock_call' was never awaited
resp.raise_for_status()
RuntimeWarning: Enable tracemalloc to get the object allocation traceback
..F.................../mnt/workspace/jenkins/working/art-tools_elliott_PR-464/elliottlib/cli/find_bugs_sweep_cli.py:263: DeprecationWarning: The 'warn' method is deprecated, use 'warning' instead
logger.warn(f"Bug {warning_bug} has CVE number in summary but does not have tracker keywords")
Bug ['OCPBUGS-4', 'OCPBUGS-5'] has CVE number in summary but does not have tracker keywords
...........................................
======================================================================
FAIL: test_compute_cve_package_exclusions (tests.test_errata_async.TestAsyncErrataUtils)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/mnt/workspace/jenkins/working/art-tools_elliott_PR-464/tests/test_errata_async.py", line 158, in test_compute_cve_package_exclusions
self.assertEqual(actual, expected)
AssertionError: {'CVE[39 chars]': {'d': 0, 'a': 0, 'b': 0}} != {'CVE[39 chars]': {'a': 0, 'b': 0, 'd': 0}, 'CVE-2099-3': {'a[25 chars]: 0}}
- {'CVE-2099-1': {'c': 0, 'd': 0}, 'CVE-2099-2': {'a': 0, 'b': 0, 'd': 0}}
+ {'CVE-2099-1': {'c': 0, 'd': 0},
+ 'CVE-2099-2': {'a': 0, 'b': 0, 'd': 0},
+ 'CVE-2099-3': {'a': 0, 'b': 0, 'c': 0, 'd': 0}}
----------------------------------------------------------------------
Ran 168 tests in 0.707s
FAILED (failures=1)
ERROR: InvocationError for command /mnt/workspace/jenkins/working/art-tools_elliott_PR-464/.tox/py38/bin/coverage run --branch --source elliottlib -m unittest discover -t . -s tests/ (exited with code 1)
___________________________________ summary ____________________________________
ERROR: py38: commands failed
Ximinhan
openshift-ci[bot]
https://issues.redhat.com/browse/ART-4398
Summary
Right now we are not associating builds with golang CVEs. With this PR, we will start associating all golang build images with golang CVEs except etcd image. This is because etcd is built with a different go version (which is behind what our images use), and in most cases CVEs would be associated with our main go builder version. So for now a warning is displayed if etcd build is detected saying "manually associate etcd build with CVE".
Handling the etcd case was proving to be quite confusing, so I've ommitted that to be handled as a followup. This PR gets us much closer from where we are today.
Test
elliott --assembly=4.11.16 --group=openshift-4.11 attach-cve-flaws --use-default-advisory image --noop