[14:12:09Z] building localhost/devsecops/drone-scanners:20260911 (network disabled)
STEP 1/21: FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8
STEP 2/21: ARG SYFT_VERSION
--> Using cache 30b656301a8e4d862cce4e10e83d87a54a32f1b0555946e1c501be26799e10c8
--> 30b656301a8e
STEP 3/21: ARG GRYPE_VERSION
--> Using cache ecb4cdf3fcbf6b69501aea99dbdff3f6d0c12727afe1a8f6c12d2bc1fc94948d
--> ecb4cdf3fcbf
STEP 4/21: ARG TRIVY_VERSION
--> Using cache 723d2d114e526c93b0f9dff5ddd75b1092519bf9a9e95e88544be3ec61512110
--> 723d2d114e52
STEP 5/21: ARG DATA_DATE
--> Using cache 03e9bdb265264c8c3e0100fba5ddd71f7a5b8e2532a638728bbdace876468bf3
--> 03e9bdb26526
STEP 6/21: ARG GRYPE_DB_BUILT
--> Using cache 9ab525bb8dab66e94ef9e518a8097490f281ee2ae50768739bf8b99aae122cfd
--> 9ab525bb8dab
STEP 7/21: ARG TRIVY_DB_UPDATED
--> Using cache 8b8e29d36f83789bc8ad711b82cb2eb381a286fbe5441b595a8c7ea20fe99538
--> 8b8e29d36f83
STEP 8/21: ARG MAX_DB_AGE_DAYS=7
--> Using cache 2cc5a72b2fe8f6a86c76fd3b34d92d554698e704e37afffc465d316f3f4a6e72
--> 2cc5a72b2fe8
STEP 9/21: LABEL org.opencontainers.image.title="devsecops drone-scanners"       org.opencontainers.image.description="Offline Syft/Grype/Trivy scanners for Drone pipelines"       org.opencontainers.image.version="${DATA_DATE}"       devsecops.syft.version="${SYFT_VERSION}"       devsecops.grype.version="${GRYPE_VERSION}"       devsecops.trivy.version="${TRIVY_VERSION}"       devsecops.grype.db.built="${GRYPE_DB_BUILT}"       devsecops.trivy.db.updated="${TRIVY_DB_UPDATED}"
--> Using cache bdb1c1507ad4bbbf0b8efd055a96dfcc8f957db1b9f56c3f77e52003d49f8e46
--> bdb1c1507ad4
STEP 10/21: COPY rpms/ /tmp/rpms/
--> Using cache d2bd1cdcaf67e988dfe9f1b98533fc6d209890c12753a25eead362aeeb3926a7
--> d2bd1cdcaf67
STEP 11/21: RUN rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release  && rpm -K /tmp/rpms/*.rpm  && rpm -Uvh /tmp/rpms/*.rpm  && rm -rf /tmp/rpms
--> Using cache 154ca745362676c749b9312dee4152477f83509c7f8acf80fdc0b5269e9e031e
--> 154ca7453626
STEP 12/21: COPY db/grype/        /opt/scanners/grype/
--> Using cache 3b00a006a23708b47a6bbfc8609e357dd2abf2fafcc28c89be430efe8688214b
--> 3b00a006a237
STEP 13/21: COPY db/trivy/db/     /opt/scanners/trivy/db/
--> Using cache 94a6020112a48f571097c00f8ae909b5c9f087a66f3b6caced240af0b902956c
--> 94a6020112a4
STEP 14/21: COPY db/trivy/java-db/ /opt/scanners/trivy/java-db/
--> Using cache 57e8fe2fbf20517b5709df33b91a2f19650d54904eb6a291286a8f3bb12de3c9
--> 57e8fe2fbf20
STEP 15/21: COPY db/trivy/policy/ /opt/scanners/trivy/policy/
--> Using cache d7d03c2e1d3ccab4b8b71eb56ef045e0f843028347f5c937a60dc62c35cadb2d
--> d7d03c2e1d3c
STEP 16/21: COPY bin/  /usr/local/bin/
--> a7066524d42a
STEP 17/21: COPY etc/  /etc/devsecops/
--> b687e3ef313b
STEP 18/21: ENV SYFT_CHECK_FOR_APP_UPDATE=false     GRYPE_CHECK_FOR_APP_UPDATE=false     GRYPE_DB_CACHE_DIR=/opt/scanners/grype     GRYPE_DB_AUTO_UPDATE=false     GRYPE_DB_REQUIRE_UPDATE_CHECK=false     GRYPE_DB_VALIDATE_AGE=true     GRYPE_DB_MAX_ALLOWED_BUILT_AGE=168h     TRIVY_CACHE_DIR=/opt/scanners/trivy     TRIVY_SKIP_DB_UPDATE=true     TRIVY_SKIP_JAVA_DB_UPDATE=true     TRIVY_SKIP_CHECK_UPDATE=true     TRIVY_OFFLINE_SCAN=true     TRIVY_SKIP_VERSION_CHECK=true     TRIVY_DISABLE_TELEMETRY=true     TRIVY_NO_PROGRESS=true     MAX_DB_AGE_DAYS=${MAX_DB_AGE_DAYS}     SCANNER_DATA_DATE=${DATA_DATE}
--> a784fdd4979d
STEP 19/21: RUN chmod 0755 /usr/local/bin/syft /usr/local/bin/grype /usr/local/bin/trivy /usr/local/bin/drone-scan  && syft version >/dev/null && grype version >/dev/null && trivy --version >/dev/null
--> 1d8428040a8b
STEP 20/21: WORKDIR /tmp
--> a66a8b81226b
STEP 21/21: CMD ["drone-scan", "help"]
COMMIT localhost/devsecops/drone-scanners:20260911
--> 395d464659c4
Successfully tagged localhost/devsecops/drone-scanners:20260911
395d464659c45a42648ad4fdc6fb3d7be0793951888d8d49b0030fc86d51e37c
[14:12:20Z] offline smoke test (--network=none)
2026-09-11T14:12:22Z	INFO	Loaded	file_path="/etc/devsecops/trivy.yaml"
2026-09-11T14:12:22Z	INFO	[vuln] Vulnerability scanning is enabled
2026-09-11T14:12:22Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-09-11T14:12:22Z	INFO	[checks-client] No downloadable checks were loaded as --skip-check-update is enabled, loading from existing cache...
2026-09-11T14:12:23Z	INFO	[secret] Secret scanning is enabled
2026-09-11T14:12:23Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln,misconfig' to disable secret scanning
2026-09-11T14:12:23Z	INFO	[secret] Please see https://trivy.dev/docs/v0.74/guide/scanner/secret#recommendation for faster secret detection
2026-09-11T14:12:23Z	WARN	[pip] Unable to find python `site-packages` directory. License detection is skipped.	err="unable to find path to Python executable"
2026-09-11T14:12:23Z	INFO	Number of language-specific files	num=1
2026-09-11T14:12:23Z	INFO	[pip] Detecting vulnerabilities...
2026-09-11T14:12:23Z	INFO	Detected config files	num=1
2026-09-11T14:12:25Z	INFO	Loaded	file_path="/etc/devsecops/trivy.yaml"
2026-09-11T14:12:25Z	INFO	[vuln] Vulnerability scanning is enabled
2026-09-11T14:12:25Z	INFO	[misconfig] Misconfiguration scanning is enabled
2026-09-11T14:12:25Z	INFO	[checks-client] No downloadable checks were loaded as --skip-check-update is enabled, loading from existing cache...
2026-09-11T14:12:26Z	INFO	[secret] Secret scanning is enabled
2026-09-11T14:12:26Z	INFO	[secret] If your scanning is slow, please try '--scanners vuln,misconfig' to disable secret scanning
2026-09-11T14:12:26Z	INFO	[secret] Please see https://trivy.dev/docs/v0.74/guide/scanner/secret#recommendation for faster secret detection
2026-09-11T14:12:26Z	INFO	Number of language-specific files	num=0
2026-09-11T14:12:26Z	INFO	Detected config files	num=0
SECURITY GATE: PASS

SMOKE TEST: PASS (vulnerable fixture blocked, clean fixture passed)
[14:12:26Z] exporting images/drone-scanners-20260911-amd64.tar
Copying blob sha256:0d01895bae745caa08c0ea81b62dbc77250f79c0a182cfbb7580bda9ba21ea50
Copying blob sha256:b4993b3bad05037e12bf8bbc98eb6890630fb6785f3da565dccef9a3366ebd1f
Copying blob sha256:392ac57e42ed3ea94742e0623fc1da71559c5791c29634292a5e7dd7f5deaac8
Copying blob sha256:e96f7770e704f0e092a6f026703451eb2c8da58c96330dfbb225a81dd89c7420
Copying blob sha256:0be68e8a4df0ba9784d4686213aad2ad8f133e887783c83f3109aea2990a5937
Copying blob sha256:a830ab426c86e81142d6d4fd5e419199b81b9081cff0542e67996fb4cd4121b1
Copying blob sha256:fc597bfbf3a84ea81453d77c1729bebb54327fc327cc8c995872d8075905cf90
Copying blob sha256:50f07159f40583ecae9c96d4f50cf8e1eebad7aae6f21e711369c624e2dfabe8
Copying blob sha256:10b915247b5afd0c23273fa8af269450c8fe850218816fae4235bed1c9f5afe1
Copying blob sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
Copying config sha256:395d464659c45a42648ad4fdc6fb3d7be0793951888d8d49b0030fc86d51e37c
Writing manifest to image destination
[14:12:51Z] built localhost/devsecops/drone-scanners:20260911 (5.2G) — next: scripts/99-package.sh