Exporting environment variables Exporting TERM Exporting PAGER Exporting DISPLAY Exporting CI Exporting SEMAPHORE Exporting SEMAPHORE_PROJECT_NAME Exporting SEMAPHORE_PROJECT_ID Exporting SEMAPHORE_JOB_NAME Exporting SEMAPHORE_JOB_ID Exporting SEMAPHORE_AGENT_MACHINE_TYPE Exporting SEMAPHORE_AGENT_MACHINE_OS_IMAGE Exporting SEMAPHORE_AGENT_MACHINE_ENVIRONMENT_TYPE Exporting SEMAPHORE_ORGANIZATION_URL Exporting SEMAPHORE_ARTIFACT_TOKEN Exporting SSH_PRIVATE_KEY_PATH Exporting SEMAPHORE_CACHE_PRIVATE_KEY_PATH Exporting SEMAPHORE_CACHE_USERNAME Exporting SEMAPHORE_CACHE_URL Exporting SEMAPHORE_GIT_URL Exporting SEMAPHORE_GIT_DIR Exporting SEMAPHORE_GIT_SHA Exporting SEMAPHORE_GIT_REPO_SLUG Exporting SEMAPHORE_GIT_REF Exporting SEMAPHORE_GIT_COMMIT_RANGE Exporting SEMAPHORE_GIT_REF_TYPE Exporting SEMAPHORE_GIT_BRANCH Exporting SEMAPHORE_WORKFLOW_ID Exporting SEMAPHORE_WORKFLOW_NUMBER Exporting SEMAPHORE_PIPELINE_ARTEFACT_ID Exporting SEMAPHORE_PIPELINE_ID Exporting SEMAPHORE_PIPELINE_0_ARTEFACT_ID Injecting Files Injecting /home/semaphore/.ssh/semaphore_cache_key with file mode 0600 Injecting .ssh/id_rsa with file mode 0600 git clone https://github.com/semaphoreci/toolbox.git ~/.toolbox Cloning into '/home/semaphore/.toolbox'... remote: Enumerating objects: 22, done. remote: Counting objects: 4% (1/22) remote: Counting objects: 9% (2/22) remote: Counting objects: 13% (3/22) remote: Counting objects: 18% (4/22) remote: Counting objects: 22% (5/22) remote: Counting objects: 27% (6/22) remote: Counting objects: 31% (7/22) remote: Counting objects: 36% (8/22) remote: Counting objects: 40% (9/22) remote: Counting objects: 45% (10/22) remote: Counting objects: 50% (11/22) remote: Counting objects: 54% (12/22) remote: Counting objects: 59% (13/22) remote: Counting objects: 63% (14/22) remote: Counting objects: 68% (15/22) remote: Counting objects: 72% (16/22) remote: Counting objects: 77% (17/22) remote: Counting objects: 81% (18/22) remote: Counting objects: 86% (19/22) remote: Counting objects: 90% (20/22) remote: Counting objects: 95% (21/22) remote: Counting objects: 100% (22/22) remote: Counting objects: 100% (22/22), done. remote: Compressing objects: 5% (1/18) remote: Compressing objects: 11% (2/18) remote: Compressing objects: 16% (3/18) remote: Compressing objects: 22% (4/18) remote: Compressing objects: 27% (5/18) remote: Compressing objects: 33% (6/18) remote: Compressing objects: 38% (7/18) remote: Compressing objects: 44% (8/18) remote: Compressing objects: 50% (9/18) remote: Compressing objects: 55% (10/18) remote: Compressing objects: 61% (11/18) remote: Compressing objects: 66% (12/18) remote: Compressing objects: 72% (13/18) remote: Compressing objects: 77% (14/18) remote: Compressing objects: 83% (15/18) remote: Compressing objects: 88% (16/18) remote: Compressing objects: 94% (17/18) remote: Compressing objects: 100% (18/18) remote: Compressing objects: 100% (18/18), done. Receiving objects: 0% (1/1129) Receiving objects: 1% (12/1129) Receiving objects: 2% (23/1129) Receiving objects: 3% (34/1129) Receiving objects: 4% (46/1129) Receiving objects: 5% (57/1129) Receiving objects: 6% (68/1129) Receiving objects: 7% (80/1129) Receiving objects: 8% (91/1129) Receiving objects: 9% (102/1129) Receiving objects: 10% (113/1129) Receiving objects: 11% (125/1129) Receiving objects: 12% (136/1129) Receiving objects: 13% (147/1129) Receiving objects: 14% (159/1129) Receiving objects: 15% (170/1129) Receiving objects: 16% (181/1129) Receiving objects: 17% (192/1129) Receiving objects: 18% (204/1129) Receiving objects: 19% (215/1129) Receiving objects: 20% (226/1129) Receiving objects: 21% (238/1129) Receiving objects: 22% (249/1129) Receiving objects: 23% (260/1129) Receiving objects: 24% (271/1129) Receiving objects: 25% (283/1129) Receiving objects: 26% (294/1129) Receiving objects: 27% (305/1129) Receiving objects: 28% (317/1129) Receiving objects: 29% (328/1129) Receiving objects: 30% (339/1129) Receiving objects: 31% (350/1129) Receiving objects: 32% (362/1129) Receiving objects: 33% (373/1129) Receiving objects: 34% (384/1129) Receiving objects: 35% (396/1129) Receiving objects: 36% (407/1129) Receiving objects: 37% (418/1129) Receiving objects: 38% (430/1129) Receiving objects: 39% (441/1129) Receiving objects: 40% (452/1129) Receiving objects: 41% (463/1129) Receiving objects: 42% (475/1129) Receiving objects: 43% (486/1129) Receiving objects: 44% (497/1129) Receiving objects: 45% (509/1129) Receiving objects: 46% (520/1129) Receiving objects: 47% (531/1129) Receiving objects: 48% (542/1129) Receiving objects: 49% (554/1129) Receiving objects: 50% (565/1129) Receiving objects: 51% (576/1129) Receiving objects: 52% (588/1129) Receiving objects: 53% (599/1129) Receiving objects: 54% (610/1129) Receiving objects: 55% (621/1129) Receiving objects: 56% (633/1129) Receiving objects: 57% (644/1129) Receiving objects: 58% (655/1129) Receiving objects: 59% (667/1129) Receiving objects: 60% (678/1129) Receiving objects: 61% (689/1129) Receiving objects: 62% (700/1129) Receiving objects: 63% (712/1129) Receiving objects: 64% (723/1129) Receiving objects: 65% (734/1129) Receiving objects: 66% (746/1129) Receiving objects: 67% (757/1129) Receiving objects: 68% (768/1129) Receiving objects: 69% (780/1129) Receiving objects: 70% (791/1129) Receiving objects: 71% (802/1129) Receiving objects: 72% (813/1129) Receiving objects: 73% (825/1129) Receiving objects: 74% (836/1129) Receiving objects: 75% (847/1129) Receiving objects: 76% (859/1129) Receiving objects: 77% (870/1129) Receiving objects: 78% (881/1129) Receiving objects: 79% (892/1129) Receiving objects: 80% (904/1129) Receiving objects: 81% (915/1129) Receiving objects: 82% (926/1129) Receiving objects: 83% (938/1129) Receiving objects: 84% (949/1129) Receiving objects: 85% (960/1129) Receiving objects: 86% (971/1129) Receiving objects: 87% (983/1129) Receiving objects: 88% (994/1129) Receiving objects: 89% (1005/1129) Receiving objects: 90% (1017/1129) Receiving objects: 91% (1028/1129) Receiving objects: 92% (1039/1129) Receiving objects: 93% (1050/1129) Receiving objects: 94% (1062/1129) remote: Total 1129 (delta 7), reused 9 (delta 3), pack-reused 1107 Receiving objects: 95% (1073/1129) Receiving objects: 96% (1084/1129) Receiving objects: 97% (1096/1129) Receiving objects: 98% (1107/1129) Receiving objects: 99% (1118/1129) Receiving objects: 100% (1129/1129) Receiving objects: 100% (1129/1129), 241.67 KiB | 827.00 KiB/s, done. Resolving deltas: 0% (0/628) Resolving deltas: 1% (7/628) Resolving deltas: 9% (62/628) Resolving deltas: 10% (63/628) Resolving deltas: 12% (76/628) Resolving deltas: 13% (84/628) Resolving deltas: 16% (103/628) Resolving deltas: 17% (110/628) Resolving deltas: 21% (137/628) Resolving deltas: 23% (145/628) Resolving deltas: 27% (170/628) Resolving deltas: 28% (181/628) Resolving deltas: 29% (185/628) Resolving deltas: 30% (189/628) Resolving deltas: 39% (246/628) Resolving deltas: 40% (253/628) Resolving deltas: 43% (272/628) Resolving deltas: 45% (286/628) Resolving deltas: 47% (298/628) Resolving deltas: 49% (310/628) Resolving deltas: 66% (417/628) Resolving deltas: 68% (430/628) Resolving deltas: 69% (434/628) Resolving deltas: 70% (443/628) Resolving deltas: 72% (458/628) Resolving deltas: 74% (466/628) Resolving deltas: 78% (492/628) Resolving deltas: 79% (497/628) Resolving deltas: 83% (527/628) Resolving deltas: 84% (533/628) Resolving deltas: 89% (563/628) Resolving deltas: 90% (570/628) Resolving deltas: 91% (575/628) Resolving deltas: 100% (628/628) Resolving deltas: 100% (628/628), done. bash ~/.toolbox/install-toolbox source ~/.toolbox/toolbox echo 'source ~/.toolbox/toolbox' >> ~/.bash_profile if [ -f /etc/init.d/xvfb ]; then /etc/init.d/xvfb start; fi Starting virtual X frame buffer: Xvfb. eval `ssh-agent` Agent pid 1872 echo 'eval $(ssh-agent) >/dev/null' >> ~/.bash_profile ssh-keyscan -p 29920 -H 94.130.158.146 >> /home/semaphore/.ssh/known_hosts # 94.130.158.146:29920 SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.13 # 94.130.158.146:29920 SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.13 # 94.130.158.146:29920 SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.13 ssh-add /home/semaphore/.ssh/semaphore_cache_key Identity added: /home/semaphore/.ssh/semaphore_cache_key (/home/semaphore/.ssh/semaphore_cache_key) echo 'yes' > /tmp/sempahore-user-commands-have-started checkout Performing shallow clone with depth: 50 HEAD is now at 40ae592 Merge pull request #11 from semaphoreci-demos/dependabot/npm_and_yarn/jquery-3.4.1 git clone https://github.com/sensiolabs/security-checker.git Cloning into 'security-checker'... remote: Enumerating objects: 10, done. remote: Counting objects: 10% (1/10) remote: Counting objects: 20% (2/10) remote: Counting objects: 30% (3/10) remote: Counting objects: 40% (4/10) remote: Counting objects: 50% (5/10) remote: Counting objects: 60% (6/10) remote: Counting objects: 70% (7/10) remote: Counting objects: 80% (8/10) remote: Counting objects: 90% (9/10) remote: Counting objects: 100% (10/10) remote: Counting objects: 100% (10/10), done. remote: Compressing objects: 11% (1/9) remote: Compressing objects: 22% (2/9) remote: Compressing objects: 33% (3/9) remote: Compressing objects: 44% (4/9) remote: Compressing objects: 55% (5/9) remote: Compressing objects: 66% (6/9) remote: Compressing objects: 77% (7/9) remote: Compressing objects: 88% (8/9) remote: Compressing objects: 100% (9/9) remote: Compressing objects: 100% (9/9), done. Receiving objects: 0% (1/756) Receiving objects: 1% (8/756) Receiving objects: 2% (16/756) Receiving objects: 3% (23/756) Receiving objects: 4% (31/756) Receiving objects: 5% (38/756) Receiving objects: 6% (46/756) Receiving objects: 7% (53/756) Receiving objects: 8% (61/756) Receiving objects: 9% (69/756) Receiving objects: 10% (76/756) Receiving objects: 11% (84/756) Receiving objects: 12% (91/756) Receiving objects: 13% (99/756) Receiving objects: 14% (106/756) Receiving objects: 15% (114/756) Receiving objects: 16% (121/756) Receiving objects: 17% (129/756) Receiving objects: 18% (137/756) Receiving objects: 19% (144/756) Receiving objects: 20% (152/756) Receiving objects: 21% (159/756) Receiving objects: 22% (167/756) Receiving objects: 23% (174/756) Receiving objects: 24% (182/756) Receiving objects: 25% (189/756) Receiving objects: 26% (197/756) Receiving objects: 27% (205/756) Receiving objects: 28% (212/756) Receiving objects: 29% (220/756) Receiving objects: 30% (227/756) Receiving objects: 31% (235/756) Receiving objects: 32% (242/756) Receiving objects: 33% (250/756) Receiving objects: 34% (258/756) Receiving objects: 35% (265/756) Receiving objects: 36% (273/756) Receiving objects: 37% (280/756) Receiving objects: 38% (288/756) Receiving objects: 39% (295/756) Receiving objects: 40% (303/756) Receiving objects: 41% (310/756) Receiving objects: 42% (318/756) Receiving objects: 43% (326/756) Receiving objects: 44% (333/756) Receiving objects: 45% (341/756) Receiving objects: 46% (348/756) Receiving objects: 47% (356/756) Receiving objects: 48% (363/756) Receiving objects: 49% (371/756) Receiving objects: 50% (378/756) Receiving objects: 51% (386/756) Receiving objects: 52% (394/756) Receiving objects: 53% (401/756) Receiving objects: 54% (409/756) Receiving objects: 55% (416/756) Receiving objects: 56% (424/756) Receiving objects: 57% (431/756) Receiving objects: 58% (439/756) Receiving objects: 59% (447/756) Receiving objects: 60% (454/756) Receiving objects: 61% (462/756) Receiving objects: 62% (469/756) Receiving objects: 63% (477/756) Receiving objects: 64% (484/756) Receiving objects: 65% (492/756) Receiving objects: 66% (499/756) Receiving objects: 67% (507/756) Receiving objects: 68% (515/756) Receiving objects: 69% (522/756) Receiving objects: 70% (530/756) Receiving objects: 71% (537/756) Receiving objects: 72% (545/756) Receiving objects: 73% (552/756) Receiving objects: 74% (560/756) Receiving objects: 75% (567/756) remote: Total 756 (delta 0), reused 6 (delta 0), pack-reused 746 Receiving objects: 76% (575/756) Receiving objects: 77% (583/756) Receiving objects: 78% (590/756) Receiving objects: 79% (598/756) Receiving objects: 80% (605/756) Receiving objects: 81% (613/756) Receiving objects: 82% (620/756) Receiving objects: 83% (628/756) Receiving objects: 84% (636/756) Receiving objects: 85% (643/756) Receiving objects: 86% (651/756) Receiving objects: 87% (658/756) Receiving objects: 88% (666/756) Receiving objects: 89% (673/756) Receiving objects: 90% (681/756) Receiving objects: 91% (688/756) Receiving objects: 92% (696/756) Receiving objects: 93% (704/756) Receiving objects: 94% (711/756) Receiving objects: 95% (719/756) Receiving objects: 96% (726/756) Receiving objects: 97% (734/756) Receiving objects: 98% (741/756) Receiving objects: 99% (749/756) Receiving objects: 100% (756/756) Receiving objects: 100% (756/756), 122.46 KiB | 620.00 KiB/s, done. Resolving deltas: 0% (0/382) Resolving deltas: 1% (4/382) Resolving deltas: 2% (8/382) Resolving deltas: 3% (13/382) Resolving deltas: 4% (16/382) Resolving deltas: 5% (20/382) Resolving deltas: 6% (23/382) Resolving deltas: 7% (28/382) Resolving deltas: 8% (31/382) Resolving deltas: 11% (44/382) Resolving deltas: 13% (53/382) Resolving deltas: 23% (89/382) Resolving deltas: 25% (96/382) Resolving deltas: 33% (129/382) Resolving deltas: 34% (131/382) Resolving deltas: 36% (140/382) Resolving deltas: 40% (155/382) Resolving deltas: 42% (163/382) Resolving deltas: 45% (175/382) Resolving deltas: 48% (186/382) Resolving deltas: 49% (189/382) Resolving deltas: 55% (212/382) Resolving deltas: 56% (217/382) Resolving deltas: 57% (218/382) Resolving deltas: 61% (236/382) Resolving deltas: 62% (238/382) Resolving deltas: 64% (246/382) Resolving deltas: 74% (284/382) Resolving deltas: 77% (296/382) Resolving deltas: 79% (302/382) Resolving deltas: 80% (308/382) Resolving deltas: 81% (311/382) Resolving deltas: 84% (323/382) Resolving deltas: 85% (326/382) Resolving deltas: 86% (329/382) Resolving deltas: 88% (339/382) Resolving deltas: 89% (340/382) Resolving deltas: 90% (344/382) Resolving deltas: 97% (372/382) Resolving deltas: 98% (377/382) Resolving deltas: 99% (379/382) Resolving deltas: 100% (382/382) Resolving deltas: 100% (382/382), done. cd security-checker composer install Loading composer repositories with package information Updating dependencies (including require-dev) Package operations: 12 installs, 0 updates, 0 removals - Installing psr/container (1.0.0): Downloading (connecting...)Downloading (0%) Downloading (75%)Downloading (100%) - Installing symfony/service-contracts (v2.0.1): Downloading (connecting...)Downloading (0%) Downloading (100%) - Installing symfony/polyfill-php73 (v1.13.1): Downloading (connecting...)Downloading (0%) Downloading (65%)Downloading (100%) - Installing symfony/polyfill-mbstring (v1.13.1): Downloading (connecting...)Downloading (0%) Downloading (30%)Downloading (55%)Downloading (85%)Downloading (100%) - Installing symfony/console (v5.0.1): Downloading (connecting...)Downloading (0%) Downloading (5%)Downloading (10%)Downloading (15%)Downloading (20%)Downloading (25%)Downloading (30%)Downloading (35%)Downloading (40%)Downloading (45%)Downloading (50%)Downloading (55%)Downloading (60%)Downloading (65%)Downloading (70%)Downloading (75%)Downloading (80%)Downloading (85%)Downloading (90%)Downloading (95%)Downloading (100%) - Installing symfony/http-client-contracts (v2.0.1): Downloading (connecting...)Downloading (0%) Downloading (35%)Downloading (50%)Downloading (85%)Downloading (100%) - Installing psr/log (1.1.2): Downloading (connecting...)Downloading (0%) Downloading (25%)Downloading (100%) - Installing symfony/http-client (v5.0.1): Downloading (connecting...)Downloading (0%) Downloading (10%)Downloading (15%)Downloading (25%)Downloading (35%)Downloading (40%)Downloading (50%)Downloading (60%)Downloading (65%)Downloading (75%)Downloading (85%)Downloading (90%)Downloading (100%) - Installing symfony/polyfill-php72 (v1.13.1): Downloading (connecting...)Downloading (0%) Downloading (80%)Downloading (100%) - Installing symfony/polyfill-intl-idn (v1.13.1): Downloading (connecting...)Downloading (0%) Downloading (45%)Downloading (100%) - Installing symfony/mime (v5.0.1): Downloading (connecting...)Downloading (0%) Downloading (10%)Downloading (15%)Downloading (25%)Downloading (30%)Downloading (35%)Downloading (40%)Downloading (50%)Downloading (60%)Downloading (65%)Downloading (75%)Downloading (80%)Downloading (85%)Downloading (90%)Downloading (100%) - Installing symfony/polyfill-ctype (v1.13.1): Downloading (connecting...)Downloading (0%) Downloading (100%) symfony/service-contracts suggests installing symfony/service-implementation symfony/console suggests installing symfony/event-dispatcher symfony/console suggests installing symfony/lock symfony/console suggests installing symfony/process symfony/polyfill-intl-idn suggests installing ext-intl (For best performance) Writing lock file Generating autoload files php security-checker security:check ../composer.lock Symfony Security Check Report ============================= 1 packages have known vulnerabilities. symfony/http-kernel (v4.2.8) ---------------------------- * [CVE-2019-18887][]: Use constant time comparison in UriSigner [CVE-2019-18887]: https://symfony.com/cve-2019-18887 Note that this checker can only detect vulnerabilities that are referenced in the SensioLabs security advisories database. Execute this command regularly to check the newly discovered vulnerabilities. export SEMAPHORE_JOB_RESULT=failed