[05:56:46Z] Checking Docker availability [05:56:46Z] Ensuring Docker base image python:3.10-slim-bullseye is available [05:56:47Z] Resolving project cache context [05:56:47Z] Preparing Horilla repository at /pruva/project-cache/repo HEAD is now at 61bd5173 Merge branch 'master' into 1.0 HEAD is now at b3bd29d1 Merge branch 'master' into 1.0 Reusing dependency directory /tmp/pruva-horilla-deps-f86e9625862fa828 for requirements sha f86e9625862fa82841b874e3a4b8f74a80edca3c9fd7f51eb07bd71c7ad13e2e Reusing dependency directory /tmp/pruva-horilla-deps-7fb44184827cf327 for requirements sha 7fb44184827cf327e5b2aa0beafdd4f5a24ab5aaed1954b52a81d9f27e08461a [05:56:50Z] Preparing migrated SQLite runtime template for vuln (1.5.0 61bd5173220d19925ad8220db9152a75c881ea73) [05:58:11Z] Preparing migrated SQLite runtime template for fixed (1.6.0 b3bd29d15819cbece45c58e6268ddd0614e387d6) [05:59:33Z] Running vulnerable/fixed matrix twice from clean containers [05:59:33Z] Starting vuln attempt 1 Horilla runserver container on 127.0.0.1:20893 { "attempt": 1, "baseline_status": "302", "baseline_without_referer_denied_and_no_canary": true, "fixed_trigger_denied_and_no_canary": false, "oracle_passed": true, "public_liveness_ok": true, "public_status": "200", "role": "vuln", "trigger_status": "200", "vulnerable_trigger_returned_exact_private_canary": true } [05:59:44Z] Starting fixed attempt 1 Horilla runserver container on 127.0.0.1:20894 { "attempt": 1, "baseline_status": "302", "baseline_without_referer_denied_and_no_canary": true, "fixed_trigger_denied_and_no_canary": true, "oracle_passed": true, "public_liveness_ok": true, "public_status": "200", "role": "fixed", "trigger_status": "302", "vulnerable_trigger_returned_exact_private_canary": false } [05:59:52Z] Starting vuln attempt 2 Horilla runserver container on 127.0.0.1:20895 { "attempt": 2, "baseline_status": "302", "baseline_without_referer_denied_and_no_canary": true, "fixed_trigger_denied_and_no_canary": false, "oracle_passed": true, "public_liveness_ok": true, "public_status": "200", "role": "vuln", "trigger_status": "200", "vulnerable_trigger_returned_exact_private_canary": true } [06:00:01Z] Starting fixed attempt 2 Horilla runserver container on 127.0.0.1:20896 { "attempt": 2, "baseline_status": "302", "baseline_without_referer_denied_and_no_canary": true, "fixed_trigger_denied_and_no_canary": true, "oracle_passed": true, "public_liveness_ok": true, "public_status": "200", "role": "fixed", "trigger_status": "302", "vulnerable_trigger_returned_exact_private_canary": false } [06:00:10Z] All vulnerable and fixed runtime oracles passed