Repository navigation
fix(jenkins): bump audit agent to ubuntu24 for SAST glibc 2.34 - #3519
Merged
Merged
Conversation
…ST exit 51) The analyzer-manager SAST sub-binary (zd_scanner) is a PyInstaller- packed Python 3.14 app with a native extension built against GLIBC_2.34. The docker-ubuntu20-xlarge agent ships glibc 2.31, which is too old: ImportError: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found (required by .../zd_scanner/native/_dfa.cpython-314-...so) Switching the agent label to docker-ubuntu24-xlarge (glibc 2.39) restores SAST and resolves the `Sast scan exit status 51` failure seen in the Audit stage.
ehl-jf
added
the
safe to test
RemiBou
approved these changes
May 28, 2026
This branch had an error being deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
docker-ubuntu20-xlargetodocker-ubuntu24-xlarge(single-line change toJenkinsfile:17).failed to run Sast scan. Exit code received: exit status 51seen in the Audit stage.Root cause
The analyzer-manager SAST sub-binary (
zd_scanner/scanner) is a PyInstaller-packed Python 3.14 app whose native extension_dfa.cpython-314-x86_64-linux-gnu.sois linked againstGLIBC_2.34. The previousdocker-ubuntu20-xlargeagent ships glibc 2.31, which is too old:Other JAS scanners (SCA, Secrets, IaC) are unaffected because they use a Go binary (
jas_scanner/tf_scanner), not the Pythonzd_scanner. That's why only SAST was failing while the rest of the audit ran clean.Ubuntu 24.04 ships glibc 2.39, which satisfies the requirement.
Test plan
docker-ubuntu24-xlargeagent pool is online and accepts the job.exit status 51.Reproduced locally in
ubuntu:20.04(fails identically) and verified the root cause via the analyzer-manager debug log (AM_LOG_DIRECTORY).