Build 1185 success
sonar on main · bf7ced2be6 · queued 2026-09-10 03:30 UTC · finished 2026-09-10 03:31 UTC · ran 55s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (bf7ced2be6)
step 1/1 set -eu
03:30:59.081 INFO Scanner configuration file: /var/lib/gitbay-runner/work/home/krz/gitbay/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
03:30:59.084 INFO Project root configuration file: /workspace/sonar-project.properties
03:30:59.095 INFO SonarScanner CLI 8.1.0.6389
03:30:59.099 INFO Linux 6.12.105+deb13-amd64 amd64
03:31:02.146 INFO Communicating with SonarQube Cloud
03:31:02.147 INFO JRE provisioning: os[linux], arch[x86_64]
03:31:04.986 INFO Starting SonarScanner Engine...
03:31:04.986 INFO Java 21.0.12.1 Eclipse Adoptium (64-bit)
03:31:08.301 INFO Load global settings
03:31:08.679 INFO Load global settings (done) | time=372ms
03:31:08.760 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
03:31:08.991 INFO Loading required plugins
03:31:08.992 INFO Load plugins index
03:31:09.059 INFO Load plugins index (done) | time=67ms
03:31:09.060 INFO Load/download plugins
03:31:09.757 INFO Load/download plugins (done) | time=697ms
03:31:09.880 INFO Loaded core extensions: a3s, architecture, sca
03:31:10.103 INFO Load project settings for component key: 'krz_gitbay'
03:31:10.421 INFO Load project settings for component key: 'krz_gitbay' (done) | time=318ms
03:31:10.669 INFO Process project properties
03:31:10.685 INFO Project key: krz_gitbay
03:31:10.685 INFO Base dir: /workspace
03:31:10.685 INFO Working dir: /workspace/.scannerwork
03:31:10.696 INFO Check ALM binding of project 'krz_gitbay'
03:31:10.875 INFO Detected project binding: NOT_BOUND
03:31:10.875 INFO Check ALM binding of project 'krz_gitbay' (done) | time=179ms
03:31:10.878 INFO Load branch configuration
03:31:10.879 INFO Load branch configuration (done) | time=1ms
03:31:10.882 INFO Create analysis
03:31:11.168 INFO Create analysis (done) | time=283ms
03:31:11.356 INFO Load quality profiles
03:31:11.781 INFO Load quality profiles (done) | time=424ms
03:31:11.904 INFO Load active rules
03:31:12.382 INFO Load active rules (done) | time=477ms
03:31:12.489 INFO Organization key: krz
03:31:12.510 INFO Preprocessing files...
03:31:12.854 INFO 5 languages detected in 505 preprocessed files (done) | time=344ms
03:31:12.855 INFO 637 files ignored because of inclusion/exclusion patterns
03:31:12.855 INFO 3 directories skipped because of exclusion patterns (content not counted)
03:31:12.855 INFO 28 files ignored because of scm ignore settings
03:31:12.862 INFO Loading plugins for detected languages
03:31:12.862 INFO Load/download plugins
03:31:14.524 INFO Load/download plugins (done) | time=1661ms
03:31:14.704 INFO Load project repositories
03:31:14.972 INFO Load project repositories (done) | time=268ms
03:31:14.991 INFO Indexing files...
03:31:14.992 INFO Project configuration:
03:31:14.992 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
03:31:14.993 INFO Included tests: **/*_test.go
03:31:15.027 INFO 505 files indexed (done) | time=35ms
03:31:15.028 INFO Quality profile for css: Sonar way essentials
03:31:15.028 INFO Quality profile for go: Sonar way essentials
03:31:15.028 INFO Quality profile for shell: Sonar way essentials
03:31:15.028 INFO Quality profile for web: Sonar way essentials
03:31:15.028 INFO Quality profile for yaml: Sonar way essentials
03:31:15.029 INFO ------------- Run sensors on module gitbay
03:31:15.086 INFO Load metrics repository
03:31:15.150 INFO Load metrics repository (done) | time=62ms
03:31:15.155 INFO Sensor cache enabled
03:31:15.158 INFO Load sensor cache
03:31:15.522 INFO Load sensor cache (1 MB) | time=363ms
03:31:15.928 INFO Reflections took 44 ms to scan 1 urls, producing 30 keys and 295 values
03:31:16.464 INFO Sensor IaC YAML File Type Classification Sensor [iac]
03:31:16.483 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=17ms
03:31:16.483 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
03:31:16.483 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
03:31:16.484 INFO Sensor HTML [web]
03:31:16.876 INFO Sensor HTML [web] (done) | time=393ms
03:31:16.877 INFO Sensor Code Quality and Security for Go [go]
03:31:16.951 INFO 27 folders (429 files) to be analyzed
03:31:25.716 INFO 27/27 folders (429 files) have been analyzed
03:31:25.716 INFO Sensor Code Quality and Security for Go [go] (done) | time=8839ms
03:31:25.717 INFO Sensor IaC CloudFormation Sensor [iac]
03:31:25.717 INFO There are no files to be analyzed for the CloudFormation language
03:31:25.717 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
03:31:25.717 INFO Sensor IaC cfn-lint report Sensor [iac]
03:31:25.717 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
03:31:25.718 INFO Sensor IaC Kustomization Sensor [iac]
03:31:25.718 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
03:31:25.718 INFO Sensor IaC hadolint report Sensor [iac]
03:31:25.719 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
03:31:25.719 INFO Sensor Java Config Sensor [iac]
03:31:25.719 INFO There are no files to be analyzed for the Java language
03:31:25.719 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
03:31:25.719 INFO Sensor IaC Docker Sensor [iac]
03:31:25.775 INFO 1 source file to be analyzed
03:31:25.830 INFO 1/1 source file has been analyzed
03:31:25.831 INFO Sensor IaC Docker Sensor [iac] (done) | time=110ms
03:31:25.831 INFO Sensor IaC Ansible Sensor [iac]
03:31:25.831 INFO There are no files to be analyzed for the Ansible language
03:31:25.833 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
03:31:25.833 INFO Sensor IaC ansible-lint report Sensor [iac]
03:31:25.833 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
03:31:25.833 INFO Sensor IaC spectral report Sensor [iac]
03:31:25.833 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
03:31:25.833 INFO Sensor IaC GitHub Actions Sensor [iac]
03:31:25.833 INFO There are no files to be analyzed for the GitHub Actions language
03:31:25.833 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
03:31:25.834 INFO Sensor IaC actionlint report Sensor [iac]
03:31:25.834 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
03:31:25.834 INFO Sensor IaC Azure Pipelines Sensor [iac]
03:31:25.834 INFO There are no files to be analyzed for the Azure Pipelines language
03:31:25.834 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
03:31:25.834 INFO Sensor IaC Shell Sensor [iac]
03:31:25.835 INFO 5 source files to be analyzed
03:31:25.883 INFO 5/5 source files have been analyzed
03:31:25.883 INFO Sensor IaC Shell Sensor [iac] (done) | time=50ms
03:31:25.883 INFO Sensor IaC Kubernetes Sensor [iac]
03:31:25.929 INFO There are no files to be analyzed for the Kubernetes language
03:31:25.931 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=46ms
03:31:25.931 INFO Sensor IaC YAML Sensor [iac]
03:31:25.932 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
03:31:25.932 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
03:31:25.932 INFO Sensor Serverless configuration file sensor [security]
03:31:25.940 INFO 0 Serverless function entries were found in the project
03:31:25.941 INFO 0 Serverless function handlers were kept as entrypoints
03:31:25.941 INFO Sensor Serverless configuration file sensor [security] (done) | time=11ms
03:31:25.942 INFO Sensor AWS SAM template file sensor [security]
03:31:25.945 INFO Sensor AWS SAM template file sensor [security] (done) | time=4ms
03:31:25.947 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
03:31:25.962 INFO Available processors: 3
03:31:25.963 INFO Using 3 threads for analysis.
03:31:26.245 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
03:31:26.346 INFO Start fetching files for the text and secrets analysis
03:31:26.352 INFO Using Git CLI to retrieve dirty files
03:31:26.380 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
03:31:26.380 INFO Starting the text and secrets analysis
03:31:26.381 INFO 489 source files to be analyzed for the text and secrets analysis
03:31:27.206 INFO 489/489 source files have been analyzed for the text and secrets analysis
03:31:27.208 INFO Start fetching files for the binary file analysis
03:31:27.209 INFO There are no files to be analyzed for the binary file analysis
03:31:27.217 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=1269ms
03:31:27.217 INFO Sensor GoSecuritySensor [security]
03:31:27.221 INFO 9 taint analysis rules enabled.
03:31:28.117 INFO Analyzing 2526 UCFGs to detect vulnerabilities.
03:31:29.152 INFO All rules entry points : 32
03:31:29.153 INFO Retained UCFGs : 130
03:31:29.195 INFO 0 / 130 UCFGs simulated, memory usage: 427 MB
03:31:29.446 INFO 130 / 130 UCFGs simulated, memory usage: 470 MB
03:31:29.452 WARN Failed to find InputFile for __unknown_file, check exclusions.
03:31:29.457 WARN Failed to find InputFile for __unknown_file, check exclusions.
03:31:29.473 INFO go security sensor: Begin: 2026-09-10T03:31:27.218937525Z, End: 2026-09-10T03:31:29.471286828Z, Duration: 00:00:02.252
Resolve files to analyze: Begin: 2026-09-10T03:31:27.221447457Z, End: 2026-09-10T03:31:27.222656665Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-10T03:31:27.222862854Z, End: 2026-09-10T03:31:28.112498070Z, Duration: 00:00:00.889
Load type hierarchy: Begin: 2026-09-10T03:31:27.222866510Z, End: 2026-09-10T03:31:27.227576409Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-10T03:31:27.227651662Z, End: 2026-09-10T03:31:28.112405771Z, Duration: 00:00:00.884
Check cache: Begin: 2026-09-10T03:31:28.112720444Z, End: 2026-09-10T03:31:28.113642169Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-10T03:31:28.113366995Z, End: 2026-09-10T03:31:28.113388969Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-10T03:31:28.113666887Z, End: 2026-09-10T03:31:28.789159196Z, Duration: 00:00:00.675
Variable Type Analysis #1: Begin: 2026-09-10T03:31:28.114058115Z, End: 2026-09-10T03:31:28.425061488Z, Duration: 00:00:00.311
Create runtime type propagation graph: Begin: 2026-09-10T03:31:28.114517536Z, End: 2026-09-10T03:31:28.248391124Z, Duration: 00:00:00.133
Run SCC (Tarjan) on 52625 nodes: Begin: 2026-09-10T03:31:28.248870003Z, End: 2026-09-10T03:31:28.327149462Z, Duration: 00:00:00.078
Propagate runtime types to strongly connected components: Begin: 2026-09-10T03:31:28.327292286Z, End: 2026-09-10T03:31:28.424945774Z, Duration: 00:00:00.097
Variable Type Analysis #2: Begin: 2026-09-10T03:31:28.427547735Z, End: 2026-09-10T03:31:28.786987401Z, Duration: 00:00:00.359
Create runtime type propagation graph: Begin: 2026-09-10T03:31:28.427553994Z, End: 2026-09-10T03:31:28.613359169Z, Duration: 00:00:00.185
Run SCC (Tarjan) on 52625 nodes: Begin: 2026-09-10T03:31:28.613454772Z, End: 2026-09-10T03:31:28.745947656Z, Duration: 00:00:00.132
Propagate runtime types to strongly connected components: Begin: 2026-09-10T03:31:28.746054536Z, End: 2026-09-10T03:31:28.786873801Z, Duration: 00:00:00.040
Load config: Begin: 2026-09-10T03:31:28.789238956Z, End: 2026-09-10T03:31:28.975046764Z, Duration: 00:00:00.185
Compute entry points: Begin: 2026-09-10T03:31:28.975125782Z, End: 2026-09-10T03:31:29.152112021Z, Duration: 00:00:00.176
Slice call graph: Begin: 2026-09-10T03:31:29.152319343Z, End: 2026-09-10T03:31:29.155334875Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-10T03:31:29.155377780Z, End: 2026-09-10T03:31:29.193120679Z, Duration: 00:00:00.037
Taint analysis for go: Begin: 2026-09-10T03:31:29.193326770Z, End: 2026-09-10T03:31:29.445909755Z, Duration: 00:00:00.252
Report issues: Begin: 2026-09-10T03:31:29.445981052Z, End: 2026-09-10T03:31:29.457440466Z, Duration: 00:00:00.011
Store cache: Begin: 2026-09-10T03:31:29.458069001Z, End: 2026-09-10T03:31:29.470526856Z, Duration: 00:00:00.012
03:31:29.473 INFO go security sensor peak memory (pre-GC, max allocation pressure): 750 MB
03:31:29.473 INFO go security sensor peak memory (post-GC, max live footprint): 330 MB
03:31:29.473 INFO Sensor GoSecuritySensor [security] (done) | time=2257ms
03:31:29.481 INFO ------------- Run sensors on project
03:31:29.712 INFO Sensor Deterministic Rule Engine for Go [dre]
03:31:29.744 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
03:31:30.071 INFO Bridge extracted to /workspace/.scannerwork/.sonartmp/bridge-dre/bridge
03:31:30.646 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=933ms
03:31:30.646 INFO Sensor Deterministic Rule Engine for Shell [dre]
03:31:30.653 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
03:31:30.653 INFO Sensor SQL Dialect Detection [dre]
03:31:30.656 INFO Sensor SQL Dialect Detection [dre] (done) | time=4ms
03:31:30.656 INFO Sensor DRE Project Telemetry [dre]
03:31:30.656 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
03:31:30.657 INFO Sensor GoProjectSensor [go]
03:31:30.657 INFO Sensor GoProjectSensor [go] (done) | time=0ms
03:31:30.657 INFO Sensor Sonar Go A3S Context Collector [go]
03:31:30.657 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
03:31:30.657 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
03:31:30.657 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
03:31:30.658 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
03:31:30.897 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
03:31:30.898 INFO Deploy location /root/.sonar/js/node-runtime, tagetRuntime: /root/.sonar/js/node-runtime/node, version: /root/.sonar/js/node-runtime/version.txt
03:31:33.397 INFO Using embedded Node.js runtime.
03:31:33.399 INFO Using Node.js executable: '/root/.sonar/js/node-runtime/node'.
03:31:35.352 INFO Memory configuration: OS (7945 MB), Docker (6144 MB), Node.js (2240 MB).
03:31:35.359 INFO gRPC analyze-project server listening on 127.0.0.1:43213
03:31:35.630 INFO Plugin version: [13.9.0.44793]
03:31:37.382 INFO Found 0 tsconfig.json file(s): []
03:31:37.607 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
03:31:37.610 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
03:31:37.617 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
03:31:37.640 INFO 39 source files to be analyzed
03:31:37.640 INFO 39/39 source files have been analyzed
03:31:37.678 INFO JasminAstConsumer done
03:31:37.678 INFO Hit the cache for 0 out of 38
03:31:37.678 INFO Miss the cache for 38 out of 38: ANALYSIS_MODE_INELIGIBLE [38/38]
03:31:37.678 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=7019ms
03:31:37.678 INFO Sensor IaC Project Sensor [iac]
03:31:37.681 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
03:31:37.681 INFO Sensor Zero Coverage Sensor
03:31:37.740 INFO Sensor Zero Coverage Sensor (done) | time=56ms
03:31:37.748 INFO ------------- Gather SCA dependencies on project
03:31:38.032 INFO Dependency analysis skipped
03:31:38.064 INFO CPD Executor 2 files had no CPD blocks
03:31:38.064 INFO CPD Executor Calculating CPD for 233 files
03:31:38.150 INFO CPD Executor CPD calculation finished (done) | time=84ms
03:31:38.153 INFO SCM Publisher SCM provider for this project is: git
03:31:38.154 INFO SCM Publisher 474 source files to be analyzed
03:31:39.150 INFO SCM Publisher 474/474 source files have been analyzed (done) | time=995ms
03:31:39.158 INFO SCM revision ID 'bf7ced2be63e8104728f2322d1355a4b7d1bd06c'
03:31:39.387 INFO Analysis report generated in 219ms, dir size=4 MB
03:31:39.924 INFO Analysis report compressed in 537ms, zip size=1 MB
03:31:40.743 INFO Analysis report uploaded in 819ms
03:31:40.744 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
03:31:40.744 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
03:31:40.745 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaCJXwP9tpK6nvaTpqap
03:31:40.745 INFO ------------- Upload SCA dependency files
03:31:42.187 INFO Sensor cache published successfully
03:31:42.546 INFO Analysis total time: 32.667 s
03:31:42.550 INFO SonarScanner Engine completed successfully
03:31:42.918 INFO EXECUTION SUCCESS
03:31:42.919 INFO Total time: 43.840s