krz/gitbay

Build 1419 success

sonar on main · 0f02db6321 · queued 2026-09-20 03:30 UTC · finished 2026-09-20 03:31 UTC · ran 1m1s

setup 
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (0f02db6321)
step 1/1 set -eu 
03:30:28.393 INFO  Scanner configuration file: /var/lib/gitbay-runner/work/home/krz/gitbay/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
03:30:28.396 INFO  Project root configuration file: /workspace/sonar-project.properties
03:30:28.409 INFO  SonarScanner CLI 8.1.0.6389
03:30:28.414 INFO  Linux 6.12.105+deb13-amd64 amd64
03:30:31.497 INFO  Communicating with SonarQube Cloud
03:30:31.498 INFO  JRE provisioning: os[linux], arch[x86_64]
03:30:34.959 INFO  Starting SonarScanner Engine...
03:30:34.959 INFO  Java 21.0.12.1 Eclipse Adoptium (64-bit)
03:30:38.599 INFO  Load global settings
03:30:39.027 INFO  Load global settings (done) | time=427ms
03:30:39.121 INFO  Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
03:30:39.394 INFO  Loading required plugins
03:30:39.394 INFO  Load plugins index
03:30:39.464 INFO  Load plugins index (done) | time=71ms
03:30:39.465 INFO  Load/download plugins
03:30:40.157 INFO  Load/download plugins (done) | time=691ms
03:30:40.321 INFO  Loaded core extensions: a3s, architecture, sca
03:30:40.567 INFO  Load project settings for component key: 'krz_gitbay'
03:30:40.841 INFO  Load project settings for component key: 'krz_gitbay' (done) | time=274ms
03:30:41.101 INFO  Process project properties
03:30:41.114 INFO  Project key: krz_gitbay
03:30:41.114 INFO  Base dir: /workspace
03:30:41.115 INFO  Working dir: /workspace/.scannerwork
03:30:41.142 INFO  Check ALM binding of project 'krz_gitbay'
03:30:41.213 INFO  Detected project binding: NOT_BOUND
03:30:41.216 INFO  Check ALM binding of project 'krz_gitbay' (done) | time=71ms
03:30:41.219 INFO  Load branch configuration
03:30:41.220 INFO  Load branch configuration (done) | time=1ms
03:30:41.224 INFO  Create analysis
03:30:41.505 INFO  Create analysis (done) | time=281ms
03:30:41.748 INFO  Load quality profiles
03:30:42.228 INFO  Load quality profiles (done) | time=476ms
03:30:42.368 INFO  Load active rules
03:30:42.662 INFO  Load active rules (done) | time=294ms
03:30:42.800 INFO  Organization key: krz
03:30:42.819 INFO  Preprocessing files...
03:30:43.093 INFO  5 languages detected in 594 preprocessed files (done) | time=272ms
03:30:43.093 INFO  742 files ignored because of inclusion/exclusion patterns
03:30:43.093 INFO  3 directories skipped because of exclusion patterns (content not counted)
03:30:43.093 INFO  28 files ignored because of scm ignore settings
03:30:43.101 INFO  Loading plugins for detected languages
03:30:43.101 INFO  Load/download plugins
03:30:44.712 INFO  Load/download plugins (done) | time=1608ms
03:30:44.917 INFO  Load project repositories
03:30:45.150 INFO  Load project repositories (done) | time=232ms
03:30:45.173 INFO  Indexing files...
03:30:45.173 INFO  Project configuration:
03:30:45.173 INFO    Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
03:30:45.174 INFO    Included tests: **/*_test.go
03:30:45.265 INFO  594 files indexed (done) | time=90ms
03:30:45.266 INFO  Quality profile for css: Sonar way core
03:30:45.266 INFO  Quality profile for go: Sonar way core
03:30:45.266 INFO  Quality profile for shell: Sonar way core
03:30:45.266 INFO  Quality profile for web: Sonar way core
03:30:45.266 INFO  Quality profile for yaml: Sonar way core
03:30:45.266 INFO  ------------- Run sensors on module gitbay
03:30:45.321 INFO  Load metrics repository
03:30:45.387 INFO  Load metrics repository (done) | time=65ms
03:30:45.395 INFO  Sensor cache enabled
03:30:45.399 INFO  Load sensor cache
03:30:45.714 INFO  Load sensor cache (1 MB) | time=315ms
03:30:46.128 INFO  Reflections took 57 ms to scan 1 urls, producing 30 keys and 303 values
03:30:46.789 INFO  Sensor IaC YAML File Type Classification Sensor [iac]
03:30:46.808 INFO  Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=19ms
03:30:46.809 INFO  Sensor GoModuleSecuritySensor [securitygofrontend]
03:30:46.810 INFO  Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
03:30:46.810 INFO  Sensor HTML [web]
03:30:47.309 INFO  Sensor HTML [web] (done) | time=500ms
03:30:47.310 INFO  Sensor Code Quality and Security for Go [go]
03:30:47.384 INFO  27 folders (497 files) to be analyzed
03:30:57.384 INFO  19 / 27 folders analyzed, current folder: /workspace/internal/config (2 files, analyzing)
03:30:57.959 INFO  27/27 folders (497 files) have been analyzed
03:30:57.960 INFO  Sensor Code Quality and Security for Go [go] (done) | time=10649ms
03:30:57.961 INFO  Sensor IaC CloudFormation Sensor [iac]
03:30:57.961 INFO  There are no files to be analyzed for the CloudFormation language
03:30:57.962 INFO  Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
03:30:57.962 INFO  Sensor IaC cfn-lint report Sensor [iac]
03:30:57.963 INFO  Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
03:30:57.963 INFO  Sensor IaC Kustomization Sensor [iac]
03:30:57.964 INFO  Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
03:30:57.965 INFO  Sensor IaC hadolint report Sensor [iac]
03:30:57.965 INFO  Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
03:30:57.965 INFO  Sensor Java Config Sensor [iac]
03:30:57.965 INFO  There are no files to be analyzed for the Java language
03:30:57.965 INFO  Sensor Java Config Sensor [iac] (done) | time=0ms
03:30:57.965 INFO  Sensor IaC Docker Sensor [iac]
03:30:58.018 INFO  1 source file to be analyzed
03:30:58.106 INFO  1/1 source file has been analyzed
03:30:58.107 INFO  Sensor IaC Docker Sensor [iac] (done) | time=145ms
03:30:58.109 INFO  Sensor IaC Ansible Sensor [iac]
03:30:58.109 INFO  There are no files to be analyzed for the Ansible language
03:30:58.109 INFO  Sensor IaC Ansible Sensor [iac] (done) | time=0ms
03:30:58.109 INFO  Sensor IaC ansible-lint report Sensor [iac]
03:30:58.109 INFO  Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
03:30:58.109 INFO  Sensor IaC spectral report Sensor [iac]
03:30:58.110 INFO  Sensor IaC spectral report Sensor [iac] (done) | time=0ms
03:30:58.110 INFO  Sensor IaC GitHub Actions Sensor [iac]
03:30:58.110 INFO  There are no files to be analyzed for the GitHub Actions language
03:30:58.110 INFO  Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
03:30:58.110 INFO  Sensor IaC actionlint report Sensor [iac]
03:30:58.110 INFO  Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
03:30:58.110 INFO  Sensor IaC Azure Pipelines Sensor [iac]
03:30:58.110 INFO  There are no files to be analyzed for the Azure Pipelines language
03:30:58.110 INFO  Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
03:30:58.110 INFO  Sensor IaC Shell Sensor [iac]
03:30:58.112 INFO  5 source files to be analyzed
03:30:58.186 INFO  5/5 source files have been analyzed
03:30:58.186 INFO  Sensor IaC Shell Sensor [iac] (done) | time=76ms
03:30:58.187 INFO  Sensor IaC Kubernetes Sensor [iac]
03:30:58.245 INFO  There are no files to be analyzed for the Kubernetes language
03:30:58.245 INFO  Sensor IaC Kubernetes Sensor [iac] (done) | time=58ms
03:30:58.245 INFO  Sensor IaC YAML Sensor [iac]
03:30:58.246 INFO  Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
03:30:58.246 INFO  Sensor IaC YAML Sensor [iac] (done) | time=0ms
03:30:58.246 INFO  Sensor Serverless configuration file sensor [security]
03:30:58.246 INFO  0 Serverless function entries were found in the project
03:30:58.247 INFO  0 Serverless function handlers were kept as entrypoints
03:30:58.247 INFO  Sensor Serverless configuration file sensor [security] (done) | time=1ms
03:30:58.247 INFO  Sensor AWS SAM template file sensor [security]
03:30:58.252 INFO  Sensor AWS SAM template file sensor [security] (done) | time=4ms
03:30:58.252 INFO  Sensor EnterpriseTextAndSecretsSensor [textenterprise]
03:30:58.285 INFO  Available processors: 3
03:30:58.285 INFO  Using 3 threads for analysis.
03:30:58.593 INFO  The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
03:30:58.653 INFO  Start fetching files for the text and secrets analysis
03:30:58.661 INFO  Using Git CLI to retrieve dirty files
03:30:58.696 INFO  Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
03:30:58.697 INFO  Starting the text and secrets analysis
03:30:58.699 INFO  564 source files to be analyzed for the text and secrets analysis
03:30:59.463 INFO  564/564 source files have been analyzed for the text and secrets analysis
03:30:59.464 INFO  Start fetching files for the binary file analysis
03:30:59.465 INFO  There are no files to be analyzed for the binary file analysis
03:30:59.471 INFO  Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=1218ms
03:30:59.473 INFO  Sensor GoSecuritySensor [security]
03:30:59.476 INFO  10 taint analysis rules enabled.
03:31:00.523 INFO  Analyzing 2947 UCFGs to detect vulnerabilities.
03:31:01.672 INFO  All rules entry points : 97
03:31:01.673 INFO  Retained UCFGs : 287
03:31:01.761 INFO  0 / 287 UCFGs simulated, memory usage: 452 MB
03:31:02.241 INFO  287 / 287 UCFGs simulated, memory usage: 576 MB
03:31:02.253 WARN  Failed to find InputFile for __unknown_file, check exclusions.
03:31:02.253 WARN  Failed to find InputFile for __unknown_file, check exclusions.
03:31:02.256 WARN  Failed to find InputFile for __unknown_file, check exclusions.
03:31:02.258 WARN  Failed to find InputFile for __unknown_file, check exclusions.
03:31:02.262 INFO  go security sensor: Begin: 2026-09-20T03:30:59.473719227Z, End: 2026-09-20T03:31:02.260590994Z, Duration: 00:00:02.786
  Resolve files to analyze: Begin: 2026-09-20T03:30:59.476805613Z, End: 2026-09-20T03:30:59.477864105Z, Duration: 00:00:00.001
  Load type hierarchy and UCFGs: Begin: 2026-09-20T03:30:59.478185177Z, End: 2026-09-20T03:31:00.522516191Z, Duration: 00:00:01.044
    Load type hierarchy: Begin: 2026-09-20T03:30:59.478189383Z, End: 2026-09-20T03:30:59.483535377Z, Duration: 00:00:00.005
    Load UCFGs: Begin: 2026-09-20T03:30:59.483598611Z, End: 2026-09-20T03:31:00.522425163Z, Duration: 00:00:01.038
  Check cache: Begin: 2026-09-20T03:31:00.522741278Z, End: 2026-09-20T03:31:00.523565988Z, Duration: 00:00:00.000
    Load cache: Begin: 2026-09-20T03:31:00.523324714Z, End: 2026-09-20T03:31:00.523359126Z, Duration: 00:00:00.000
  Create runtime call graph: Begin: 2026-09-20T03:31:00.523590194Z, End: 2026-09-20T03:31:01.167397244Z, Duration: 00:00:00.643
    Variable Type Analysis #1: Begin: 2026-09-20T03:31:00.524078027Z, End: 2026-09-20T03:31:00.897909210Z, Duration: 00:00:00.373
      Create runtime type propagation graph: Begin: 2026-09-20T03:31:00.524930458Z, End: 2026-09-20T03:31:00.705447239Z, Duration: 00:00:00.180
      Run SCC (Tarjan) on 61549 nodes: Begin: 2026-09-20T03:31:00.705861652Z, End: 2026-09-20T03:31:00.796176412Z, Duration: 00:00:00.090
      Propagate runtime types to strongly connected components: Begin: 2026-09-20T03:31:00.796353008Z, End: 2026-09-20T03:31:00.897800327Z, Duration: 00:00:00.101
    Variable Type Analysis #2: Begin: 2026-09-20T03:31:00.900773895Z, End: 2026-09-20T03:31:01.164490226Z, Duration: 00:00:00.263
      Create runtime type propagation graph: Begin: 2026-09-20T03:31:00.900779985Z, End: 2026-09-20T03:31:01.007088768Z, Duration: 00:00:00.106
      Run SCC (Tarjan) on 61549 nodes: Begin: 2026-09-20T03:31:01.007192624Z, End: 2026-09-20T03:31:01.072886378Z, Duration: 00:00:00.065
      Propagate runtime types to strongly connected components: Begin: 2026-09-20T03:31:01.073013950Z, End: 2026-09-20T03:31:01.164372649Z, Duration: 00:00:00.091
  Load config: Begin: 2026-09-20T03:31:01.167476473Z, End: 2026-09-20T03:31:01.477756633Z, Duration: 00:00:00.310
  Compute entry points: Begin: 2026-09-20T03:31:01.477813879Z, End: 2026-09-20T03:31:01.671944920Z, Duration: 00:00:00.194
  Slice call graph: Begin: 2026-09-20T03:31:01.672203859Z, End: 2026-09-20T03:31:01.680573275Z, Duration: 00:00:00.008
  Live variable analysis: Begin: 2026-09-20T03:31:01.680686866Z, End: 2026-09-20T03:31:01.758447051Z, Duration: 00:00:00.077
  Taint analysis for go: Begin: 2026-09-20T03:31:01.758700212Z, End: 2026-09-20T03:31:02.241381338Z, Duration: 00:00:00.482
  Report issues: Begin: 2026-09-20T03:31:02.241478074Z, End: 2026-09-20T03:31:02.254796067Z, Duration: 00:00:00.013
  Store cache: Begin: 2026-09-20T03:31:02.255320054Z, End: 2026-09-20T03:31:02.259975959Z, Duration: 00:00:00.004
03:31:02.262 INFO  go security sensor peak memory (pre-GC, max allocation pressure): 908 MB
03:31:02.262 INFO  go security sensor peak memory (post-GC, max live footprint): 370 MB
03:31:02.262 INFO  Sensor GoSecuritySensor [security] (done) | time=2790ms
03:31:02.269 INFO  ------------- Run sensors on project
03:31:02.499 INFO  Sensor goSecurityContextCollectorSensor [security]
03:31:02.500 INFO  Sensor goSecurityContextCollectorSensor [security] (done) | time=0ms
03:31:02.500 INFO  Sensor Deterministic Rule Engine for Go [dre]
03:31:02.557 INFO  Extracting bridge from /bridge/bridge-linux-x64.xz
03:31:03.054 INFO  Bridge extracted to /workspace/.scannerwork/.sonartmp/bridge-dre/bridge
03:31:03.438 INFO  Sensor Deterministic Rule Engine for Go [dre] (done) | time=938ms
03:31:03.439 INFO  Sensor Deterministic Rule Engine for Shell [dre]
03:31:03.446 INFO  Sensor Deterministic Rule Engine for Shell [dre] (done) | time=7ms
03:31:03.447 INFO  Sensor SQL Dialect Detection [dre]
03:31:03.450 INFO  Sensor SQL Dialect Detection [dre] (done) | time=3ms
03:31:03.450 INFO  Sensor DRE Project Telemetry [dre]
03:31:03.450 INFO  Sensor DRE Project Telemetry [dre] (done) | time=0ms
03:31:03.450 INFO  Sensor GoProjectSensor [go]
03:31:03.451 INFO  Sensor GoProjectSensor [go] (done) | time=0ms
03:31:03.452 INFO  Sensor Sonar Go A3S Context Collector [go]
03:31:03.452 INFO  Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
03:31:03.452 INFO  Sensor JavaScript/TypeScript/CSS analysis [javascript]
03:31:03.676 INFO  Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
03:31:03.677 INFO  Deploy location /root/.sonar/js/node-runtime, tagetRuntime: /root/.sonar/js/node-runtime/node,  version: /root/.sonar/js/node-runtime/version.txt
03:31:06.247 INFO  Using embedded Node.js runtime.
03:31:06.248 INFO  Using Node.js executable: '/root/.sonar/js/node-runtime/node'.
03:31:08.764 INFO  Memory configuration: OS (7945 MB), Docker (6144 MB), Node.js (2240 MB).
03:31:08.772 INFO  gRPC analyze-project server listening on 127.0.0.1:46237
03:31:08.960 INFO  Plugin version: [13.9.0.44793]
03:31:11.293 INFO  Found 0 tsconfig.json file(s): []
03:31:11.395 WARN  Failed to parse file [internal/web/templates/mr.html] at line 173: Unknown word {{index $.LabelColors .}}
03:31:11.397 WARN  Failed to parse file [internal/web/templates/orglabels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
03:31:11.536 WARN  Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
03:31:11.539 WARN  Failed to parse file [internal/web/templates/issues.html] at line 14: Unknown word {{index $.LabelColors .Value}}
03:31:11.550 WARN  Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
03:31:11.568 INFO  45 source files to be analyzed
03:31:11.568 INFO  45/45 source files have been analyzed
03:31:11.568 WARN  Failed to parse file [internal/web/templates/mrs.html] at line 14: Unknown word {{index $.LabelColors .Value}}
03:31:11.617 INFO  JasminAstConsumer done
03:31:11.617 INFO  Hit the cache for 0 out of 44
03:31:11.617 INFO  Miss the cache for 44 out of 44: ANALYSIS_MODE_INELIGIBLE [44/44]
03:31:11.617 INFO  Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=8158ms
03:31:11.617 INFO  Sensor IaC Project Sensor [iac]
03:31:11.617 INFO  Sensor IaC Project Sensor [iac] (done) | time=1ms
03:31:11.617 INFO  Sensor Zero Coverage Sensor
03:31:11.707 INFO  Sensor Zero Coverage Sensor (done) | time=94ms
03:31:11.720 INFO  ------------- Gather SCA dependencies on project
03:31:11.922 INFO  Dependency analysis skipped
03:31:11.958 INFO  CPD Executor 2 files had no CPD blocks
03:31:11.959 INFO  CPD Executor Calculating CPD for 261 files
03:31:12.053 INFO  CPD Executor CPD calculation finished (done) | time=94ms
03:31:12.057 INFO  SCM Publisher SCM provider for this project is: git
03:31:12.058 INFO  SCM Publisher 548 source files to be analyzed
03:31:13.262 INFO  SCM Publisher 548/548 source files have been analyzed (done) | time=1203ms
03:31:13.270 INFO  SCM revision ID '0f02db6321aaa941a8e2ff7bbece63423e40e311'
03:31:13.540 INFO  Analysis report generated in 254ms, dir size=4 MB
03:31:14.179 INFO  Analysis report compressed in 638ms, zip size=2 MB
03:31:15.133 INFO  Analysis report uploaded in 953ms
03:31:15.134 INFO  ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
03:31:15.134 INFO  Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
03:31:15.134 INFO  More about the report processing at https://sonarcloud.io/api/ce/task?id=AaC83jfy-tlGSghLjq9o
03:31:15.134 INFO  ------------- Upload SCA dependency files
03:31:16.765 INFO  Sensor cache published successfully
03:31:17.124 INFO  Analysis total time: 36.806 s
03:31:17.128 INFO  SonarScanner Engine completed successfully
03:31:17.497 INFO  EXECUTION SUCCESS
03:31:17.499 INFO  Total time: 49.108s