krz/gitbay

Build 1438 success

sonar on main · 1371d96586 · queued 2026-09-20 05:56 UTC · finished 2026-09-20 05:57 UTC · ran 1m0s

setup 
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (1371d96586)
step 1/1 set -eu 
05:56:03.078 INFO  Scanner configuration file: /var/lib/gitbay-runner/work/home/krz/gitbay/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
05:56:03.081 INFO  Project root configuration file: /workspace/sonar-project.properties
05:56:03.094 INFO  SonarScanner CLI 8.1.0.6389
05:56:03.099 INFO  Linux 6.12.105+deb13-amd64 amd64
05:56:06.144 INFO  Communicating with SonarQube Cloud
05:56:06.145 INFO  JRE provisioning: os[linux], arch[x86_64]
05:56:09.028 INFO  Starting SonarScanner Engine...
05:56:09.030 INFO  Java 21.0.12.1 Eclipse Adoptium (64-bit)
05:56:12.421 INFO  Load global settings
05:56:12.821 INFO  Load global settings (done) | time=400ms
05:56:12.884 INFO  Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
05:56:13.132 INFO  Loading required plugins
05:56:13.133 INFO  Load plugins index
05:56:13.203 INFO  Load plugins index (done) | time=69ms
05:56:13.205 INFO  Load/download plugins
05:56:13.836 INFO  Load/download plugins (done) | time=632ms
05:56:13.984 INFO  Loaded core extensions: a3s, architecture, sca
05:56:14.207 INFO  Load project settings for component key: 'krz_gitbay'
05:56:14.506 INFO  Load project settings for component key: 'krz_gitbay' (done) | time=300ms
05:56:14.791 INFO  Process project properties
05:56:14.807 INFO  Project key: krz_gitbay
05:56:14.808 INFO  Base dir: /workspace
05:56:14.809 INFO  Working dir: /workspace/.scannerwork
05:56:14.822 INFO  Check ALM binding of project 'krz_gitbay'
05:56:14.965 INFO  Detected project binding: NOT_BOUND
05:56:14.965 INFO  Check ALM binding of project 'krz_gitbay' (done) | time=136ms
05:56:14.965 INFO  Load branch configuration
05:56:14.965 INFO  Load branch configuration (done) | time=1ms
05:56:14.966 INFO  Create analysis
05:56:15.248 INFO  Create analysis (done) | time=282ms
05:56:15.499 INFO  Load quality profiles
05:56:15.907 INFO  Load quality profiles (done) | time=407ms
05:56:16.024 INFO  Load active rules
05:56:16.333 INFO  Load active rules (done) | time=308ms
05:56:16.427 INFO  Organization key: krz
05:56:16.442 INFO  Preprocessing files...
05:56:16.696 INFO  5 languages detected in 595 preprocessed files (done) | time=251ms
05:56:16.697 INFO  743 files ignored because of inclusion/exclusion patterns
05:56:16.697 INFO  3 directories skipped because of exclusion patterns (content not counted)
05:56:16.697 INFO  28 files ignored because of scm ignore settings
05:56:16.704 INFO  Loading plugins for detected languages
05:56:16.706 INFO  Load/download plugins
05:56:18.597 INFO  Load/download plugins (done) | time=1891ms
05:56:18.801 INFO  Load project repositories
05:56:19.018 INFO  Load project repositories (done) | time=216ms
05:56:19.039 INFO  Indexing files...
05:56:19.040 INFO  Project configuration:
05:56:19.040 INFO    Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
05:56:19.040 INFO    Included tests: **/*_test.go
05:56:19.082 INFO  595 files indexed (done) | time=40ms
05:56:19.083 INFO  Quality profile for css: Sonar way core
05:56:19.084 INFO  Quality profile for go: Sonar way core
05:56:19.085 INFO  Quality profile for shell: Sonar way core
05:56:19.085 INFO  Quality profile for web: Sonar way core
05:56:19.086 INFO  Quality profile for yaml: Sonar way core
05:56:19.086 INFO  ------------- Run sensors on module gitbay
05:56:19.147 INFO  Load metrics repository
05:56:19.211 INFO  Load metrics repository (done) | time=62ms
05:56:19.217 INFO  Sensor cache enabled
05:56:19.221 INFO  Load sensor cache
05:56:19.517 INFO  Load sensor cache (1 MB) | time=295ms
05:56:19.928 INFO  Reflections took 52 ms to scan 1 urls, producing 30 keys and 303 values
05:56:20.557 INFO  Sensor IaC YAML File Type Classification Sensor [iac]
05:56:20.580 INFO  Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=21ms
05:56:20.580 INFO  Sensor GoModuleSecuritySensor [securitygofrontend]
05:56:20.580 INFO  Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
05:56:20.580 INFO  Sensor HTML [web]
05:56:21.121 INFO  Sensor HTML [web] (done) | time=537ms
05:56:21.121 INFO  Sensor Code Quality and Security for Go [go]
05:56:21.189 INFO  27 folders (497 files) to be analyzed
05:56:31.193 INFO  20 / 27 folders analyzed, current folder: /workspace/internal/hookd (2 files, parsing)
05:56:31.796 INFO  27/27 folders (497 files) have been analyzed
05:56:31.796 INFO  Sensor Code Quality and Security for Go [go] (done) | time=10677ms
05:56:31.797 INFO  Sensor IaC CloudFormation Sensor [iac]
05:56:31.798 INFO  There are no files to be analyzed for the CloudFormation language
05:56:31.798 INFO  Sensor IaC CloudFormation Sensor [iac] (done) | time=1ms
05:56:31.799 INFO  Sensor IaC cfn-lint report Sensor [iac]
05:56:31.800 INFO  Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
05:56:31.800 INFO  Sensor IaC Kustomization Sensor [iac]
05:56:31.802 INFO  Sensor IaC Kustomization Sensor [iac] (done) | time=1ms
05:56:31.802 INFO  Sensor IaC hadolint report Sensor [iac]
05:56:31.802 INFO  Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
05:56:31.802 INFO  Sensor Java Config Sensor [iac]
05:56:31.803 INFO  There are no files to be analyzed for the Java language
05:56:31.803 INFO  Sensor Java Config Sensor [iac] (done) | time=0ms
05:56:31.803 INFO  Sensor IaC Docker Sensor [iac]
05:56:31.864 INFO  1 source file to be analyzed
05:56:31.952 INFO  1/1 source file has been analyzed
05:56:31.953 INFO  Sensor IaC Docker Sensor [iac] (done) | time=151ms
05:56:31.957 INFO  Sensor IaC Ansible Sensor [iac]
05:56:31.958 INFO  There are no files to be analyzed for the Ansible language
05:56:31.959 INFO  Sensor IaC Ansible Sensor [iac] (done) | time=0ms
05:56:31.960 INFO  Sensor IaC ansible-lint report Sensor [iac]
05:56:31.960 INFO  Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
05:56:31.960 INFO  Sensor IaC spectral report Sensor [iac]
05:56:31.960 INFO  Sensor IaC spectral report Sensor [iac] (done) | time=0ms
05:56:31.960 INFO  Sensor IaC GitHub Actions Sensor [iac]
05:56:31.960 INFO  There are no files to be analyzed for the GitHub Actions language
05:56:31.960 INFO  Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
05:56:31.960 INFO  Sensor IaC actionlint report Sensor [iac]
05:56:31.960 INFO  Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
05:56:31.960 INFO  Sensor IaC Azure Pipelines Sensor [iac]
05:56:31.960 INFO  There are no files to be analyzed for the Azure Pipelines language
05:56:31.960 INFO  Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
05:56:31.963 INFO  Sensor IaC Shell Sensor [iac]
05:56:31.969 INFO  5 source files to be analyzed
05:56:32.027 INFO  5/5 source files have been analyzed
05:56:32.027 INFO  Sensor IaC Shell Sensor [iac] (done) | time=65ms
05:56:32.028 INFO  Sensor IaC Kubernetes Sensor [iac]
05:56:32.085 INFO  There are no files to be analyzed for the Kubernetes language
05:56:32.085 INFO  Sensor IaC Kubernetes Sensor [iac] (done) | time=57ms
05:56:32.085 INFO  Sensor IaC YAML Sensor [iac]
05:56:32.085 INFO  Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
05:56:32.086 INFO  Sensor IaC YAML Sensor [iac] (done) | time=0ms
05:56:32.086 INFO  Sensor Serverless configuration file sensor [security]
05:56:32.088 INFO  0 Serverless function entries were found in the project
05:56:32.089 INFO  0 Serverless function handlers were kept as entrypoints
05:56:32.090 INFO  Sensor Serverless configuration file sensor [security] (done) | time=3ms
05:56:32.091 INFO  Sensor AWS SAM template file sensor [security]
05:56:32.096 INFO  Sensor AWS SAM template file sensor [security] (done) | time=6ms
05:56:32.096 INFO  Sensor EnterpriseTextAndSecretsSensor [textenterprise]
05:56:32.113 INFO  Available processors: 3
05:56:32.113 INFO  Using 3 threads for analysis.
05:56:32.425 INFO  The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
05:56:32.483 INFO  Start fetching files for the text and secrets analysis
05:56:32.489 INFO  Using Git CLI to retrieve dirty files
05:56:32.523 INFO  Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
05:56:32.524 INFO  Starting the text and secrets analysis
05:56:32.526 INFO  565 source files to be analyzed for the text and secrets analysis
05:56:33.041 INFO  565/565 source files have been analyzed for the text and secrets analysis
05:56:33.043 INFO  Start fetching files for the binary file analysis
05:56:33.044 INFO  There are no files to be analyzed for the binary file analysis
05:56:33.048 INFO  Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=951ms
05:56:33.049 INFO  Sensor GoSecuritySensor [security]
05:56:33.053 INFO  10 taint analysis rules enabled.
05:56:33.975 INFO  Analyzing 2950 UCFGs to detect vulnerabilities.
05:56:35.199 INFO  All rules entry points : 97
05:56:35.202 INFO  Retained UCFGs : 287
05:56:35.292 INFO  0 / 287 UCFGs simulated, memory usage: 579 MB
05:56:35.814 INFO  287 / 287 UCFGs simulated, memory usage: 339 MB
05:56:35.821 WARN  Failed to find InputFile for __unknown_file, check exclusions.
05:56:35.825 WARN  Failed to find InputFile for __unknown_file, check exclusions.
05:56:35.827 WARN  Failed to find InputFile for __unknown_file, check exclusions.
05:56:35.844 INFO  go security sensor: Begin: 2026-09-20T05:56:33.050537580Z, End: 2026-09-20T05:56:35.842575067Z, Duration: 00:00:02.792
  Resolve files to analyze: Begin: 2026-09-20T05:56:33.053334585Z, End: 2026-09-20T05:56:33.054177543Z, Duration: 00:00:00.000
  Load type hierarchy and UCFGs: Begin: 2026-09-20T05:56:33.054407869Z, End: 2026-09-20T05:56:33.975112329Z, Duration: 00:00:00.920
    Load type hierarchy: Begin: 2026-09-20T05:56:33.054411394Z, End: 2026-09-20T05:56:33.060040388Z, Duration: 00:00:00.005
    Load UCFGs: Begin: 2026-09-20T05:56:33.060132136Z, End: 2026-09-20T05:56:33.975047462Z, Duration: 00:00:00.914
  Check cache: Begin: 2026-09-20T05:56:33.975230396Z, End: 2026-09-20T05:56:33.975753884Z, Duration: 00:00:00.000
    Load cache: Begin: 2026-09-20T05:56:33.975556196Z, End: 2026-09-20T05:56:33.975578389Z, Duration: 00:00:00.000
  Create runtime call graph: Begin: 2026-09-20T05:56:33.975784209Z, End: 2026-09-20T05:56:34.764335389Z, Duration: 00:00:00.788
    Variable Type Analysis #1: Begin: 2026-09-20T05:56:33.976679575Z, End: 2026-09-20T05:56:34.449109081Z, Duration: 00:00:00.472
      Create runtime type propagation graph: Begin: 2026-09-20T05:56:33.977372327Z, End: 2026-09-20T05:56:34.245689981Z, Duration: 00:00:00.268
      Run SCC (Tarjan) on 61637 nodes: Begin: 2026-09-20T05:56:34.246666789Z, End: 2026-09-20T05:56:34.323372447Z, Duration: 00:00:00.076
      Propagate runtime types to strongly connected components: Begin: 2026-09-20T05:56:34.323532879Z, End: 2026-09-20T05:56:34.448865454Z, Duration: 00:00:00.125
    Variable Type Analysis #2: Begin: 2026-09-20T05:56:34.451641089Z, End: 2026-09-20T05:56:34.761878594Z, Duration: 00:00:00.310
      Create runtime type propagation graph: Begin: 2026-09-20T05:56:34.451652586Z, End: 2026-09-20T05:56:34.605205324Z, Duration: 00:00:00.153
      Run SCC (Tarjan) on 61637 nodes: Begin: 2026-09-20T05:56:34.605341598Z, End: 2026-09-20T05:56:34.672256985Z, Duration: 00:00:00.066
      Propagate runtime types to strongly connected components: Begin: 2026-09-20T05:56:34.672371118Z, End: 2026-09-20T05:56:34.761768478Z, Duration: 00:00:00.089
  Load config: Begin: 2026-09-20T05:56:34.764424923Z, End: 2026-09-20T05:56:34.969847876Z, Duration: 00:00:00.205
  Compute entry points: Begin: 2026-09-20T05:56:34.969905783Z, End: 2026-09-20T05:56:35.199118737Z, Duration: 00:00:00.229
  Slice call graph: Begin: 2026-09-20T05:56:35.199439780Z, End: 2026-09-20T05:56:35.208899845Z, Duration: 00:00:00.009
  Live variable analysis: Begin: 2026-09-20T05:56:35.209012825Z, End: 2026-09-20T05:56:35.289859520Z, Duration: 00:00:00.080
  Taint analysis for go: Begin: 2026-09-20T05:56:35.290144829Z, End: 2026-09-20T05:56:35.814234032Z, Duration: 00:00:00.524
  Report issues: Begin: 2026-09-20T05:56:35.814294483Z, End: 2026-09-20T05:56:35.827681993Z, Duration: 00:00:00.013
  Store cache: Begin: 2026-09-20T05:56:35.828238309Z, End: 2026-09-20T05:56:35.841735504Z, Duration: 00:00:00.013
05:56:35.844 INFO  go security sensor peak memory (pre-GC, max allocation pressure): 620 MB
05:56:35.844 INFO  go security sensor peak memory (post-GC, max live footprint): 256 MB
05:56:35.844 INFO  Sensor GoSecuritySensor [security] (done) | time=2795ms
05:56:35.852 INFO  ------------- Run sensors on project
05:56:36.065 INFO  Sensor goSecurityContextCollectorSensor [security]
05:56:36.065 INFO  Sensor goSecurityContextCollectorSensor [security] (done) | time=0ms
05:56:36.066 INFO  Sensor Deterministic Rule Engine for Go [dre]
05:56:36.107 INFO  Extracting bridge from /bridge/bridge-linux-x64.xz
05:56:36.464 INFO  Bridge extracted to /workspace/.scannerwork/.sonartmp/bridge-dre/bridge
05:56:37.025 INFO  Sensor Deterministic Rule Engine for Go [dre] (done) | time=959ms
05:56:37.026 INFO  Sensor Deterministic Rule Engine for Shell [dre]
05:56:37.035 INFO  Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
05:56:37.035 INFO  Sensor SQL Dialect Detection [dre]
05:56:37.035 INFO  Sensor SQL Dialect Detection [dre] (done) | time=3ms
05:56:37.036 INFO  Sensor DRE Project Telemetry [dre]
05:56:37.037 INFO  Sensor DRE Project Telemetry [dre] (done) | time=1ms
05:56:37.037 INFO  Sensor GoProjectSensor [go]
05:56:37.039 INFO  Sensor GoProjectSensor [go] (done) | time=1ms
05:56:37.040 INFO  Sensor Sonar Go A3S Context Collector [go]
05:56:37.040 INFO  Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
05:56:37.041 INFO  Sensor JavaScript/TypeScript/CSS analysis [javascript]
05:56:37.305 INFO  Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
05:56:37.308 INFO  Deploy location /root/.sonar/js/node-runtime, tagetRuntime: /root/.sonar/js/node-runtime/node,  version: /root/.sonar/js/node-runtime/version.txt
05:56:40.007 INFO  Using embedded Node.js runtime.
05:56:40.007 INFO  Using Node.js executable: '/root/.sonar/js/node-runtime/node'.
05:56:42.313 INFO  Memory configuration: OS (7945 MB), Docker (6144 MB), Node.js (2240 MB).
05:56:42.324 INFO  gRPC analyze-project server listening on 127.0.0.1:46171
05:56:42.546 INFO  Plugin version: [13.9.0.44793]
05:56:44.819 INFO  Found 0 tsconfig.json file(s): []
05:56:44.897 WARN  Failed to parse file [internal/web/templates/mr.html] at line 173: Unknown word {{index $.LabelColors .}}
05:56:44.897 WARN  Failed to parse file [internal/web/templates/orglabels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
05:56:45.139 WARN  Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
05:56:45.142 WARN  Failed to parse file [internal/web/templates/issues.html] at line 14: Unknown word {{index $.LabelColors .Value}}
05:56:45.157 WARN  Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
05:56:45.159 WARN  Failed to parse file [internal/web/templates/mrs.html] at line 14: Unknown word {{index $.LabelColors .Value}}
05:56:45.177 INFO  46 source files to be analyzed
05:56:45.181 INFO  46/46 source files have been analyzed
05:56:45.281 INFO  JasminAstConsumer done
05:56:45.281 INFO  Hit the cache for 0 out of 45
05:56:45.282 INFO  Miss the cache for 45 out of 45: ANALYSIS_MODE_INELIGIBLE [45/45]
05:56:45.282 INFO  Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=8241ms
05:56:45.284 INFO  Sensor IaC Project Sensor [iac]
05:56:45.291 INFO  Sensor IaC Project Sensor [iac] (done) | time=7ms
05:56:45.292 INFO  Sensor Zero Coverage Sensor
05:56:45.396 INFO  Sensor Zero Coverage Sensor (done) | time=104ms
05:56:45.412 INFO  ------------- Gather SCA dependencies on project
05:56:45.677 INFO  Dependency analysis skipped
05:56:45.714 INFO  CPD Executor 2 files had no CPD blocks
05:56:45.714 INFO  CPD Executor Calculating CPD for 262 files
05:56:45.827 INFO  CPD Executor CPD calculation finished (done) | time=113ms
05:56:45.831 INFO  SCM Publisher SCM provider for this project is: git
05:56:45.832 INFO  SCM Publisher 549 source files to be analyzed
05:56:47.244 INFO  SCM Publisher 549/549 source files have been analyzed (done) | time=1410ms
05:56:47.251 INFO  SCM revision ID '1371d9658669d0e163f22933d74655e3bff20d64'
05:56:47.512 INFO  Analysis report generated in 250ms, dir size=4 MB
05:56:48.142 INFO  Analysis report compressed in 629ms, zip size=2 MB
05:56:49.106 INFO  Analysis report uploaded in 964ms
05:56:49.108 INFO  ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
05:56:49.108 INFO  Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
05:56:49.109 INFO  More about the report processing at https://sonarcloud.io/api/ce/task?id=AaC9Y3z8wLlCYChRzdHs
05:56:49.109 INFO  ------------- Upload SCA dependency files
05:56:50.071 INFO  Sensor cache published successfully
05:56:50.408 INFO  Analysis total time: 36.424 s
05:56:50.413 INFO  SonarScanner Engine completed successfully
05:56:50.768 INFO  EXECUTION SUCCESS
05:56:50.769 INFO  Total time: 47.693s