Build 660 success
sonar on sonar-scan · d69a1511bf · queued 2026-09-04 19:34 UTC · finished 2026-09-04 19:36 UTC · ran 48s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (d69a1511bf)
step 1/1 set -eu
installing sonar-scanner 8.1.0.6389
21:35:50.443 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
21:35:50.447 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-761/sonar-project.properties
21:35:50.473 INFO SonarScanner CLI 8.1.0.6389
21:35:50.478 INFO Linux 6.12.105+deb13-amd64 amd64
21:35:53.573 INFO Communicating with SonarQube Cloud
21:35:53.574 INFO JRE provisioning: os[linux], arch[x86_64]
21:35:56.638 INFO Starting SonarScanner Engine...
21:35:56.638 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
21:36:00.101 INFO Load global settings
21:36:00.546 INFO Load global settings (done) | time=438ms
21:36:00.644 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
21:36:00.873 INFO Loading required plugins
21:36:00.873 INFO Load plugins index
21:36:00.957 INFO Load plugins index (done) | time=86ms
21:36:00.958 INFO Load/download plugins
21:36:01.640 INFO Load/download plugins (done) | time=678ms
21:36:01.783 INFO Loaded core extensions: architecture, sca, a3s
21:36:02.321 INFO Process project properties
21:36:02.353 INFO Project key: krz_gitbay
21:36:02.354 INFO Base dir: /var/lib/gitbay-runner/work/build-761
21:36:02.354 INFO Working dir: /var/lib/gitbay-runner/work/build-761/.scannerwork
21:36:02.359 INFO Load project settings for component key: 'krz_gitbay'
21:36:02.745 INFO Load project settings for component key: 'krz_gitbay' (done) | time=385ms
21:36:02.769 INFO Check ALM binding of project 'krz_gitbay'
21:36:02.915 INFO Detected project binding: NOT_BOUND
21:36:02.915 INFO Check ALM binding of project 'krz_gitbay' (done) | time=148ms
21:36:02.920 INFO Load branch configuration
21:36:02.921 INFO Load branch configuration (done) | time=1ms
21:36:02.922 INFO Create analysis
21:36:03.139 INFO Create analysis (done) | time=217ms
21:36:03.277 INFO Load quality profiles
21:36:03.736 INFO Load quality profiles (done) | time=459ms
21:36:03.869 INFO Load active rules
21:36:04.314 INFO Load active rules (done) | time=445ms
21:36:04.469 INFO Organization key: krz
21:36:04.488 INFO Preprocessing files...
21:36:04.795 INFO 6 languages detected in 475 preprocessed files (done) | time=307ms
21:36:04.797 INFO 507 files ignored because of inclusion/exclusion patterns
21:36:04.800 INFO 2 directories skipped because of exclusion patterns (content not counted)
21:36:04.800 INFO 28 files ignored because of scm ignore settings
21:36:04.807 INFO Loading plugins for detected languages
21:36:04.808 INFO Load/download plugins
21:36:06.408 INFO Load/download plugins (done) | time=1600ms
21:36:06.687 INFO Load project repositories
21:36:06.874 INFO Load project repositories (done) | time=187ms
21:36:06.895 INFO Indexing files...
21:36:06.895 INFO Project configuration:
21:36:06.895 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, **/build-wrapper-dump.json, **/*_test.go
21:36:06.895 INFO Included tests: **/*_test.go
21:36:06.933 INFO 475 files indexed (done) | time=34ms
21:36:06.933 INFO Quality profile for css: Sonar way essentials
21:36:06.933 INFO Quality profile for go: Sonar way essentials
21:36:06.933 INFO Quality profile for plsql: Sonar way essentials
21:36:06.933 INFO Quality profile for shell: Sonar way essentials
21:36:06.934 INFO Quality profile for web: Sonar way essentials
21:36:06.934 INFO Quality profile for yaml: Sonar way essentials
21:36:06.934 INFO ------------- Run sensors on module gitbay
21:36:07.001 INFO Load metrics repository
21:36:07.059 INFO Load metrics repository (done) | time=61ms
21:36:07.070 INFO Sensor cache enabled
21:36:07.075 INFO Load sensor cache
21:36:07.213 INFO Load sensor cache (404) | time=138ms
21:36:07.673 INFO Reflections took 85 ms to scan 1 urls, producing 30 keys and 295 values
21:36:08.396 INFO Sensor IaC YAML File Type Classification Sensor [iac]
21:36:08.426 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=30ms
21:36:08.427 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
21:36:08.430 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
21:36:08.432 INFO Sensor HTML [web]
21:36:08.844 INFO Sensor HTML [web] (done) | time=416ms
21:36:08.847 INFO Sensor Code Quality and Security for Go [go]
21:36:08.903 INFO 26 folders (343 files) to be analyzed
21:36:16.705 INFO 26/26 folders (343 files) have been analyzed
21:36:16.705 INFO Sensor Code Quality and Security for Go [go] (done) | time=7860ms
21:36:16.705 INFO Sensor IaC CloudFormation Sensor [iac]
21:36:16.709 INFO There are no files to be analyzed for the CloudFormation language
21:36:16.710 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=1ms
21:36:16.710 INFO Sensor IaC cfn-lint report Sensor [iac]
21:36:16.711 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
21:36:16.711 INFO Sensor IaC Kustomization Sensor [iac]
21:36:16.713 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
21:36:16.714 INFO Sensor IaC hadolint report Sensor [iac]
21:36:16.714 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
21:36:16.715 INFO Sensor Java Config Sensor [iac]
21:36:16.716 INFO There are no files to be analyzed for the Java language
21:36:16.717 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
21:36:16.717 INFO Sensor IaC Docker Sensor [iac]
21:36:16.718 INFO There are no files to be analyzed for the Docker language
21:36:16.720 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
21:36:16.721 INFO Sensor IaC Ansible Sensor [iac]
21:36:16.722 INFO There are no files to be analyzed for the Ansible language
21:36:16.723 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
21:36:16.723 INFO Sensor IaC ansible-lint report Sensor [iac]
21:36:16.724 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
21:36:16.724 INFO Sensor IaC spectral report Sensor [iac]
21:36:16.724 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
21:36:16.725 INFO Sensor IaC GitHub Actions Sensor [iac]
21:36:16.725 INFO There are no files to be analyzed for the GitHub Actions language
21:36:16.726 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
21:36:16.727 INFO Sensor IaC actionlint report Sensor [iac]
21:36:16.729 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
21:36:16.729 INFO Sensor IaC Azure Pipelines Sensor [iac]
21:36:16.730 INFO There are no files to be analyzed for the Azure Pipelines language
21:36:16.730 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
21:36:16.731 INFO Sensor IaC Shell Sensor [iac]
21:36:16.734 INFO 4 source files to be analyzed
21:36:16.791 INFO 4/4 source files have been analyzed
21:36:16.792 INFO Sensor IaC Shell Sensor [iac] (done) | time=75ms
21:36:16.792 INFO Sensor PL/SQL Sensor [plsql]
21:36:16.837 WARN The Data Dictionary is not configured for the PLSQL analyzer, which prevents rule(s) S3641, S3921, S3651, S3618 from raising issues. See https://docs.sonarcloud.io/advanced-setup/languages/pl-sql/
21:36:16.842 INFO 78 source files to be analyzed
21:36:17.052 WARN
21:36:17.052 WARN Unable to fully parse: /var/lib/gitbay-runner/work/build-761/internal/store/migrations/0033_owner_guards.up.sql
21:36:17.053 WARN Parse error starting from line 5
21:36:17.054 WARN
21:36:17.054 WARN
21:36:17.055 WARN Unable to fully parse: /var/lib/gitbay-runner/work/build-761/internal/store/migrations/0033_owner_guards.up.sql
21:36:17.055 WARN Parse error starting from line 10
21:36:17.056 WARN
21:36:17.082 INFO 78/78 source files have been analyzed
21:36:17.085 INFO Sensor PL/SQL Sensor [plsql] (done) | time=293ms
21:36:17.085 INFO Sensor IaC Kubernetes Sensor [iac]
21:36:17.135 INFO There are no files to be analyzed for the Kubernetes language
21:36:17.136 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=51ms
21:36:17.136 INFO Sensor IaC YAML Sensor [iac]
21:36:17.136 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
21:36:17.137 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
21:36:17.137 INFO Sensor Serverless configuration file sensor [security]
21:36:17.137 INFO 0 Serverless function entries were found in the project
21:36:17.141 INFO 0 Serverless function handlers were kept as entrypoints
21:36:17.141 INFO Sensor Serverless configuration file sensor [security] (done) | time=4ms
21:36:17.141 INFO Sensor AWS SAM template file sensor [security]
21:36:17.148 INFO Sensor AWS SAM template file sensor [security] (done) | time=4ms
21:36:17.149 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
21:36:17.169 INFO Available processors: 4
21:36:17.169 INFO Using 4 threads for analysis.
21:36:17.446 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
21:36:17.495 INFO Start fetching files for the text and secrets analysis
21:36:17.504 INFO Using Git CLI to retrieve dirty files
21:36:17.524 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
21:36:17.526 INFO Starting the text and secrets analysis
21:36:17.527 INFO 467 source files to be analyzed for the text and secrets analysis
21:36:17.959 INFO 467/467 source files have been analyzed for the text and secrets analysis
21:36:17.962 INFO Start fetching files for the binary file analysis
21:36:17.962 INFO There are no files to be analyzed for the binary file analysis
21:36:17.972 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=821ms
21:36:17.972 INFO Sensor GoSecuritySensor [security]
21:36:17.975 INFO 9 taint analysis rules enabled.
21:36:18.717 INFO Analyzing 2076 UCFGs to detect vulnerabilities.
21:36:19.722 INFO All rules entry points : 29
21:36:19.724 INFO Retained UCFGs : 121
21:36:19.768 INFO 0 / 121 UCFGs simulated, memory usage: 316 MB
21:36:20.067 INFO 121 / 121 UCFGs simulated, memory usage: 357 MB
21:36:20.075 WARN Failed to find InputFile for __unknown_file, check exclusions.
21:36:20.081 WARN Failed to find InputFile for __unknown_file, check exclusions.
21:36:20.087 INFO go security sensor: Begin: 2026-09-04T19:36:17.971524228Z, End: 2026-09-04T19:36:20.085528238Z, Duration: 00:00:02.114
Resolve files to analyze: Begin: 2026-09-04T19:36:17.975446339Z, End: 2026-09-04T19:36:17.976577051Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-04T19:36:17.976993628Z, End: 2026-09-04T19:36:18.717209945Z, Duration: 00:00:00.740
Load type hierarchy: Begin: 2026-09-04T19:36:17.976999868Z, End: 2026-09-04T19:36:17.982686885Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-04T19:36:17.982770702Z, End: 2026-09-04T19:36:18.717116374Z, Duration: 00:00:00.734
Check cache: Begin: 2026-09-04T19:36:18.717337537Z, End: 2026-09-04T19:36:18.717870238Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-04T19:36:18.717666091Z, End: 2026-09-04T19:36:18.717687593Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-04T19:36:18.717896769Z, End: 2026-09-04T19:36:19.318327955Z, Duration: 00:00:00.600
Variable Type Analysis #1: Begin: 2026-09-04T19:36:18.718364572Z, End: 2026-09-04T19:36:19.085465620Z, Duration: 00:00:00.367
Create runtime type propagation graph: Begin: 2026-09-04T19:36:18.718975772Z, End: 2026-09-04T19:36:18.966403805Z, Duration: 00:00:00.247
Run SCC (Tarjan) on 43267 nodes: Begin: 2026-09-04T19:36:18.966784807Z, End: 2026-09-04T19:36:19.009507677Z, Duration: 00:00:00.042
Propagate runtime types to strongly connected components: Begin: 2026-09-04T19:36:19.009670933Z, End: 2026-09-04T19:36:19.085374684Z, Duration: 00:00:00.075
Variable Type Analysis #2: Begin: 2026-09-04T19:36:19.087663929Z, End: 2026-09-04T19:36:19.316482828Z, Duration: 00:00:00.228
Create runtime type propagation graph: Begin: 2026-09-04T19:36:19.087673543Z, End: 2026-09-04T19:36:19.198125593Z, Duration: 00:00:00.110
Run SCC (Tarjan) on 43267 nodes: Begin: 2026-09-04T19:36:19.198215748Z, End: 2026-09-04T19:36:19.249879642Z, Duration: 00:00:00.051
Propagate runtime types to strongly connected components: Begin: 2026-09-04T19:36:19.249975868Z, End: 2026-09-04T19:36:19.316367474Z, Duration: 00:00:00.066
Load config: Begin: 2026-09-04T19:36:19.318410108Z, End: 2026-09-04T19:36:19.580563490Z, Duration: 00:00:00.262
Compute entry points: Begin: 2026-09-04T19:36:19.580730761Z, End: 2026-09-04T19:36:19.722273448Z, Duration: 00:00:00.141
Slice call graph: Begin: 2026-09-04T19:36:19.722548241Z, End: 2026-09-04T19:36:19.726104072Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-04T19:36:19.726179806Z, End: 2026-09-04T19:36:19.765018551Z, Duration: 00:00:00.038
Taint analysis for go: Begin: 2026-09-04T19:36:19.765239683Z, End: 2026-09-04T19:36:20.067395932Z, Duration: 00:00:00.302
Report issues: Begin: 2026-09-04T19:36:20.067440208Z, End: 2026-09-04T19:36:20.080103154Z, Duration: 00:00:00.012
Store cache: Begin: 2026-09-04T19:36:20.080714583Z, End: 2026-09-04T19:36:20.084957829Z, Duration: 00:00:00.004
21:36:20.087 INFO go security sensor peak memory (pre-GC, max allocation pressure): 683 MB
21:36:20.088 INFO go security sensor peak memory (post-GC, max live footprint): 299 MB
21:36:20.088 INFO Sensor GoSecuritySensor [security] (done) | time=2118ms
21:36:20.096 INFO ------------- Run sensors on project
21:36:20.318 INFO Sensor Deterministic Rule Engine for Go [dre]
21:36:20.357 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
21:36:20.690 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-761/.scannerwork/.sonartmp/bridge-dre/bridge
21:36:20.959 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=640ms
21:36:20.959 INFO Sensor Deterministic Rule Engine for Shell [dre]
21:36:20.965 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
21:36:20.966 INFO Sensor SQL Dialect Detection [dre]
21:36:20.967 INFO Starting SQL dialect detection for 78 file(s)
21:36:21.041 INFO Finished SQL dialect detection for 78 file(s) in 73 ms
21:36:21.045 INFO SQL dialect detected: ansi (78 file(s))
21:36:21.045 INFO Sensor SQL Dialect Detection [dre] (done) | time=79ms
21:36:21.045 INFO Sensor DRE Project Telemetry [dre]
21:36:21.046 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
21:36:21.047 INFO Sensor GoProjectSensor [go]
21:36:21.048 INFO Sensor GoProjectSensor [go] (done) | time=0ms
21:36:21.048 INFO Sensor Sonar Go A3S Context Collector [go]
21:36:21.049 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
21:36:21.049 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
21:36:21.050 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
21:36:21.050 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
21:36:21.322 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
21:36:21.323 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
21:36:24.288 INFO Using embedded Node.js runtime.
21:36:24.288 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
21:36:26.950 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
21:36:26.960 INFO gRPC analyze-project server listening on 127.0.0.1:46825
21:36:27.157 INFO Plugin version: [13.8.0.44569]
21:36:29.979 INFO Found 0 tsconfig.json file(s): []
21:36:30.205 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
21:36:30.267 INFO 37 source files to be analyzed
21:36:30.267 INFO 37/37 source files have been analyzed
21:36:30.274 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
21:36:30.365 INFO JasminAstConsumer done
21:36:30.365 INFO Hit the cache for 0 out of 36
21:36:30.365 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
21:36:30.365 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=9308ms
21:36:30.365 INFO Sensor IaC Project Sensor [iac]
21:36:30.365 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
21:36:30.365 INFO Sensor Zero Coverage Sensor
21:36:30.445 INFO Sensor Zero Coverage Sensor (done) | time=88ms
21:36:30.460 INFO ------------- Gather SCA dependencies on project
21:36:30.725 INFO Dependency analysis skipped
21:36:30.756 INFO CPD Executor 62 files had no CPD blocks
21:36:30.756 INFO CPD Executor Calculating CPD for 233 files
21:36:30.868 INFO CPD Executor CPD calculation finished (done) | time=111ms
21:36:30.870 INFO SCM Publisher SCM provider for this project is: git
21:36:30.872 INFO SCM Publisher 462 source files to be analyzed
21:36:31.779 INFO SCM Publisher 462/462 source files have been analyzed (done) | time=905ms
21:36:31.787 INFO SCM revision ID 'd69a1511bf753ba1605f024c4e8c2c2958a7438a'
21:36:32.047 INFO Analysis report generated in 235ms, dir size=3 MB
21:36:32.659 INFO Analysis report compressed in 610ms, zip size=1 MB
21:36:33.395 INFO Analysis report uploaded in 735ms
21:36:33.398 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
21:36:33.398 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
21:36:33.398 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBt7DszR348sxUkNyF3
21:36:33.398 INFO ------------- Upload SCA dependency files
21:36:34.004 INFO Sensor cache published successfully
21:36:34.446 INFO Analysis total time: 32.662 s
21:36:34.450 INFO SonarScanner Engine completed successfully
21:36:34.830 INFO EXECUTION SUCCESS
21:36:34.832 INFO Total time: 44.391s