Build 672 success
sonar on changelog-v1.13.1 · 2727fd25d8 · queued 2026-09-04 20:09 UTC · finished 2026-09-04 20:10 UTC · ran 40s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (2727fd25d8)
step 1/1 set -eu
22:09:59.798 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
22:09:59.801 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-773/sonar-project.properties
22:09:59.812 INFO SonarScanner CLI 8.1.0.6389
22:09:59.817 INFO Linux 6.12.105+deb13-amd64 amd64
22:10:03.155 INFO Communicating with SonarQube Cloud
22:10:03.156 INFO JRE provisioning: os[linux], arch[x86_64]
22:10:03.994 INFO Starting SonarScanner Engine...
22:10:03.995 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
22:10:07.461 INFO Load global settings
22:10:07.838 INFO Load global settings (done) | time=371ms
22:10:07.915 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
22:10:08.124 INFO Loading required plugins
22:10:08.124 INFO Load plugins index
22:10:08.194 INFO Load plugins index (done) | time=70ms
22:10:08.195 INFO Load/download plugins
22:10:08.247 INFO Load/download plugins (done) | time=52ms
22:10:08.396 INFO Loaded core extensions: sca, a3s, architecture
22:10:08.910 INFO Process project properties
22:10:08.948 INFO Project key: krz_gitbay
22:10:08.948 INFO Base dir: /var/lib/gitbay-runner/work/build-773
22:10:08.949 INFO Working dir: /var/lib/gitbay-runner/work/build-773/.scannerwork
22:10:08.959 INFO Load project settings for component key: 'krz_gitbay'
22:10:09.261 INFO Load project settings for component key: 'krz_gitbay' (done) | time=302ms
22:10:09.286 INFO Check ALM binding of project 'krz_gitbay'
22:10:09.437 INFO Detected project binding: NOT_BOUND
22:10:09.437 INFO Check ALM binding of project 'krz_gitbay' (done) | time=151ms
22:10:09.442 INFO Load branch configuration
22:10:09.443 INFO Load branch configuration (done) | time=2ms
22:10:09.448 INFO Create analysis
22:10:09.757 INFO Create analysis (done) | time=309ms
22:10:09.973 INFO Load quality profiles
22:10:10.437 INFO Load quality profiles (done) | time=462ms
22:10:10.607 INFO Load active rules
22:10:11.023 INFO Load active rules (done) | time=414ms
22:10:11.163 INFO Organization key: krz
22:10:11.179 INFO Preprocessing files...
22:10:11.417 INFO 6 languages detected in 478 preprocessed files (done) | time=237ms
22:10:11.418 INFO 510 files ignored because of inclusion/exclusion patterns
22:10:11.418 INFO 2 directories skipped because of exclusion patterns (content not counted)
22:10:11.418 INFO 28 files ignored because of scm ignore settings
22:10:11.433 INFO Loading plugins for detected languages
22:10:11.433 INFO Load/download plugins
22:10:11.530 INFO Load/download plugins (done) | time=96ms
22:10:11.805 INFO Load project repositories
22:10:12.019 INFO Load project repositories (done) | time=214ms
22:10:12.041 INFO Indexing files...
22:10:12.045 INFO Project configuration:
22:10:12.045 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, **/build-wrapper-dump.json, **/*_test.go
22:10:12.046 INFO Included tests: **/*_test.go
22:10:12.100 INFO 478 files indexed (done) | time=58ms
22:10:12.103 INFO Quality profile for css: Sonar way essentials
22:10:12.103 INFO Quality profile for go: Sonar way essentials
22:10:12.103 INFO Quality profile for plsql: Sonar way essentials
22:10:12.103 INFO Quality profile for shell: Sonar way essentials
22:10:12.104 INFO Quality profile for web: Sonar way essentials
22:10:12.104 INFO Quality profile for yaml: Sonar way essentials
22:10:12.104 INFO ------------- Run sensors on module gitbay
22:10:12.189 INFO Load metrics repository
22:10:12.285 INFO Load metrics repository (done) | time=93ms
22:10:12.292 INFO Sensor cache enabled
22:10:12.300 INFO Load sensor cache
22:10:12.688 INFO Load sensor cache (1 MB) | time=389ms
22:10:13.161 INFO Reflections took 73 ms to scan 1 urls, producing 30 keys and 295 values
22:10:13.883 INFO Sensor IaC YAML File Type Classification Sensor [iac]
22:10:13.910 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=27ms
22:10:13.910 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
22:10:13.910 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
22:10:13.910 INFO Sensor HTML [web]
22:10:14.305 INFO Sensor HTML [web] (done) | time=390ms
22:10:14.305 INFO Sensor Code Quality and Security for Go [go]
22:10:14.359 INFO 26 folders (346 files) to be analyzed
22:10:22.837 INFO 26/26 folders (346 files) have been analyzed
22:10:22.837 INFO Sensor Code Quality and Security for Go [go] (done) | time=8532ms
22:10:22.837 INFO Sensor IaC CloudFormation Sensor [iac]
22:10:22.837 INFO There are no files to be analyzed for the CloudFormation language
22:10:22.837 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
22:10:22.837 INFO Sensor IaC cfn-lint report Sensor [iac]
22:10:22.838 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=1ms
22:10:22.839 INFO Sensor IaC Kustomization Sensor [iac]
22:10:22.845 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=1ms
22:10:22.845 INFO Sensor IaC hadolint report Sensor [iac]
22:10:22.845 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
22:10:22.845 INFO Sensor Java Config Sensor [iac]
22:10:22.845 INFO There are no files to be analyzed for the Java language
22:10:22.845 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
22:10:22.845 INFO Sensor IaC Docker Sensor [iac]
22:10:22.845 INFO There are no files to be analyzed for the Docker language
22:10:22.845 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
22:10:22.845 INFO Sensor IaC Ansible Sensor [iac]
22:10:22.845 INFO There are no files to be analyzed for the Ansible language
22:10:22.845 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
22:10:22.845 INFO Sensor IaC ansible-lint report Sensor [iac]
22:10:22.846 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
22:10:22.846 INFO Sensor IaC spectral report Sensor [iac]
22:10:22.846 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
22:10:22.846 INFO Sensor IaC GitHub Actions Sensor [iac]
22:10:22.846 INFO There are no files to be analyzed for the GitHub Actions language
22:10:22.846 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
22:10:22.846 INFO Sensor IaC actionlint report Sensor [iac]
22:10:22.846 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
22:10:22.846 INFO Sensor IaC Azure Pipelines Sensor [iac]
22:10:22.846 INFO There are no files to be analyzed for the Azure Pipelines language
22:10:22.847 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
22:10:22.847 INFO Sensor IaC Shell Sensor [iac]
22:10:22.858 INFO 4 source files to be analyzed
22:10:22.915 INFO 4/4 source files have been analyzed
22:10:22.921 INFO Sensor IaC Shell Sensor [iac] (done) | time=71ms
22:10:22.921 INFO Sensor PL/SQL Sensor [plsql]
22:10:22.947 WARN The Data Dictionary is not configured for the PLSQL analyzer, which prevents rule(s) S3641, S3921, S3651, S3618 from raising issues. See https://docs.sonarcloud.io/advanced-setup/languages/pl-sql/
22:10:22.951 INFO 78 source files to be analyzed
22:10:23.106 WARN
22:10:23.107 WARN Unable to fully parse: /var/lib/gitbay-runner/work/build-773/internal/store/migrations/0033_owner_guards.up.sql
22:10:23.108 WARN Parse error starting from line 5
22:10:23.108 WARN
22:10:23.109 WARN
22:10:23.109 WARN Unable to fully parse: /var/lib/gitbay-runner/work/build-773/internal/store/migrations/0033_owner_guards.up.sql
22:10:23.109 WARN Parse error starting from line 10
22:10:23.110 WARN
22:10:23.128 INFO 78/78 source files have been analyzed
22:10:23.130 INFO Sensor PL/SQL Sensor [plsql] (done) | time=213ms
22:10:23.130 INFO Sensor IaC Kubernetes Sensor [iac]
22:10:23.187 INFO There are no files to be analyzed for the Kubernetes language
22:10:23.188 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=57ms
22:10:23.192 INFO Sensor IaC YAML Sensor [iac]
22:10:23.192 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
22:10:23.193 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
22:10:23.193 INFO Sensor Serverless configuration file sensor [security]
22:10:23.193 INFO 0 Serverless function entries were found in the project
22:10:23.193 INFO 0 Serverless function handlers were kept as entrypoints
22:10:23.193 INFO Sensor Serverless configuration file sensor [security] (done) | time=1ms
22:10:23.193 INFO Sensor AWS SAM template file sensor [security]
22:10:23.196 INFO Sensor AWS SAM template file sensor [security] (done) | time=4ms
22:10:23.197 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
22:10:23.226 INFO Available processors: 4
22:10:23.228 INFO Using 4 threads for analysis.
22:10:23.552 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
22:10:23.620 INFO Start fetching files for the text and secrets analysis
22:10:23.625 INFO Using Git CLI to retrieve dirty files
22:10:23.664 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
22:10:23.666 INFO Starting the text and secrets analysis
22:10:23.666 INFO 470 source files to be analyzed for the text and secrets analysis
22:10:24.233 INFO 470/470 source files have been analyzed for the text and secrets analysis
22:10:24.241 INFO Start fetching files for the binary file analysis
22:10:24.241 INFO There are no files to be analyzed for the binary file analysis
22:10:24.241 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=1043ms
22:10:24.241 INFO Sensor GoSecuritySensor [security]
22:10:24.246 INFO 9 taint analysis rules enabled.
22:10:24.974 INFO Analyzing 2092 UCFGs to detect vulnerabilities.
22:10:25.956 INFO All rules entry points : 29
22:10:25.956 INFO Retained UCFGs : 121
22:10:25.996 INFO 0 / 121 UCFGs simulated, memory usage: 428 MB
22:10:26.305 INFO 121 / 121 UCFGs simulated, memory usage: 469 MB
22:10:26.312 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:10:26.318 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:10:26.325 INFO go security sensor: Begin: 2026-09-04T20:10:24.243930738Z, End: 2026-09-04T20:10:26.323731512Z, Duration: 00:00:02.079
Resolve files to analyze: Begin: 2026-09-04T20:10:24.246650051Z, End: 2026-09-04T20:10:24.247686041Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-04T20:10:24.247929067Z, End: 2026-09-04T20:10:24.972069639Z, Duration: 00:00:00.724
Load type hierarchy: Begin: 2026-09-04T20:10:24.247933393Z, End: 2026-09-04T20:10:24.255359722Z, Duration: 00:00:00.007
Load UCFGs: Begin: 2026-09-04T20:10:24.255471660Z, End: 2026-09-04T20:10:24.972018021Z, Duration: 00:00:00.716
Check cache: Begin: 2026-09-04T20:10:24.972210470Z, End: 2026-09-04T20:10:24.972724354Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-04T20:10:24.972500167Z, End: 2026-09-04T20:10:24.972517293Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-04T20:10:24.972751977Z, End: 2026-09-04T20:10:25.526726617Z, Duration: 00:00:00.553
Variable Type Analysis #1: Begin: 2026-09-04T20:10:24.973124757Z, End: 2026-09-04T20:10:25.280029773Z, Duration: 00:00:00.306
Create runtime type propagation graph: Begin: 2026-09-04T20:10:24.973660213Z, End: 2026-09-04T20:10:25.108182842Z, Duration: 00:00:00.134
Run SCC (Tarjan) on 43492 nodes: Begin: 2026-09-04T20:10:25.108650565Z, End: 2026-09-04T20:10:25.184168412Z, Duration: 00:00:00.075
Propagate runtime types to strongly connected components: Begin: 2026-09-04T20:10:25.184341804Z, End: 2026-09-04T20:10:25.279896162Z, Duration: 00:00:00.095
Variable Type Analysis #2: Begin: 2026-09-04T20:10:25.282833954Z, End: 2026-09-04T20:10:25.523940173Z, Duration: 00:00:00.241
Create runtime type propagation graph: Begin: 2026-09-04T20:10:25.282848175Z, End: 2026-09-04T20:10:25.400839679Z, Duration: 00:00:00.117
Run SCC (Tarjan) on 43492 nodes: Begin: 2026-09-04T20:10:25.400955403Z, End: 2026-09-04T20:10:25.452640335Z, Duration: 00:00:00.051
Propagate runtime types to strongly connected components: Begin: 2026-09-04T20:10:25.452772343Z, End: 2026-09-04T20:10:25.523802665Z, Duration: 00:00:00.071
Load config: Begin: 2026-09-04T20:10:25.526818515Z, End: 2026-09-04T20:10:25.812121103Z, Duration: 00:00:00.285
Compute entry points: Begin: 2026-09-04T20:10:25.812295966Z, End: 2026-09-04T20:10:25.955502485Z, Duration: 00:00:00.143
Slice call graph: Begin: 2026-09-04T20:10:25.955849168Z, End: 2026-09-04T20:10:25.959408164Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-04T20:10:25.959494114Z, End: 2026-09-04T20:10:25.993038829Z, Duration: 00:00:00.033
Taint analysis for go: Begin: 2026-09-04T20:10:25.993282916Z, End: 2026-09-04T20:10:26.302033440Z, Duration: 00:00:00.308
Report issues: Begin: 2026-09-04T20:10:26.302102484Z, End: 2026-09-04T20:10:26.318785797Z, Duration: 00:00:00.016
Store cache: Begin: 2026-09-04T20:10:26.319402476Z, End: 2026-09-04T20:10:26.323090818Z, Duration: 00:00:00.003
22:10:26.326 INFO go security sensor peak memory (pre-GC, max allocation pressure): 914 MB
22:10:26.328 INFO go security sensor peak memory (post-GC, max live footprint): 419 MB
22:10:26.329 INFO Sensor GoSecuritySensor [security] (done) | time=2083ms
22:10:26.343 INFO ------------- Run sensors on project
22:10:26.606 INFO Sensor Deterministic Rule Engine for Go [dre]
22:10:26.647 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
22:10:26.979 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-773/.scannerwork/.sonartmp/bridge-dre/bridge
22:10:27.486 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=879ms
22:10:27.487 INFO Sensor Deterministic Rule Engine for Shell [dre]
22:10:27.492 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=6ms
22:10:27.493 INFO Sensor SQL Dialect Detection [dre]
22:10:27.494 INFO Starting SQL dialect detection for 78 file(s)
22:10:27.569 INFO Finished SQL dialect detection for 78 file(s) in 73 ms
22:10:27.572 INFO SQL dialect detected: ansi (78 file(s))
22:10:27.573 INFO Sensor SQL Dialect Detection [dre] (done) | time=80ms
22:10:27.573 INFO Sensor DRE Project Telemetry [dre]
22:10:27.576 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
22:10:27.580 INFO Sensor GoProjectSensor [go]
22:10:27.581 INFO Sensor GoProjectSensor [go] (done) | time=0ms
22:10:27.581 INFO Sensor Sonar Go A3S Context Collector [go]
22:10:27.581 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
22:10:27.581 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
22:10:27.581 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
22:10:27.582 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
22:10:27.827 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
22:10:27.829 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
22:10:27.842 INFO Using embedded Node.js runtime.
22:10:27.842 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
22:10:30.353 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
22:10:30.361 INFO gRPC analyze-project server listening on 127.0.0.1:39579
22:10:30.545 INFO Plugin version: [13.8.0.44569]
22:10:32.913 INFO Found 0 tsconfig.json file(s): []
22:10:33.010 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
22:10:33.019 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
22:10:33.209 INFO 37 source files to be analyzed
22:10:33.209 INFO 37/37 source files have been analyzed
22:10:33.258 INFO JasminAstConsumer done
22:10:33.259 INFO Hit the cache for 0 out of 36
22:10:33.259 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
22:10:33.262 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5685ms
22:10:33.264 INFO Sensor IaC Project Sensor [iac]
22:10:33.273 INFO Sensor IaC Project Sensor [iac] (done) | time=3ms
22:10:33.273 INFO Sensor Zero Coverage Sensor
22:10:33.326 INFO Sensor Zero Coverage Sensor (done) | time=56ms
22:10:33.341 INFO ------------- Gather SCA dependencies on project
22:10:33.616 INFO Dependency analysis skipped
22:10:33.666 INFO CPD Executor 62 files had no CPD blocks
22:10:33.667 INFO CPD Executor Calculating CPD for 234 files
22:10:33.761 INFO CPD Executor CPD calculation finished (done) | time=95ms
22:10:33.764 INFO SCM Publisher SCM provider for this project is: git
22:10:33.765 INFO SCM Publisher 465 source files to be analyzed
22:10:34.612 INFO SCM Publisher 465/465 source files have been analyzed (done) | time=847ms
22:10:34.620 INFO SCM revision ID '2727fd25d891ea2c691787c8df9498a31269adab'
22:10:34.864 INFO Analysis report generated in 235ms, dir size=3 MB
22:10:35.450 INFO Analysis report compressed in 585ms, zip size=1 MB
22:10:36.199 INFO Analysis report uploaded in 748ms
22:10:36.200 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
22:10:36.201 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
22:10:36.201 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBuC2bjysLIlhLifWFW
22:10:36.201 INFO ------------- Upload SCA dependency files
22:10:36.794 INFO Sensor cache published successfully
22:10:37.237 INFO Analysis total time: 28.841 s
22:10:37.240 INFO SonarScanner Engine completed successfully
22:10:37.606 INFO EXECUTION SUCCESS
22:10:37.608 INFO Total time: 37.812s