Build 684 success
sonar on sonar-cookie-attrs · b0fba1c090 · queued 2026-09-04 23:13 UTC · finished 2026-09-04 23:25 UTC · ran 37s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (b0fba1c090)
step 1/1 set -eu
01:24:54.014 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
01:24:54.018 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-785/sonar-project.properties
01:24:54.043 INFO SonarScanner CLI 8.1.0.6389
01:24:54.049 INFO Linux 6.12.105+deb13-amd64 amd64
01:24:57.120 INFO Communicating with SonarQube Cloud
01:24:57.121 INFO JRE provisioning: os[linux], arch[x86_64]
01:24:57.823 INFO Starting SonarScanner Engine...
01:24:57.823 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
01:25:01.312 INFO Load global settings
01:25:01.723 INFO Load global settings (done) | time=405ms
01:25:01.823 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
01:25:01.988 INFO Loading required plugins
01:25:01.988 INFO Load plugins index
01:25:02.048 INFO Load plugins index (done) | time=61ms
01:25:02.051 INFO Load/download plugins
01:25:02.101 INFO Load/download plugins (done) | time=52ms
01:25:02.222 INFO Loaded core extensions: sca, a3s, architecture
01:25:02.735 INFO Process project properties
01:25:02.760 INFO Project key: krz_gitbay
01:25:02.760 INFO Base dir: /var/lib/gitbay-runner/work/build-785
01:25:02.761 INFO Working dir: /var/lib/gitbay-runner/work/build-785/.scannerwork
01:25:02.766 INFO Load project settings for component key: 'krz_gitbay'
01:25:03.072 INFO Load project settings for component key: 'krz_gitbay' (done) | time=305ms
01:25:03.095 INFO Check ALM binding of project 'krz_gitbay'
01:25:03.214 INFO Detected project binding: NOT_BOUND
01:25:03.214 INFO Check ALM binding of project 'krz_gitbay' (done) | time=120ms
01:25:03.219 INFO Load branch configuration
01:25:03.219 INFO Load branch configuration (done) | time=1ms
01:25:03.223 INFO Create analysis
01:25:03.459 INFO Create analysis (done) | time=237ms
01:25:03.617 INFO Load quality profiles
01:25:04.015 INFO Load quality profiles (done) | time=402ms
01:25:04.164 INFO Load active rules
01:25:04.557 INFO Load active rules (done) | time=388ms
01:25:04.675 INFO Organization key: krz
01:25:04.696 INFO Preprocessing files...
01:25:05.006 INFO 6 languages detected in 481 preprocessed files (done) | time=310ms
01:25:05.008 INFO 513 files ignored because of inclusion/exclusion patterns
01:25:05.009 INFO 2 directories skipped because of exclusion patterns (content not counted)
01:25:05.009 INFO 28 files ignored because of scm ignore settings
01:25:05.018 INFO Loading plugins for detected languages
01:25:05.019 INFO Load/download plugins
01:25:05.100 INFO Load/download plugins (done) | time=81ms
01:25:05.357 INFO Load project repositories
01:25:05.573 INFO Load project repositories (done) | time=220ms
01:25:05.597 INFO Indexing files...
01:25:05.597 INFO Project configuration:
01:25:05.597 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, **/build-wrapper-dump.json, **/*_test.go
01:25:05.598 INFO Included tests: **/*_test.go
01:25:05.626 INFO 481 files indexed (done) | time=32ms
01:25:05.628 INFO Quality profile for css: Sonar way essentials
01:25:05.633 INFO Quality profile for go: Sonar way essentials
01:25:05.633 INFO Quality profile for plsql: Sonar way essentials
01:25:05.633 INFO Quality profile for shell: Sonar way essentials
01:25:05.633 INFO Quality profile for web: Sonar way essentials
01:25:05.633 INFO Quality profile for yaml: Sonar way essentials
01:25:05.633 INFO ------------- Run sensors on module gitbay
01:25:05.701 INFO Load metrics repository
01:25:05.742 INFO Load metrics repository (done) | time=48ms
01:25:05.752 INFO Sensor cache enabled
01:25:05.754 INFO Load sensor cache
01:25:06.077 INFO Load sensor cache (1 MB) | time=322ms
01:25:06.481 INFO Reflections took 82 ms to scan 1 urls, producing 30 keys and 295 values
01:25:07.185 INFO Sensor IaC YAML File Type Classification Sensor [iac]
01:25:07.213 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=27ms
01:25:07.213 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
01:25:07.213 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
01:25:07.215 INFO Sensor HTML [web]
01:25:07.594 INFO Sensor HTML [web] (done) | time=377ms
01:25:07.594 INFO Sensor Code Quality and Security for Go [go]
01:25:07.664 INFO 26 folders (349 files) to be analyzed
01:25:15.781 INFO 26/26 folders (349 files) have been analyzed
01:25:15.781 INFO Sensor Code Quality and Security for Go [go] (done) | time=8186ms
01:25:15.781 INFO Sensor IaC CloudFormation Sensor [iac]
01:25:15.782 INFO There are no files to be analyzed for the CloudFormation language
01:25:15.782 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
01:25:15.782 INFO Sensor IaC cfn-lint report Sensor [iac]
01:25:15.782 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
01:25:15.782 INFO Sensor IaC Kustomization Sensor [iac]
01:25:15.782 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
01:25:15.783 INFO Sensor IaC hadolint report Sensor [iac]
01:25:15.783 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
01:25:15.783 INFO Sensor Java Config Sensor [iac]
01:25:15.784 INFO There are no files to be analyzed for the Java language
01:25:15.784 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
01:25:15.784 INFO Sensor IaC Docker Sensor [iac]
01:25:15.789 INFO There are no files to be analyzed for the Docker language
01:25:15.790 INFO Sensor IaC Docker Sensor [iac] (done) | time=5ms
01:25:15.791 INFO Sensor IaC Ansible Sensor [iac]
01:25:15.791 INFO There are no files to be analyzed for the Ansible language
01:25:15.791 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
01:25:15.791 INFO Sensor IaC ansible-lint report Sensor [iac]
01:25:15.793 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
01:25:15.793 INFO Sensor IaC spectral report Sensor [iac]
01:25:15.794 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
01:25:15.794 INFO Sensor IaC GitHub Actions Sensor [iac]
01:25:15.794 INFO There are no files to be analyzed for the GitHub Actions language
01:25:15.795 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
01:25:15.796 INFO Sensor IaC actionlint report Sensor [iac]
01:25:15.796 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
01:25:15.796 INFO Sensor IaC Azure Pipelines Sensor [iac]
01:25:15.797 INFO There are no files to be analyzed for the Azure Pipelines language
01:25:15.798 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
01:25:15.798 INFO Sensor IaC Shell Sensor [iac]
01:25:15.803 INFO 4 source files to be analyzed
01:25:15.864 INFO 4/4 source files have been analyzed
01:25:15.865 INFO Sensor IaC Shell Sensor [iac] (done) | time=72ms
01:25:15.865 INFO Sensor PL/SQL Sensor [plsql]
01:25:15.898 WARN The Data Dictionary is not configured for the PLSQL analyzer, which prevents rule(s) S3641, S3921, S3651, S3618 from raising issues. See https://docs.sonarcloud.io/advanced-setup/languages/pl-sql/
01:25:15.900 INFO 78 source files to be analyzed
01:25:16.063 WARN
01:25:16.063 WARN Unable to fully parse: /var/lib/gitbay-runner/work/build-785/internal/store/migrations/0033_owner_guards.up.sql
01:25:16.064 WARN Parse error starting from line 5
01:25:16.064 WARN
01:25:16.064 WARN
01:25:16.064 WARN Unable to fully parse: /var/lib/gitbay-runner/work/build-785/internal/store/migrations/0033_owner_guards.up.sql
01:25:16.065 WARN Parse error starting from line 10
01:25:16.066 WARN
01:25:16.094 INFO 78/78 source files have been analyzed
01:25:16.094 INFO Sensor PL/SQL Sensor [plsql] (done) | time=230ms
01:25:16.095 INFO Sensor IaC Kubernetes Sensor [iac]
01:25:16.146 INFO There are no files to be analyzed for the Kubernetes language
01:25:16.146 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=50ms
01:25:16.146 INFO Sensor IaC YAML Sensor [iac]
01:25:16.146 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
01:25:16.146 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
01:25:16.146 INFO Sensor Serverless configuration file sensor [security]
01:25:16.153 INFO 0 Serverless function entries were found in the project
01:25:16.153 INFO 0 Serverless function handlers were kept as entrypoints
01:25:16.153 INFO Sensor Serverless configuration file sensor [security] (done) | time=1ms
01:25:16.153 INFO Sensor AWS SAM template file sensor [security]
01:25:16.155 INFO Sensor AWS SAM template file sensor [security] (done) | time=6ms
01:25:16.158 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
01:25:16.192 INFO Available processors: 4
01:25:16.193 INFO Using 4 threads for analysis.
01:25:16.515 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
01:25:16.583 INFO Start fetching files for the text and secrets analysis
01:25:16.589 INFO Using Git CLI to retrieve dirty files
01:25:16.616 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
01:25:16.618 INFO Starting the text and secrets analysis
01:25:16.619 INFO 473 source files to be analyzed for the text and secrets analysis
01:25:17.077 INFO 473/473 source files have been analyzed for the text and secrets analysis
01:25:17.077 INFO Start fetching files for the binary file analysis
01:25:17.077 INFO There are no files to be analyzed for the binary file analysis
01:25:17.084 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=929ms
01:25:17.085 INFO Sensor GoSecuritySensor [security]
01:25:17.090 INFO 9 taint analysis rules enabled.
01:25:17.781 INFO Analyzing 2105 UCFGs to detect vulnerabilities.
01:25:18.856 INFO All rules entry points : 29
01:25:18.856 INFO Retained UCFGs : 123
01:25:18.901 INFO 0 / 123 UCFGs simulated, memory usage: 310 MB
01:25:19.194 INFO 123 / 123 UCFGs simulated, memory usage: 351 MB
01:25:19.203 WARN Failed to find InputFile for __unknown_file, check exclusions.
01:25:19.209 WARN Failed to find InputFile for __unknown_file, check exclusions.
01:25:19.221 INFO go security sensor: Begin: 2026-09-04T23:25:17.088056430Z, End: 2026-09-04T23:25:19.215805489Z, Duration: 00:00:02.127
Resolve files to analyze: Begin: 2026-09-04T23:25:17.091780293Z, End: 2026-09-04T23:25:17.092739287Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-04T23:25:17.094497511Z, End: 2026-09-04T23:25:17.779832732Z, Duration: 00:00:00.685
Load type hierarchy: Begin: 2026-09-04T23:25:17.094505734Z, End: 2026-09-04T23:25:17.099556774Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-04T23:25:17.099639109Z, End: 2026-09-04T23:25:17.779678069Z, Duration: 00:00:00.680
Check cache: Begin: 2026-09-04T23:25:17.779972212Z, End: 2026-09-04T23:25:17.780517553Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-04T23:25:17.780331512Z, End: 2026-09-04T23:25:17.780349799Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-04T23:25:17.780540427Z, End: 2026-09-04T23:25:18.373428518Z, Duration: 00:00:00.592
Variable Type Analysis #1: Begin: 2026-09-04T23:25:17.782758784Z, End: 2026-09-04T23:25:18.091289311Z, Duration: 00:00:00.308
Create runtime type propagation graph: Begin: 2026-09-04T23:25:17.783845189Z, End: 2026-09-04T23:25:17.940346196Z, Duration: 00:00:00.156
Run SCC (Tarjan) on 43631 nodes: Begin: 2026-09-04T23:25:17.940781170Z, End: 2026-09-04T23:25:18.002041185Z, Duration: 00:00:00.061
Propagate runtime types to strongly connected components: Begin: 2026-09-04T23:25:18.002202717Z, End: 2026-09-04T23:25:18.091173435Z, Duration: 00:00:00.088
Variable Type Analysis #2: Begin: 2026-09-04T23:25:18.093739968Z, End: 2026-09-04T23:25:18.371656832Z, Duration: 00:00:00.277
Create runtime type propagation graph: Begin: 2026-09-04T23:25:18.093749943Z, End: 2026-09-04T23:25:18.282503347Z, Duration: 00:00:00.188
Run SCC (Tarjan) on 43631 nodes: Begin: 2026-09-04T23:25:18.282630169Z, End: 2026-09-04T23:25:18.312193521Z, Duration: 00:00:00.029
Propagate runtime types to strongly connected components: Begin: 2026-09-04T23:25:18.312346611Z, End: 2026-09-04T23:25:18.371546244Z, Duration: 00:00:00.059
Load config: Begin: 2026-09-04T23:25:18.373469990Z, End: 2026-09-04T23:25:18.655233882Z, Duration: 00:00:00.281
Compute entry points: Begin: 2026-09-04T23:25:18.655397198Z, End: 2026-09-04T23:25:18.852270691Z, Duration: 00:00:00.196
Slice call graph: Begin: 2026-09-04T23:25:18.852593005Z, End: 2026-09-04T23:25:18.855726801Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-04T23:25:18.855787042Z, End: 2026-09-04T23:25:18.898545157Z, Duration: 00:00:00.042
Taint analysis for go: Begin: 2026-09-04T23:25:18.898770797Z, End: 2026-09-04T23:25:19.195036429Z, Duration: 00:00:00.296
Report issues: Begin: 2026-09-04T23:25:19.195131914Z, End: 2026-09-04T23:25:19.210485434Z, Duration: 00:00:00.015
Store cache: Begin: 2026-09-04T23:25:19.211257315Z, End: 2026-09-04T23:25:19.215228061Z, Duration: 00:00:00.003
01:25:19.221 INFO go security sensor peak memory (pre-GC, max allocation pressure): 760 MB
01:25:19.221 INFO go security sensor peak memory (post-GC, max live footprint): 305 MB
01:25:19.221 INFO Sensor GoSecuritySensor [security] (done) | time=2132ms
01:25:19.226 INFO ------------- Run sensors on project
01:25:19.428 INFO Sensor Deterministic Rule Engine for Go [dre]
01:25:19.481 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
01:25:19.823 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-785/.scannerwork/.sonartmp/bridge-dre/bridge
01:25:20.358 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=929ms
01:25:20.358 INFO Sensor Deterministic Rule Engine for Shell [dre]
01:25:20.365 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
01:25:20.365 INFO Sensor SQL Dialect Detection [dre]
01:25:20.368 INFO Starting SQL dialect detection for 78 file(s)
01:25:20.436 INFO Finished SQL dialect detection for 78 file(s) in 67 ms
01:25:20.440 INFO SQL dialect detected: ansi (78 file(s))
01:25:20.441 INFO Sensor SQL Dialect Detection [dre] (done) | time=73ms
01:25:20.441 INFO Sensor DRE Project Telemetry [dre]
01:25:20.442 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
01:25:20.442 INFO Sensor GoProjectSensor [go]
01:25:20.442 INFO Sensor GoProjectSensor [go] (done) | time=0ms
01:25:20.442 INFO Sensor Sonar Go A3S Context Collector [go]
01:25:20.442 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
01:25:20.442 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
01:25:20.443 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
01:25:20.443 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
01:25:20.675 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
01:25:20.677 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
01:25:20.685 INFO Using embedded Node.js runtime.
01:25:20.685 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
01:25:23.138 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
01:25:23.148 INFO gRPC analyze-project server listening on 127.0.0.1:33337
01:25:23.347 INFO Plugin version: [13.8.0.44569]
01:25:25.668 INFO Found 0 tsconfig.json file(s): []
01:25:25.866 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
01:25:25.872 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
01:25:25.901 INFO 37 source files to be analyzed
01:25:25.901 INFO 37/37 source files have been analyzed
01:25:25.945 INFO JasminAstConsumer done
01:25:25.945 INFO Hit the cache for 0 out of 36
01:25:25.946 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
01:25:25.951 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5508ms
01:25:25.951 INFO Sensor IaC Project Sensor [iac]
01:25:25.962 INFO Sensor IaC Project Sensor [iac] (done) | time=8ms
01:25:25.962 INFO Sensor Zero Coverage Sensor
01:25:26.026 INFO Sensor Zero Coverage Sensor (done) | time=67ms
01:25:26.051 INFO ------------- Gather SCA dependencies on project
01:25:26.202 INFO Dependency analysis skipped
01:25:26.243 INFO CPD Executor 62 files had no CPD blocks
01:25:26.243 INFO CPD Executor Calculating CPD for 234 files
01:25:26.332 INFO CPD Executor CPD calculation finished (done) | time=88ms
01:25:26.335 INFO SCM Publisher SCM provider for this project is: git
01:25:26.335 INFO SCM Publisher 468 source files to be analyzed
01:25:27.071 INFO SCM Publisher 468/468 source files have been analyzed (done) | time=736ms
01:25:27.088 INFO SCM revision ID 'b0fba1c090202ac599e31fe580739070e2a4d750'
01:25:27.339 INFO Analysis report generated in 243ms, dir size=3 MB
01:25:27.919 INFO Analysis report compressed in 579ms, zip size=1 MB
01:25:28.523 INFO Analysis report uploaded in 604ms
01:25:28.525 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
01:25:28.525 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
01:25:28.526 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBuvc_qysLIlhLifdJT
01:25:28.527 INFO ------------- Upload SCA dependency files
01:25:29.123 INFO Sensor cache published successfully
01:25:29.454 INFO Analysis total time: 27.232 s
01:25:29.456 INFO SonarScanner Engine completed successfully
01:25:29.819 INFO EXECUTION SUCCESS
01:25:29.820 INFO Total time: 35.808s