Build 692 success
sonar on sonar-toolpath · cabf60cf5b · queued 2026-09-04 23:40 UTC · finished 2026-09-04 23:41 UTC · ran 36s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (cabf60cf5b)
step 1/1 set -eu
01:40:28.501 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
01:40:28.504 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-794/sonar-project.properties
01:40:28.517 INFO SonarScanner CLI 8.1.0.6389
01:40:28.521 INFO Linux 6.12.105+deb13-amd64 amd64
01:40:31.505 INFO Communicating with SonarQube Cloud
01:40:31.505 INFO JRE provisioning: os[linux], arch[x86_64]
01:40:32.312 INFO Starting SonarScanner Engine...
01:40:32.313 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
01:40:35.760 INFO Load global settings
01:40:36.209 INFO Load global settings (done) | time=442ms
01:40:36.293 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
01:40:36.472 INFO Loading required plugins
01:40:36.473 INFO Load plugins index
01:40:36.543 INFO Load plugins index (done) | time=71ms
01:40:36.544 INFO Load/download plugins
01:40:36.593 INFO Load/download plugins (done) | time=47ms
01:40:36.726 INFO Loaded core extensions: architecture, sca, a3s
01:40:37.236 INFO Process project properties
01:40:37.255 INFO Project key: krz_gitbay
01:40:37.256 INFO Base dir: /var/lib/gitbay-runner/work/build-794
01:40:37.257 INFO Working dir: /var/lib/gitbay-runner/work/build-794/.scannerwork
01:40:37.262 INFO Load project settings for component key: 'krz_gitbay'
01:40:37.598 INFO Load project settings for component key: 'krz_gitbay' (done) | time=333ms
01:40:37.620 INFO Check ALM binding of project 'krz_gitbay'
01:40:37.770 INFO Detected project binding: NOT_BOUND
01:40:37.771 INFO Check ALM binding of project 'krz_gitbay' (done) | time=150ms
01:40:37.776 INFO Load branch configuration
01:40:37.776 INFO Load branch configuration (done) | time=1ms
01:40:37.779 INFO Create analysis
01:40:38.003 INFO Create analysis (done) | time=223ms
01:40:38.176 INFO Load quality profiles
01:40:38.620 INFO Load quality profiles (done) | time=444ms
01:40:38.771 INFO Load active rules
01:40:39.153 INFO Load active rules (done) | time=383ms
01:40:39.298 INFO Organization key: krz
01:40:39.318 INFO Preprocessing files...
01:40:39.522 INFO 5 languages detected in 406 preprocessed files (done) | time=206ms
01:40:39.524 INFO 516 files ignored because of inclusion/exclusion patterns
01:40:39.525 INFO 3 directories skipped because of exclusion patterns (content not counted)
01:40:39.526 INFO 28 files ignored because of scm ignore settings
01:40:39.547 INFO Loading plugins for detected languages
01:40:39.547 INFO Load/download plugins
01:40:39.646 INFO Load/download plugins (done) | time=99ms
01:40:39.888 INFO Load project repositories
01:40:40.095 INFO Load project repositories (done) | time=205ms
01:40:40.114 INFO Indexing files...
01:40:40.114 INFO Project configuration:
01:40:40.114 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
01:40:40.115 INFO Included tests: **/*_test.go
01:40:40.168 INFO 406 files indexed (done) | time=54ms
01:40:40.169 INFO Quality profile for css: Sonar way essentials
01:40:40.169 INFO Quality profile for go: Sonar way essentials
01:40:40.170 INFO Quality profile for shell: Sonar way essentials
01:40:40.171 INFO Quality profile for web: Sonar way essentials
01:40:40.171 INFO Quality profile for yaml: Sonar way essentials
01:40:40.172 INFO ------------- Run sensors on module gitbay
01:40:40.244 INFO Load metrics repository
01:40:40.304 INFO Load metrics repository (done) | time=60ms
01:40:40.311 INFO Sensor cache enabled
01:40:40.315 INFO Load sensor cache
01:40:40.667 INFO Load sensor cache (1 MB) | time=352ms
01:40:41.071 INFO Reflections took 60 ms to scan 1 urls, producing 30 keys and 295 values
01:40:41.706 INFO Sensor IaC YAML File Type Classification Sensor [iac]
01:40:41.742 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=33ms
01:40:41.742 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
01:40:41.742 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
01:40:41.743 INFO Sensor HTML [web]
01:40:42.112 INFO Sensor HTML [web] (done) | time=371ms
01:40:42.115 INFO Sensor Code Quality and Security for Go [go]
01:40:42.198 INFO 27 folders (352 files) to be analyzed
01:40:49.963 INFO 27/27 folders (352 files) have been analyzed
01:40:49.964 INFO Sensor Code Quality and Security for Go [go] (done) | time=7851ms
01:40:49.964 INFO Sensor IaC CloudFormation Sensor [iac]
01:40:49.965 INFO There are no files to be analyzed for the CloudFormation language
01:40:49.966 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
01:40:49.967 INFO Sensor IaC cfn-lint report Sensor [iac]
01:40:49.967 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
01:40:49.968 INFO Sensor IaC Kustomization Sensor [iac]
01:40:49.968 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
01:40:49.969 INFO Sensor IaC hadolint report Sensor [iac]
01:40:49.970 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
01:40:49.970 INFO Sensor Java Config Sensor [iac]
01:40:49.970 INFO There are no files to be analyzed for the Java language
01:40:49.970 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
01:40:49.970 INFO Sensor IaC Docker Sensor [iac]
01:40:49.971 INFO There are no files to be analyzed for the Docker language
01:40:49.971 INFO Sensor IaC Docker Sensor [iac] (done) | time=3ms
01:40:49.972 INFO Sensor IaC Ansible Sensor [iac]
01:40:49.972 INFO There are no files to be analyzed for the Ansible language
01:40:49.972 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
01:40:49.973 INFO Sensor IaC ansible-lint report Sensor [iac]
01:40:49.974 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
01:40:49.974 INFO Sensor IaC spectral report Sensor [iac]
01:40:49.974 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
01:40:49.974 INFO Sensor IaC GitHub Actions Sensor [iac]
01:40:49.975 INFO There are no files to be analyzed for the GitHub Actions language
01:40:49.975 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
01:40:49.976 INFO Sensor IaC actionlint report Sensor [iac]
01:40:49.977 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
01:40:49.977 INFO Sensor IaC Azure Pipelines Sensor [iac]
01:40:49.977 INFO There are no files to be analyzed for the Azure Pipelines language
01:40:49.979 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
01:40:49.979 INFO Sensor IaC Shell Sensor [iac]
01:40:49.991 INFO 4 source files to be analyzed
01:40:50.061 INFO 4/4 source files have been analyzed
01:40:50.062 INFO Sensor IaC Shell Sensor [iac] (done) | time=83ms
01:40:50.063 INFO Sensor IaC Kubernetes Sensor [iac]
01:40:50.117 INFO There are no files to be analyzed for the Kubernetes language
01:40:50.117 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=55ms
01:40:50.117 INFO Sensor IaC YAML Sensor [iac]
01:40:50.117 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
01:40:50.117 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
01:40:50.117 INFO Sensor Serverless configuration file sensor [security]
01:40:50.121 INFO 0 Serverless function entries were found in the project
01:40:50.121 INFO 0 Serverless function handlers were kept as entrypoints
01:40:50.121 INFO Sensor Serverless configuration file sensor [security] (done) | time=1ms
01:40:50.122 INFO Sensor AWS SAM template file sensor [security]
01:40:50.126 INFO Sensor AWS SAM template file sensor [security] (done) | time=6ms
01:40:50.126 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
01:40:50.149 INFO Available processors: 4
01:40:50.150 INFO Using 4 threads for analysis.
01:40:50.449 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
01:40:50.517 INFO Start fetching files for the text and secrets analysis
01:40:50.524 INFO Using Git CLI to retrieve dirty files
01:40:50.546 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
01:40:50.546 INFO Starting the text and secrets analysis
01:40:50.547 INFO 398 source files to be analyzed for the text and secrets analysis
01:40:50.961 INFO 398/398 source files have been analyzed for the text and secrets analysis
01:40:50.965 INFO Start fetching files for the binary file analysis
01:40:50.966 INFO There are no files to be analyzed for the binary file analysis
01:40:50.973 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=846ms
01:40:50.976 INFO Sensor GoSecuritySensor [security]
01:40:50.981 INFO 9 taint analysis rules enabled.
01:40:51.704 INFO Analyzing 2113 UCFGs to detect vulnerabilities.
01:40:52.550 INFO All rules entry points : 29
01:40:52.551 INFO Retained UCFGs : 123
01:40:52.605 INFO 0 / 123 UCFGs simulated, memory usage: 309 MB
01:40:52.866 INFO 123 / 123 UCFGs simulated, memory usage: 350 MB
01:40:52.873 WARN Failed to find InputFile for __unknown_file, check exclusions.
01:40:52.886 WARN Failed to find InputFile for __unknown_file, check exclusions.
01:40:52.893 INFO go security sensor: Begin: 2026-09-04T23:40:50.976184734Z, End: 2026-09-04T23:40:52.890713418Z, Duration: 00:00:01.914
Resolve files to analyze: Begin: 2026-09-04T23:40:50.981291580Z, End: 2026-09-04T23:40:50.982206936Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-04T23:40:50.982450273Z, End: 2026-09-04T23:40:51.703075536Z, Duration: 00:00:00.720
Load type hierarchy: Begin: 2026-09-04T23:40:50.982455260Z, End: 2026-09-04T23:40:50.987490068Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-04T23:40:50.987563027Z, End: 2026-09-04T23:40:51.702926342Z, Duration: 00:00:00.715
Check cache: Begin: 2026-09-04T23:40:51.703332984Z, End: 2026-09-04T23:40:51.704831720Z, Duration: 00:00:00.001
Load cache: Begin: 2026-09-04T23:40:51.704546771Z, End: 2026-09-04T23:40:51.704572129Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-04T23:40:51.704874514Z, End: 2026-09-04T23:40:52.197602050Z, Duration: 00:00:00.492
Variable Type Analysis #1: Begin: 2026-09-04T23:40:51.709178292Z, End: 2026-09-04T23:40:51.987015295Z, Duration: 00:00:00.277
Create runtime type propagation graph: Begin: 2026-09-04T23:40:51.709697843Z, End: 2026-09-04T23:40:51.838307145Z, Duration: 00:00:00.128
Run SCC (Tarjan) on 43684 nodes: Begin: 2026-09-04T23:40:51.838837123Z, End: 2026-09-04T23:40:51.906468586Z, Duration: 00:00:00.067
Propagate runtime types to strongly connected components: Begin: 2026-09-04T23:40:51.906619513Z, End: 2026-09-04T23:40:51.986881585Z, Duration: 00:00:00.080
Variable Type Analysis #2: Begin: 2026-09-04T23:40:51.989369729Z, End: 2026-09-04T23:40:52.195773938Z, Duration: 00:00:00.206
Create runtime type propagation graph: Begin: 2026-09-04T23:40:51.989377320Z, End: 2026-09-04T23:40:52.097226869Z, Duration: 00:00:00.107
Run SCC (Tarjan) on 43684 nodes: Begin: 2026-09-04T23:40:52.097344316Z, End: 2026-09-04T23:40:52.134727156Z, Duration: 00:00:00.037
Propagate runtime types to strongly connected components: Begin: 2026-09-04T23:40:52.134848518Z, End: 2026-09-04T23:40:52.195662752Z, Duration: 00:00:00.060
Load config: Begin: 2026-09-04T23:40:52.197653367Z, End: 2026-09-04T23:40:52.409807212Z, Duration: 00:00:00.212
Compute entry points: Begin: 2026-09-04T23:40:52.409871018Z, End: 2026-09-04T23:40:52.550265215Z, Duration: 00:00:00.140
Slice call graph: Begin: 2026-09-04T23:40:52.550475512Z, End: 2026-09-04T23:40:52.553444169Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-04T23:40:52.553510479Z, End: 2026-09-04T23:40:52.602098183Z, Duration: 00:00:00.048
Taint analysis for go: Begin: 2026-09-04T23:40:52.602368809Z, End: 2026-09-04T23:40:52.865680374Z, Duration: 00:00:00.263
Report issues: Begin: 2026-09-04T23:40:52.865749218Z, End: 2026-09-04T23:40:52.885852432Z, Duration: 00:00:00.020
Store cache: Begin: 2026-09-04T23:40:52.886818746Z, End: 2026-09-04T23:40:52.890077841Z, Duration: 00:00:00.003
01:40:52.894 INFO go security sensor peak memory (pre-GC, max allocation pressure): 631 MB
01:40:52.896 INFO go security sensor peak memory (post-GC, max live footprint): 275 MB
01:40:52.898 INFO Sensor GoSecuritySensor [security] (done) | time=1918ms
01:40:52.901 INFO ------------- Run sensors on project
01:40:53.113 INFO Sensor Deterministic Rule Engine for Go [dre]
01:40:53.148 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
01:40:53.453 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-794/.scannerwork/.sonartmp/bridge-dre/bridge
01:40:53.700 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=586ms
01:40:53.700 INFO Sensor Deterministic Rule Engine for Shell [dre]
01:40:53.704 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=4ms
01:40:53.705 INFO Sensor SQL Dialect Detection [dre]
01:40:53.706 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
01:40:53.706 INFO Sensor DRE Project Telemetry [dre]
01:40:53.706 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
01:40:53.706 INFO Sensor GoProjectSensor [go]
01:40:53.707 INFO Sensor GoProjectSensor [go] (done) | time=0ms
01:40:53.707 INFO Sensor Sonar Go A3S Context Collector [go]
01:40:53.707 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
01:40:53.707 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
01:40:53.708 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
01:40:53.708 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
01:40:53.934 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
01:40:53.934 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
01:40:53.944 INFO Using embedded Node.js runtime.
01:40:53.944 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
01:40:56.193 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
01:40:56.200 INFO gRPC analyze-project server listening on 127.0.0.1:37459
01:40:56.381 INFO Plugin version: [13.8.0.44569]
01:40:58.507 INFO Found 0 tsconfig.json file(s): []
01:40:58.610 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
01:40:58.782 INFO 37 source files to be analyzed
01:40:58.782 INFO 37/37 source files have been analyzed
01:40:58.787 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
01:40:58.820 INFO JasminAstConsumer done
01:40:58.821 INFO Hit the cache for 0 out of 36
01:40:58.821 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
01:40:58.821 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5111ms
01:40:58.821 INFO Sensor IaC Project Sensor [iac]
01:40:58.821 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
01:40:58.821 INFO Sensor Zero Coverage Sensor
01:40:58.880 INFO Sensor Zero Coverage Sensor (done) | time=59ms
01:40:58.892 INFO ------------- Gather SCA dependencies on project
01:40:59.106 INFO Dependency analysis skipped
01:40:59.138 INFO CPD Executor 3 files had no CPD blocks
01:40:59.138 INFO CPD Executor Calculating CPD for 216 files
01:40:59.217 INFO CPD Executor CPD calculation finished (done) | time=79ms
01:40:59.219 INFO SCM Publisher SCM provider for this project is: git
01:40:59.220 INFO SCM Publisher 393 source files to be analyzed
01:40:59.968 INFO SCM Publisher 393/393 source files have been analyzed (done) | time=747ms
01:40:59.975 INFO SCM revision ID 'cabf60cf5be6415ea1a1da2e8269db8a4efea155'
01:41:00.218 INFO Analysis report generated in 232ms, dir size=3 MB
01:41:00.795 INFO Analysis report compressed in 575ms, zip size=1 MB
01:41:01.544 INFO Analysis report uploaded in 749ms
01:41:01.547 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
01:41:01.547 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
01:41:01.548 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBuzAynBlKrDa6g-rU0
01:41:01.550 INFO ------------- Upload SCA dependency files
01:41:02.187 INFO Sensor cache published successfully
01:41:02.470 INFO Analysis total time: 25.744 s
01:41:02.474 INFO SonarScanner Engine completed successfully
01:41:02.850 INFO EXECUTION SUCCESS
01:41:02.851 INFO Total time: 34.352s