Build 696 success

sonar on changelog-v1.13.2 · 61564b7c32 · queued 2026-09-05 00:02 UTC · finished 2026-09-05 00:03 UTC · ran 42s

setup

$ git clone ssh://git@127.0.0.1/krz/gitbay.git (61564b7c32)

step 1/1 set -eu

02:03:05.462 INFO  Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
02:03:05.466 INFO  Project root configuration file: /var/lib/gitbay-runner/work/build-798/sonar-project.properties
02:03:05.489 INFO  SonarScanner CLI 8.1.0.6389
02:03:05.495 INFO  Linux 6.12.105+deb13-amd64 amd64
02:03:08.610 INFO  Communicating with SonarQube Cloud
02:03:08.611 INFO  JRE provisioning: os[linux], arch[x86_64]
02:03:09.366 INFO  Starting SonarScanner Engine...
02:03:09.366 INFO  Java 21.0.11 Eclipse Adoptium (64-bit)
02:03:12.622 INFO  Load global settings
02:03:13.579 INFO  Load global settings (done) | time=950ms
02:03:13.667 INFO  Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
02:03:13.826 INFO  Loading required plugins
02:03:13.826 INFO  Load plugins index
02:03:14.120 INFO  Load plugins index (done) | time=294ms
02:03:14.121 INFO  Load/download plugins
02:03:14.177 INFO  Load/download plugins (done) | time=54ms
02:03:14.510 INFO  Loaded core extensions: sca, a3s, architecture
02:03:14.975 INFO  Process project properties
02:03:14.992 INFO  Project key: krz_gitbay
02:03:14.994 INFO  Base dir: /var/lib/gitbay-runner/work/build-798
02:03:14.995 INFO  Working dir: /var/lib/gitbay-runner/work/build-798/.scannerwork
02:03:14.999 INFO  Load project settings for component key: 'krz_gitbay'
02:03:15.603 INFO  Load project settings for component key: 'krz_gitbay' (done) | time=603ms
02:03:15.623 INFO  Check ALM binding of project 'krz_gitbay'
02:03:16.101 INFO  Detected project binding: NOT_BOUND
02:03:16.101 INFO  Check ALM binding of project 'krz_gitbay' (done) | time=477ms
02:03:16.106 INFO  Load branch configuration
02:03:16.108 INFO  Load branch configuration (done) | time=1ms
02:03:16.112 INFO  Create analysis
02:03:16.363 INFO  Create analysis (done) | time=250ms
02:03:16.511 INFO  Load quality profiles
02:03:17.070 INFO  Load quality profiles (done) | time=558ms
02:03:17.189 INFO  Load active rules
02:03:17.565 INFO  Load active rules (done) | time=376ms
02:03:17.918 INFO  Organization key: krz
02:03:17.937 INFO  Preprocessing files...
02:03:18.165 INFO  5 languages detected in 406 preprocessed files (done) | time=228ms
02:03:18.170 INFO  516 files ignored because of inclusion/exclusion patterns
02:03:18.170 INFO  3 directories skipped because of exclusion patterns (content not counted)
02:03:18.171 INFO  28 files ignored because of scm ignore settings
02:03:18.185 INFO  Loading plugins for detected languages
02:03:18.186 INFO  Load/download plugins
02:03:18.265 INFO  Load/download plugins (done) | time=79ms
02:03:18.471 INFO  Load project repositories
02:03:18.883 INFO  Load project repositories (done) | time=410ms
02:03:18.901 INFO  Indexing files...
02:03:18.902 INFO  Project configuration:
02:03:18.902 INFO    Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
02:03:18.902 INFO    Included tests: **/*_test.go
02:03:18.936 INFO  406 files indexed (done) | time=35ms
02:03:18.938 INFO  Quality profile for css: Sonar way essentials
02:03:18.942 INFO  Quality profile for go: Sonar way essentials
02:03:18.942 INFO  Quality profile for shell: Sonar way essentials
02:03:18.942 INFO  Quality profile for web: Sonar way essentials
02:03:18.942 INFO  Quality profile for yaml: Sonar way essentials
02:03:18.943 INFO  ------------- Run sensors on module gitbay
02:03:18.991 INFO  Load metrics repository
02:03:19.271 INFO  Load metrics repository (done) | time=277ms
02:03:19.276 INFO  Sensor cache enabled
02:03:19.279 INFO  Load sensor cache
02:03:19.650 INFO  Load sensor cache (1 MB) | time=370ms
02:03:20.003 INFO  Reflections took 51 ms to scan 1 urls, producing 30 keys and 295 values
02:03:20.640 INFO  Sensor IaC YAML File Type Classification Sensor [iac]
02:03:20.667 INFO  Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=25ms
02:03:20.667 INFO  Sensor GoModuleSecuritySensor [securitygofrontend]
02:03:20.667 INFO  Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
02:03:20.667 INFO  Sensor HTML [web]
02:03:21.010 INFO  Sensor HTML [web] (done) | time=342ms
02:03:21.010 INFO  Sensor Code Quality and Security for Go [go]
02:03:21.078 INFO  27 folders (352 files) to be analyzed
02:03:29.373 INFO  27/27 folders (352 files) have been analyzed
02:03:29.373 INFO  Sensor Code Quality and Security for Go [go] (done) | time=8361ms
02:03:29.373 INFO  Sensor IaC CloudFormation Sensor [iac]
02:03:29.373 INFO  There are no files to be analyzed for the CloudFormation language
02:03:29.373 INFO  Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
02:03:29.373 INFO  Sensor IaC cfn-lint report Sensor [iac]
02:03:29.373 INFO  Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
02:03:29.373 INFO  Sensor IaC Kustomization Sensor [iac]
02:03:29.389 INFO  Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
02:03:29.389 INFO  Sensor IaC hadolint report Sensor [iac]
02:03:29.389 INFO  Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
02:03:29.389 INFO  Sensor Java Config Sensor [iac]
02:03:29.389 INFO  There are no files to be analyzed for the Java language
02:03:29.390 INFO  Sensor Java Config Sensor [iac] (done) | time=0ms
02:03:29.390 INFO  Sensor IaC Docker Sensor [iac]
02:03:29.390 INFO  There are no files to be analyzed for the Docker language
02:03:29.390 INFO  Sensor IaC Docker Sensor [iac] (done) | time=2ms
02:03:29.390 INFO  Sensor IaC Ansible Sensor [iac]
02:03:29.390 INFO  There are no files to be analyzed for the Ansible language
02:03:29.390 INFO  Sensor IaC Ansible Sensor [iac] (done) | time=0ms
02:03:29.390 INFO  Sensor IaC ansible-lint report Sensor [iac]
02:03:29.390 INFO  Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
02:03:29.390 INFO  Sensor IaC spectral report Sensor [iac]
02:03:29.390 INFO  Sensor IaC spectral report Sensor [iac] (done) | time=0ms
02:03:29.390 INFO  Sensor IaC GitHub Actions Sensor [iac]
02:03:29.390 INFO  There are no files to be analyzed for the GitHub Actions language
02:03:29.391 INFO  Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
02:03:29.391 INFO  Sensor IaC actionlint report Sensor [iac]
02:03:29.391 INFO  Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
02:03:29.391 INFO  Sensor IaC Azure Pipelines Sensor [iac]
02:03:29.391 INFO  There are no files to be analyzed for the Azure Pipelines language
02:03:29.391 INFO  Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
02:03:29.391 INFO  Sensor IaC Shell Sensor [iac]
02:03:29.392 INFO  4 source files to be analyzed
02:03:29.465 INFO  4/4 source files have been analyzed
02:03:29.473 INFO  Sensor IaC Shell Sensor [iac] (done) | time=91ms
02:03:29.473 INFO  Sensor IaC Kubernetes Sensor [iac]
02:03:29.517 INFO  There are no files to be analyzed for the Kubernetes language
02:03:29.519 INFO  Sensor IaC Kubernetes Sensor [iac] (done) | time=46ms
02:03:29.519 INFO  Sensor IaC YAML Sensor [iac]
02:03:29.520 INFO  Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
02:03:29.520 INFO  Sensor IaC YAML Sensor [iac] (done) | time=0ms
02:03:29.520 INFO  Sensor Serverless configuration file sensor [security]
02:03:29.521 INFO  0 Serverless function entries were found in the project
02:03:29.521 INFO  0 Serverless function handlers were kept as entrypoints
02:03:29.521 INFO  Sensor Serverless configuration file sensor [security] (done) | time=2ms
02:03:29.521 INFO  Sensor AWS SAM template file sensor [security]
02:03:29.526 INFO  Sensor AWS SAM template file sensor [security] (done) | time=5ms
02:03:29.526 INFO  Sensor EnterpriseTextAndSecretsSensor [textenterprise]
02:03:29.554 INFO  Available processors: 4
02:03:29.555 INFO  Using 4 threads for analysis.
02:03:29.841 INFO  The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
02:03:29.900 INFO  Start fetching files for the text and secrets analysis
02:03:29.908 INFO  Using Git CLI to retrieve dirty files
02:03:29.943 INFO  Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
02:03:29.945 INFO  Starting the text and secrets analysis
02:03:29.947 INFO  398 source files to be analyzed for the text and secrets analysis
02:03:30.321 INFO  398/398 source files have been analyzed for the text and secrets analysis
02:03:30.324 INFO  Start fetching files for the binary file analysis
02:03:30.325 INFO  There are no files to be analyzed for the binary file analysis
02:03:30.335 INFO  Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=808ms
02:03:30.336 INFO  Sensor GoSecuritySensor [security]
02:03:30.344 INFO  9 taint analysis rules enabled.
02:03:31.029 INFO  Analyzing 2113 UCFGs to detect vulnerabilities.
02:03:32.001 INFO  All rules entry points : 29
02:03:32.002 INFO  Retained UCFGs : 123
02:03:32.057 INFO  0 / 123 UCFGs simulated, memory usage: 408 MB
02:03:32.363 INFO  123 / 123 UCFGs simulated, memory usage: 448 MB
02:03:32.369 WARN  Failed to find InputFile for __unknown_file, check exclusions.
02:03:32.374 WARN  Failed to find InputFile for __unknown_file, check exclusions.
02:03:32.380 INFO  go security sensor: Begin: 2026-09-05T00:03:30.341525750Z, End: 2026-09-05T00:03:32.378555524Z, Duration: 00:00:02.037
  Resolve files to analyze: Begin: 2026-09-05T00:03:30.344210580Z, End: 2026-09-05T00:03:30.345103944Z, Duration: 00:00:00.000
  Load type hierarchy and UCFGs: Begin: 2026-09-05T00:03:30.345364476Z, End: 2026-09-05T00:03:31.027249548Z, Duration: 00:00:00.681
    Load type hierarchy: Begin: 2026-09-05T00:03:30.345369483Z, End: 2026-09-05T00:03:30.351239076Z, Duration: 00:00:00.005
    Load UCFGs: Begin: 2026-09-05T00:03:30.351335793Z, End: 2026-09-05T00:03:31.027092162Z, Duration: 00:00:00.675
  Check cache: Begin: 2026-09-05T00:03:31.027439263Z, End: 2026-09-05T00:03:31.027995530Z, Duration: 00:00:00.000
    Load cache: Begin: 2026-09-05T00:03:31.027778794Z, End: 2026-09-05T00:03:31.027798283Z, Duration: 00:00:00.000
  Create runtime call graph: Begin: 2026-09-05T00:03:31.028032326Z, End: 2026-09-05T00:03:31.594385699Z, Duration: 00:00:00.566
    Variable Type Analysis #1: Begin: 2026-09-05T00:03:31.028434832Z, End: 2026-09-05T00:03:31.343160511Z, Duration: 00:00:00.314
      Create runtime type propagation graph: Begin: 2026-09-05T00:03:31.040671025Z, End: 2026-09-05T00:03:31.174721203Z, Duration: 00:00:00.134
      Run SCC (Tarjan) on 43680 nodes: Begin: 2026-09-05T00:03:31.175293603Z, End: 2026-09-05T00:03:31.230017586Z, Duration: 00:00:00.054
      Propagate runtime types to strongly connected components: Begin: 2026-09-05T00:03:31.240126126Z, End: 2026-09-05T00:03:31.343005477Z, Duration: 00:00:00.102
    Variable Type Analysis #2: Begin: 2026-09-05T00:03:31.345925552Z, End: 2026-09-05T00:03:31.591603963Z, Duration: 00:00:00.245
      Create runtime type propagation graph: Begin: 2026-09-05T00:03:31.345937269Z, End: 2026-09-05T00:03:31.460965550Z, Duration: 00:00:00.115
      Run SCC (Tarjan) on 43680 nodes: Begin: 2026-09-05T00:03:31.461114715Z, End: 2026-09-05T00:03:31.503604706Z, Duration: 00:00:00.042
      Propagate runtime types to strongly connected components: Begin: 2026-09-05T00:03:31.503723855Z, End: 2026-09-05T00:03:31.591516761Z, Duration: 00:00:00.087
  Load config: Begin: 2026-09-05T00:03:31.594448243Z, End: 2026-09-05T00:03:31.862938333Z, Duration: 00:00:00.268
  Compute entry points: Begin: 2026-09-05T00:03:31.863069680Z, End: 2026-09-05T00:03:32.000894797Z, Duration: 00:00:00.137
  Slice call graph: Begin: 2026-09-05T00:03:32.001122630Z, End: 2026-09-05T00:03:32.005292416Z, Duration: 00:00:00.004
  Live variable analysis: Begin: 2026-09-05T00:03:32.005389872Z, End: 2026-09-05T00:03:32.054989261Z, Duration: 00:00:00.049
  Taint analysis for go: Begin: 2026-09-05T00:03:32.055233600Z, End: 2026-09-05T00:03:32.363116541Z, Duration: 00:00:00.307
  Report issues: Begin: 2026-09-05T00:03:32.363184784Z, End: 2026-09-05T00:03:32.374202023Z, Duration: 00:00:00.011
  Store cache: Begin: 2026-09-05T00:03:32.374917320Z, End: 2026-09-05T00:03:32.377997084Z, Duration: 00:00:00.003
02:03:32.380 INFO  go security sensor peak memory (pre-GC, max allocation pressure): 783 MB
02:03:32.380 INFO  go security sensor peak memory (post-GC, max live footprint): 301 MB
02:03:32.381 INFO  Sensor GoSecuritySensor [security] (done) | time=2044ms
02:03:32.387 INFO  ------------- Run sensors on project
02:03:32.603 INFO  Sensor Deterministic Rule Engine for Go [dre]
02:03:32.664 INFO  Extracting bridge from /bridge/bridge-linux-x64.xz
02:03:33.062 INFO  Bridge extracted to /var/lib/gitbay-runner/work/build-798/.scannerwork/.sonartmp/bridge-dre/bridge
02:03:33.640 INFO  Sensor Deterministic Rule Engine for Go [dre] (done) | time=1036ms
02:03:33.641 INFO  Sensor Deterministic Rule Engine for Shell [dre]
02:03:33.648 INFO  Sensor Deterministic Rule Engine for Shell [dre] (done) | time=6ms
02:03:33.648 INFO  Sensor SQL Dialect Detection [dre]
02:03:33.649 INFO  Sensor SQL Dialect Detection [dre] (done) | time=1ms
02:03:33.650 INFO  Sensor DRE Project Telemetry [dre]
02:03:33.650 INFO  Sensor DRE Project Telemetry [dre] (done) | time=0ms
02:03:33.650 INFO  Sensor GoProjectSensor [go]
02:03:33.653 INFO  Sensor GoProjectSensor [go] (done) | time=2ms
02:03:33.653 INFO  Sensor Sonar Go A3S Context Collector [go]
02:03:33.653 INFO  Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
02:03:33.653 INFO  Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
02:03:33.653 INFO  Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
02:03:33.654 INFO  Sensor JavaScript/TypeScript/CSS analysis [javascript]
02:03:33.896 INFO  Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
02:03:33.896 INFO  Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node,  version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
02:03:33.907 INFO  Using embedded Node.js runtime.
02:03:33.908 INFO  Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
02:03:36.305 INFO  Memory configuration: OS (7945 MB), Node.js (2240 MB).
02:03:36.317 INFO  gRPC analyze-project server listening on 127.0.0.1:38271
02:03:36.501 INFO  Plugin version: [13.8.0.44569]
02:03:38.839 INFO  Found 0 tsconfig.json file(s): []
02:03:38.925 WARN  Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
02:03:38.971 WARN  Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
02:03:39.073 INFO  37 source files to be analyzed
02:03:39.073 INFO  37/37 source files have been analyzed
02:03:39.145 INFO  JasminAstConsumer done
02:03:39.145 INFO  Hit the cache for 0 out of 36
02:03:39.145 INFO  Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
02:03:39.145 INFO  Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5489ms
02:03:39.145 INFO  Sensor IaC Project Sensor [iac]
02:03:39.153 INFO  Sensor IaC Project Sensor [iac] (done) | time=5ms
02:03:39.153 INFO  Sensor Zero Coverage Sensor
02:03:39.202 INFO  Sensor Zero Coverage Sensor (done) | time=52ms
02:03:39.212 INFO  ------------- Gather SCA dependencies on project
02:03:39.407 INFO  Dependency analysis skipped
02:03:39.442 INFO  CPD Executor 3 files had no CPD blocks
02:03:39.443 INFO  CPD Executor Calculating CPD for 216 files
02:03:39.534 INFO  CPD Executor CPD calculation finished (done) | time=90ms
02:03:39.535 INFO  SCM Publisher SCM provider for this project is: git
02:03:39.537 INFO  SCM Publisher 393 source files to be analyzed
02:03:40.181 INFO  SCM Publisher 393/393 source files have been analyzed (done) | time=643ms
02:03:40.190 INFO  SCM revision ID '61564b7c32807deb349e28f2b5c6909cb4143870'
02:03:40.454 INFO  Analysis report generated in 247ms, dir size=3 MB
02:03:40.955 INFO  Analysis report compressed in 502ms, zip size=1 MB
02:03:44.432 INFO  Analysis report uploaded in 3475ms
02:03:44.435 INFO  ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
02:03:44.435 INFO  Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
02:03:44.435 INFO  More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBu4Nf7Ze2HR5N6gMXc
02:03:44.435 INFO  ------------- Upload SCA dependency files
02:03:44.982 INFO  Sensor cache published successfully
02:03:45.265 INFO  Analysis total time: 30.753 s
02:03:45.267 INFO  SonarScanner Engine completed successfully
02:03:45.618 INFO  EXECUTION SUCCESS
02:03:45.618 INFO  Total time: 40.159s