Build 700 success
sonar on toolpath-smart · 319867a8f1 · queued 2026-09-05 00:43 UTC · finished 2026-09-05 00:44 UTC · ran 36s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (319867a8f1)
step 1/1 set -eu
02:43:26.173 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
02:43:26.177 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-802/sonar-project.properties
02:43:26.190 INFO SonarScanner CLI 8.1.0.6389
02:43:26.195 INFO Linux 6.12.105+deb13-amd64 amd64
02:43:29.202 INFO Communicating with SonarQube Cloud
02:43:29.203 INFO JRE provisioning: os[linux], arch[x86_64]
02:43:29.943 INFO Starting SonarScanner Engine...
02:43:29.943 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
02:43:33.175 INFO Load global settings
02:43:33.654 INFO Load global settings (done) | time=473ms
02:43:33.724 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
02:43:33.897 INFO Loading required plugins
02:43:33.897 INFO Load plugins index
02:43:33.954 INFO Load plugins index (done) | time=56ms
02:43:33.955 INFO Load/download plugins
02:43:34.011 INFO Load/download plugins (done) | time=56ms
02:43:34.118 INFO Loaded core extensions: architecture, sca, a3s
02:43:34.604 INFO Process project properties
02:43:34.635 INFO Project key: krz_gitbay
02:43:34.635 INFO Base dir: /var/lib/gitbay-runner/work/build-802
02:43:34.636 INFO Working dir: /var/lib/gitbay-runner/work/build-802/.scannerwork
02:43:34.642 INFO Load project settings for component key: 'krz_gitbay'
02:43:34.892 INFO Load project settings for component key: 'krz_gitbay' (done) | time=250ms
02:43:34.910 INFO Check ALM binding of project 'krz_gitbay'
02:43:35.024 INFO Detected project binding: NOT_BOUND
02:43:35.027 INFO Check ALM binding of project 'krz_gitbay' (done) | time=114ms
02:43:35.028 INFO Load branch configuration
02:43:35.029 INFO Load branch configuration (done) | time=1ms
02:43:35.032 INFO Create analysis
02:43:35.270 INFO Create analysis (done) | time=238ms
02:43:35.424 INFO Load quality profiles
02:43:35.699 INFO Load quality profiles (done) | time=275ms
02:43:35.822 INFO Load active rules
02:43:36.260 INFO Load active rules (done) | time=438ms
02:43:36.381 INFO Organization key: krz
02:43:36.399 INFO Preprocessing files...
02:43:36.654 INFO 5 languages detected in 406 preprocessed files (done) | time=255ms
02:43:36.654 INFO 516 files ignored because of inclusion/exclusion patterns
02:43:36.656 INFO 3 directories skipped because of exclusion patterns (content not counted)
02:43:36.656 INFO 28 files ignored because of scm ignore settings
02:43:36.668 INFO Loading plugins for detected languages
02:43:36.670 INFO Load/download plugins
02:43:36.718 INFO Load/download plugins (done) | time=50ms
02:43:36.913 INFO Load project repositories
02:43:37.117 INFO Load project repositories (done) | time=203ms
02:43:37.135 INFO Indexing files...
02:43:37.136 INFO Project configuration:
02:43:37.136 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
02:43:37.137 INFO Included tests: **/*_test.go
02:43:37.170 INFO 406 files indexed (done) | time=32ms
02:43:37.170 INFO Quality profile for css: Sonar way essentials
02:43:37.170 INFO Quality profile for go: Sonar way essentials
02:43:37.177 INFO Quality profile for shell: Sonar way essentials
02:43:37.177 INFO Quality profile for web: Sonar way essentials
02:43:37.177 INFO Quality profile for yaml: Sonar way essentials
02:43:37.177 INFO ------------- Run sensors on module gitbay
02:43:37.223 INFO Load metrics repository
02:43:37.279 INFO Load metrics repository (done) | time=54ms
02:43:37.284 INFO Sensor cache enabled
02:43:37.300 INFO Load sensor cache
02:43:37.629 INFO Load sensor cache (1 MB) | time=340ms
02:43:38.063 INFO Reflections took 56 ms to scan 1 urls, producing 30 keys and 295 values
02:43:38.762 INFO Sensor IaC YAML File Type Classification Sensor [iac]
02:43:38.791 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=27ms
02:43:38.791 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
02:43:38.791 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
02:43:38.791 INFO Sensor HTML [web]
02:43:39.180 INFO Sensor HTML [web] (done) | time=389ms
02:43:39.182 INFO Sensor Code Quality and Security for Go [go]
02:43:39.239 INFO 27 folders (352 files) to be analyzed
02:43:47.817 INFO 27/27 folders (352 files) have been analyzed
02:43:47.817 INFO Sensor Code Quality and Security for Go [go] (done) | time=8636ms
02:43:47.818 INFO Sensor IaC CloudFormation Sensor [iac]
02:43:47.818 INFO There are no files to be analyzed for the CloudFormation language
02:43:47.818 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
02:43:47.819 INFO Sensor IaC cfn-lint report Sensor [iac]
02:43:47.819 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
02:43:47.819 INFO Sensor IaC Kustomization Sensor [iac]
02:43:47.820 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
02:43:47.820 INFO Sensor IaC hadolint report Sensor [iac]
02:43:47.820 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
02:43:47.820 INFO Sensor Java Config Sensor [iac]
02:43:47.821 INFO There are no files to be analyzed for the Java language
02:43:47.821 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
02:43:47.821 INFO Sensor IaC Docker Sensor [iac]
02:43:47.823 INFO There are no files to be analyzed for the Docker language
02:43:47.823 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
02:43:47.823 INFO Sensor IaC Ansible Sensor [iac]
02:43:47.824 INFO There are no files to be analyzed for the Ansible language
02:43:47.824 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
02:43:47.824 INFO Sensor IaC ansible-lint report Sensor [iac]
02:43:47.824 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
02:43:47.824 INFO Sensor IaC spectral report Sensor [iac]
02:43:47.824 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
02:43:47.825 INFO Sensor IaC GitHub Actions Sensor [iac]
02:43:47.825 INFO There are no files to be analyzed for the GitHub Actions language
02:43:47.825 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
02:43:47.825 INFO Sensor IaC actionlint report Sensor [iac]
02:43:47.825 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
02:43:47.826 INFO Sensor IaC Azure Pipelines Sensor [iac]
02:43:47.826 INFO There are no files to be analyzed for the Azure Pipelines language
02:43:47.826 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
02:43:47.826 INFO Sensor IaC Shell Sensor [iac]
02:43:47.839 INFO 4 source files to be analyzed
02:43:47.905 INFO 4/4 source files have been analyzed
02:43:47.906 INFO Sensor IaC Shell Sensor [iac] (done) | time=78ms
02:43:47.906 INFO Sensor IaC Kubernetes Sensor [iac]
02:43:47.964 INFO There are no files to be analyzed for the Kubernetes language
02:43:47.965 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=59ms
02:43:47.966 INFO Sensor IaC YAML Sensor [iac]
02:43:47.966 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
02:43:47.966 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
02:43:47.967 INFO Sensor Serverless configuration file sensor [security]
02:43:47.968 INFO 0 Serverless function entries were found in the project
02:43:47.968 INFO 0 Serverless function handlers were kept as entrypoints
02:43:47.968 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
02:43:47.968 INFO Sensor AWS SAM template file sensor [security]
02:43:47.978 INFO Sensor AWS SAM template file sensor [security] (done) | time=10ms
02:43:47.980 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
02:43:47.999 INFO Available processors: 4
02:43:47.999 INFO Using 4 threads for analysis.
02:43:48.305 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
02:43:48.370 INFO Start fetching files for the text and secrets analysis
02:43:48.385 INFO Using Git CLI to retrieve dirty files
02:43:48.411 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
02:43:48.412 INFO Starting the text and secrets analysis
02:43:48.412 INFO 398 source files to be analyzed for the text and secrets analysis
02:43:48.869 INFO 398/398 source files have been analyzed for the text and secrets analysis
02:43:48.869 INFO Start fetching files for the binary file analysis
02:43:48.869 INFO There are no files to be analyzed for the binary file analysis
02:43:48.871 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=891ms
02:43:48.872 INFO Sensor GoSecuritySensor [security]
02:43:48.876 INFO 9 taint analysis rules enabled.
02:43:49.643 INFO Analyzing 2113 UCFGs to detect vulnerabilities.
02:43:50.690 INFO All rules entry points : 29
02:43:50.691 INFO Retained UCFGs : 123
02:43:50.729 INFO 0 / 123 UCFGs simulated, memory usage: 373 MB
02:43:50.996 INFO 123 / 123 UCFGs simulated, memory usage: 414 MB
02:43:51.005 WARN Failed to find InputFile for __unknown_file, check exclusions.
02:43:51.011 WARN Failed to find InputFile for __unknown_file, check exclusions.
02:43:51.018 INFO go security sensor: Begin: 2026-09-05T00:43:48.874205241Z, End: 2026-09-05T00:43:51.016924831Z, Duration: 00:00:02.142
Resolve files to analyze: Begin: 2026-09-05T00:43:48.876798955Z, End: 2026-09-05T00:43:48.877874894Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-05T00:43:48.878147414Z, End: 2026-09-05T00:43:49.640988733Z, Duration: 00:00:00.762
Load type hierarchy: Begin: 2026-09-05T00:43:48.878153452Z, End: 2026-09-05T00:43:48.882865713Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-05T00:43:48.882919966Z, End: 2026-09-05T00:43:49.640863325Z, Duration: 00:00:00.757
Check cache: Begin: 2026-09-05T00:43:49.641222174Z, End: 2026-09-05T00:43:49.642268689Z, Duration: 00:00:00.001
Load cache: Begin: 2026-09-05T00:43:49.641805913Z, End: 2026-09-05T00:43:49.641831702Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-05T00:43:49.642315560Z, End: 2026-09-05T00:43:50.224452311Z, Duration: 00:00:00.582
Variable Type Analysis #1: Begin: 2026-09-05T00:43:49.642882343Z, End: 2026-09-05T00:43:49.960840863Z, Duration: 00:00:00.317
Create runtime type propagation graph: Begin: 2026-09-05T00:43:49.643700805Z, End: 2026-09-05T00:43:49.804411997Z, Duration: 00:00:00.160
Run SCC (Tarjan) on 43684 nodes: Begin: 2026-09-05T00:43:49.804881712Z, End: 2026-09-05T00:43:49.875404857Z, Duration: 00:00:00.070
Propagate runtime types to strongly connected components: Begin: 2026-09-05T00:43:49.875568423Z, End: 2026-09-05T00:43:49.960645219Z, Duration: 00:00:00.085
Variable Type Analysis #2: Begin: 2026-09-05T00:43:49.963223208Z, End: 2026-09-05T00:43:50.222364009Z, Duration: 00:00:00.259
Create runtime type propagation graph: Begin: 2026-09-05T00:43:49.963232622Z, End: 2026-09-05T00:43:50.106204289Z, Duration: 00:00:00.142
Run SCC (Tarjan) on 43684 nodes: Begin: 2026-09-05T00:43:50.106307986Z, End: 2026-09-05T00:43:50.162862850Z, Duration: 00:00:00.056
Propagate runtime types to strongly connected components: Begin: 2026-09-05T00:43:50.162972486Z, End: 2026-09-05T00:43:50.222249607Z, Duration: 00:00:00.059
Load config: Begin: 2026-09-05T00:43:50.224496388Z, End: 2026-09-05T00:43:50.556708067Z, Duration: 00:00:00.332
Compute entry points: Begin: 2026-09-05T00:43:50.556864402Z, End: 2026-09-05T00:43:50.690161831Z, Duration: 00:00:00.133
Slice call graph: Begin: 2026-09-05T00:43:50.691095106Z, End: 2026-09-05T00:43:50.694808343Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-05T00:43:50.694882044Z, End: 2026-09-05T00:43:50.723894133Z, Duration: 00:00:00.029
Taint analysis for go: Begin: 2026-09-05T00:43:50.724115926Z, End: 2026-09-05T00:43:50.996091280Z, Duration: 00:00:00.271
Report issues: Begin: 2026-09-05T00:43:50.996151321Z, End: 2026-09-05T00:43:51.011827650Z, Duration: 00:00:00.015
Store cache: Begin: 2026-09-05T00:43:51.012736938Z, End: 2026-09-05T00:43:51.016129535Z, Duration: 00:00:00.003
02:43:51.018 INFO go security sensor peak memory (pre-GC, max allocation pressure): 913 MB
02:43:51.020 INFO go security sensor peak memory (post-GC, max live footprint): 312 MB
02:43:51.020 INFO Sensor GoSecuritySensor [security] (done) | time=2146ms
02:43:51.039 INFO ------------- Run sensors on project
02:43:51.253 INFO Sensor Deterministic Rule Engine for Go [dre]
02:43:51.290 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
02:43:51.636 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-802/.scannerwork/.sonartmp/bridge-dre/bridge
02:43:52.074 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=822ms
02:43:52.075 INFO Sensor Deterministic Rule Engine for Shell [dre]
02:43:52.081 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=6ms
02:43:52.082 INFO Sensor SQL Dialect Detection [dre]
02:43:52.083 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
02:43:52.083 INFO Sensor DRE Project Telemetry [dre]
02:43:52.083 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
02:43:52.084 INFO Sensor GoProjectSensor [go]
02:43:52.084 INFO Sensor GoProjectSensor [go] (done) | time=0ms
02:43:52.085 INFO Sensor Sonar Go A3S Context Collector [go]
02:43:52.085 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
02:43:52.085 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
02:43:52.086 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
02:43:52.087 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
02:43:52.326 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
02:43:52.327 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
02:43:52.342 INFO Using embedded Node.js runtime.
02:43:52.342 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
02:43:54.761 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
02:43:54.769 INFO gRPC analyze-project server listening on 127.0.0.1:35947
02:43:54.935 INFO Plugin version: [13.8.0.44569]
02:43:57.014 INFO Found 0 tsconfig.json file(s): []
02:43:57.098 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
02:43:57.102 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
02:43:57.261 INFO 37 source files to be analyzed
02:43:57.262 INFO 37/37 source files have been analyzed
02:43:57.341 INFO JasminAstConsumer done
02:43:57.345 INFO Hit the cache for 0 out of 36
02:43:57.345 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
02:43:57.345 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5258ms
02:43:57.349 INFO Sensor IaC Project Sensor [iac]
02:43:57.349 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
02:43:57.350 INFO Sensor Zero Coverage Sensor
02:43:57.385 INFO Sensor Zero Coverage Sensor (done) | time=34ms
02:43:57.397 INFO ------------- Gather SCA dependencies on project
02:43:57.534 INFO Dependency analysis skipped
02:43:57.564 INFO CPD Executor 3 files had no CPD blocks
02:43:57.565 INFO CPD Executor Calculating CPD for 216 files
02:43:57.628 INFO CPD Executor CPD calculation finished (done) | time=64ms
02:43:57.631 INFO SCM Publisher SCM provider for this project is: git
02:43:57.631 INFO SCM Publisher 393 source files to be analyzed
02:43:58.343 INFO SCM Publisher 393/393 source files have been analyzed (done) | time=710ms
02:43:58.353 INFO SCM revision ID '319867a8f117750eab2ae70960433365e17c09cd'
02:43:58.549 INFO Analysis report generated in 182ms, dir size=3 MB
02:43:59.025 INFO Analysis report compressed in 475ms, zip size=1 MB
02:43:59.576 INFO Analysis report uploaded in 551ms
02:43:59.577 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
02:43:59.578 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
02:43:59.578 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBvBbKSZi_iUeoHXNak
02:43:59.578 INFO ------------- Upload SCA dependency files
02:44:00.285 INFO Sensor cache published successfully
02:44:00.582 INFO Analysis total time: 26.463 s
02:44:00.586 INFO SonarScanner Engine completed successfully
02:44:00.943 INFO EXECUTION SUCCESS
02:44:00.945 INFO Total time: 34.774s