Build 720 success
sonar on ci-path-filters · e0b9ff1afa · queued 2026-09-05 05:01 UTC · finished 2026-09-05 05:02 UTC · ran 40s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (e0b9ff1afa)
step 1/1 set -eu
07:01:34.513 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
07:01:34.516 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-822/sonar-project.properties
07:01:34.537 INFO SonarScanner CLI 8.1.0.6389
07:01:34.541 INFO Linux 6.12.105+deb13-amd64 amd64
07:01:37.489 INFO Communicating with SonarQube Cloud
07:01:37.490 INFO JRE provisioning: os[linux], arch[x86_64]
07:01:38.370 INFO Starting SonarScanner Engine...
07:01:38.370 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
07:01:41.694 INFO Load global settings
07:01:42.752 INFO Load global settings (done) | time=1049ms
07:01:42.818 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
07:01:42.974 INFO Loading required plugins
07:01:42.974 INFO Load plugins index
07:01:43.251 INFO Load plugins index (done) | time=276ms
07:01:43.253 INFO Load/download plugins
07:01:43.321 INFO Load/download plugins (done) | time=64ms
07:01:43.642 INFO Loaded core extensions: sca, a3s, architecture
07:01:44.097 INFO Process project properties
07:01:44.123 INFO Project key: krz_gitbay
07:01:44.124 INFO Base dir: /var/lib/gitbay-runner/work/build-822
07:01:44.125 INFO Working dir: /var/lib/gitbay-runner/work/build-822/.scannerwork
07:01:44.133 INFO Load project settings for component key: 'krz_gitbay'
07:01:44.630 INFO Load project settings for component key: 'krz_gitbay' (done) | time=496ms
07:01:44.654 INFO Check ALM binding of project 'krz_gitbay'
07:01:45.012 INFO Detected project binding: NOT_BOUND
07:01:45.012 INFO Check ALM binding of project 'krz_gitbay' (done) | time=357ms
07:01:45.017 INFO Load branch configuration
07:01:45.018 INFO Load branch configuration (done) | time=1ms
07:01:45.022 INFO Create analysis
07:01:45.385 INFO Branch name: ci-path-filters, type: short
07:01:45.385 INFO Create analysis (done) | time=362ms
07:01:45.537 INFO Load quality profiles
07:01:46.103 INFO Load quality profiles (done) | time=566ms
07:01:46.222 INFO Load active rules
07:01:46.655 INFO Load active rules (done) | time=432ms
07:01:46.995 INFO Organization key: krz
07:01:47.016 INFO Preprocessing files...
07:01:47.248 INFO 5 languages detected in 416 preprocessed files (done) | time=232ms
07:01:47.248 INFO 528 files ignored because of inclusion/exclusion patterns
07:01:47.248 INFO 3 directories skipped because of exclusion patterns (content not counted)
07:01:47.248 INFO 28 files ignored because of scm ignore settings
07:01:47.260 INFO Loading plugins for detected languages
07:01:47.261 INFO Load/download plugins
07:01:47.352 INFO Load/download plugins (done) | time=92ms
07:01:47.589 INFO Load project repositories
07:01:48.053 INFO Load project repositories (done) | time=463ms
07:01:48.055 INFO SCM collecting changed files in the branch
07:01:48.064 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
07:01:48.064 INFO SCM collecting changed files in the branch (done) | time=9ms
07:01:48.082 INFO Indexing files...
07:01:48.083 INFO Project configuration:
07:01:48.083 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
07:01:48.083 INFO Included tests: **/*_test.go
07:01:48.116 INFO 416 files indexed (done) | time=35ms
07:01:48.118 INFO Quality profile for css: Sonar way essentials
07:01:48.118 INFO Quality profile for go: Sonar way essentials
07:01:48.118 INFO Quality profile for shell: Sonar way essentials
07:01:48.118 INFO Quality profile for web: Sonar way essentials
07:01:48.118 INFO Quality profile for yaml: Sonar way essentials
07:01:48.118 INFO ------------- Run sensors on module gitbay
07:01:48.195 INFO Load metrics repository
07:01:48.468 INFO Load metrics repository (done) | time=272ms
07:01:48.476 INFO Sensor cache enabled
07:01:48.480 INFO Load sensor cache
07:01:48.877 INFO Load sensor cache (1 MB) | time=396ms
07:01:49.310 INFO Reflections took 78 ms to scan 1 urls, producing 30 keys and 295 values
07:01:49.980 INFO Sensor IaC YAML File Type Classification Sensor [iac]
07:01:50.009 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=28ms
07:01:50.012 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
07:01:50.013 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
07:01:50.013 INFO Sensor HTML [web]
07:01:50.468 INFO Sensor HTML [web] (done) | time=457ms
07:01:50.468 INFO Sensor Code Quality and Security for Go [go]
07:01:50.523 INFO 27 folders (360 files) to be analyzed
07:01:58.723 INFO 27/27 folders (360 files) have been analyzed
07:01:58.724 INFO Sensor Code Quality and Security for Go [go] (done) | time=8253ms
07:01:58.724 INFO Sensor IaC CloudFormation Sensor [iac]
07:01:58.724 INFO There are no files to be analyzed for the CloudFormation language
07:01:58.724 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=1ms
07:01:58.724 INFO Sensor IaC cfn-lint report Sensor [iac]
07:01:58.725 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
07:01:58.726 INFO Sensor IaC Kustomization Sensor [iac]
07:01:58.726 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
07:01:58.727 INFO Sensor IaC hadolint report Sensor [iac]
07:01:58.727 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
07:01:58.727 INFO Sensor Java Config Sensor [iac]
07:01:58.728 INFO There are no files to be analyzed for the Java language
07:01:58.729 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
07:01:58.729 INFO Sensor IaC Docker Sensor [iac]
07:01:58.729 INFO There are no files to be analyzed for the Docker language
07:01:58.729 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
07:01:58.730 INFO Sensor IaC Ansible Sensor [iac]
07:01:58.730 INFO There are no files to be analyzed for the Ansible language
07:01:58.730 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
07:01:58.730 INFO Sensor IaC ansible-lint report Sensor [iac]
07:01:58.730 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
07:01:58.731 INFO Sensor IaC spectral report Sensor [iac]
07:01:58.731 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
07:01:58.731 INFO Sensor IaC GitHub Actions Sensor [iac]
07:01:58.732 INFO There are no files to be analyzed for the GitHub Actions language
07:01:58.732 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
07:01:58.732 INFO Sensor IaC actionlint report Sensor [iac]
07:01:58.732 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
07:01:58.732 INFO Sensor IaC Azure Pipelines Sensor [iac]
07:01:58.732 INFO There are no files to be analyzed for the Azure Pipelines language
07:01:58.732 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
07:01:58.733 INFO Sensor IaC Shell Sensor [iac]
07:01:58.745 INFO 4 source files to be analyzed
07:01:58.812 INFO 4/4 source files have been analyzed
07:01:58.813 INFO Sensor IaC Shell Sensor [iac] (done) | time=80ms
07:01:58.813 INFO Sensor IaC Kubernetes Sensor [iac]
07:01:58.869 INFO There are no files to be analyzed for the Kubernetes language
07:01:58.869 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=55ms
07:01:58.871 INFO Sensor IaC YAML Sensor [iac]
07:01:58.871 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
07:01:58.871 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
07:01:58.872 INFO Sensor Serverless configuration file sensor [security]
07:01:58.872 INFO 0 Serverless function entries were found in the project
07:01:58.873 INFO 0 Serverless function handlers were kept as entrypoints
07:01:58.873 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
07:01:58.874 INFO Sensor AWS SAM template file sensor [security]
07:01:58.878 INFO Sensor AWS SAM template file sensor [security] (done) | time=5ms
07:01:58.878 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
07:01:58.901 INFO Available processors: 4
07:01:58.901 INFO Using 4 threads for analysis.
07:01:59.222 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
07:01:59.287 INFO Start fetching files for the text and secrets analysis
07:01:59.298 INFO Using Git CLI to retrieve dirty files
07:01:59.321 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
07:01:59.321 INFO Starting the text and secrets analysis
07:01:59.323 INFO 406 source files to be analyzed for the text and secrets analysis
07:01:59.753 INFO 406/406 source files have been analyzed for the text and secrets analysis
07:01:59.755 INFO Start fetching files for the binary file analysis
07:01:59.761 INFO There are no files to be analyzed for the binary file analysis
07:01:59.762 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=879ms
07:01:59.763 INFO Sensor GoSecuritySensor [security]
07:01:59.764 INFO 9 taint analysis rules enabled.
07:02:00.544 INFO Analyzing 2138 UCFGs to detect vulnerabilities.
07:02:01.772 INFO All rules entry points : 30
07:02:01.776 INFO Retained UCFGs : 126
07:02:01.818 INFO 0 / 126 UCFGs simulated, memory usage: 379 MB
07:02:02.090 INFO 126 / 126 UCFGs simulated, memory usage: 420 MB
07:02:02.096 WARN Failed to find InputFile for __unknown_file, check exclusions.
07:02:02.101 WARN Failed to find InputFile for __unknown_file, check exclusions.
07:02:02.107 INFO go security sensor: Begin: 2026-09-05T05:01:59.761029189Z, End: 2026-09-05T05:02:02.105470324Z, Duration: 00:00:02.344
Resolve files to analyze: Begin: 2026-09-05T05:01:59.764692502Z, End: 2026-09-05T05:01:59.766111894Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-05T05:01:59.766443764Z, End: 2026-09-05T05:02:00.543654135Z, Duration: 00:00:00.777
Load type hierarchy: Begin: 2026-09-05T05:01:59.766449813Z, End: 2026-09-05T05:01:59.772387628Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-05T05:01:59.772468249Z, End: 2026-09-05T05:02:00.543575848Z, Duration: 00:00:00.771
Check cache: Begin: 2026-09-05T05:02:00.543782368Z, End: 2026-09-05T05:02:00.544553833Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-05T05:02:00.544258067Z, End: 2026-09-05T05:02:00.544284045Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-05T05:02:00.544586972Z, End: 2026-09-05T05:02:01.295933066Z, Duration: 00:00:00.751
Variable Type Analysis #1: Begin: 2026-09-05T05:02:00.545207649Z, End: 2026-09-05T05:02:00.939066948Z, Duration: 00:00:00.393
Create runtime type propagation graph: Begin: 2026-09-05T05:02:00.546199194Z, End: 2026-09-05T05:02:00.735654341Z, Duration: 00:00:00.189
Run SCC (Tarjan) on 44328 nodes: Begin: 2026-09-05T05:02:00.736070809Z, End: 2026-09-05T05:02:00.813919993Z, Duration: 00:00:00.077
Propagate runtime types to strongly connected components: Begin: 2026-09-05T05:02:00.814076108Z, End: 2026-09-05T05:02:00.938921408Z, Duration: 00:00:00.124
Variable Type Analysis #2: Begin: 2026-09-05T05:02:00.942301435Z, End: 2026-09-05T05:02:01.273737172Z, Duration: 00:00:00.331
Create runtime type propagation graph: Begin: 2026-09-05T05:02:00.942316979Z, End: 2026-09-05T05:02:01.167268898Z, Duration: 00:00:00.224
Run SCC (Tarjan) on 44328 nodes: Begin: 2026-09-05T05:02:01.167585686Z, End: 2026-09-05T05:02:01.205197608Z, Duration: 00:00:00.037
Propagate runtime types to strongly connected components: Begin: 2026-09-05T05:02:01.205331330Z, End: 2026-09-05T05:02:01.273603411Z, Duration: 00:00:00.068
Load config: Begin: 2026-09-05T05:02:01.296272848Z, End: 2026-09-05T05:02:01.587790966Z, Duration: 00:00:00.291
Compute entry points: Begin: 2026-09-05T05:02:01.587939008Z, End: 2026-09-05T05:02:01.772151238Z, Duration: 00:00:00.184
Slice call graph: Begin: 2026-09-05T05:02:01.772434845Z, End: 2026-09-05T05:02:01.774953324Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-05T05:02:01.775102699Z, End: 2026-09-05T05:02:01.815457247Z, Duration: 00:00:00.040
Taint analysis for go: Begin: 2026-09-05T05:02:01.815736329Z, End: 2026-09-05T05:02:02.089955736Z, Duration: 00:00:00.274
Report issues: Begin: 2026-09-05T05:02:02.090020163Z, End: 2026-09-05T05:02:02.099825070Z, Duration: 00:00:00.009
Store cache: Begin: 2026-09-05T05:02:02.100416882Z, End: 2026-09-05T05:02:02.104453209Z, Duration: 00:00:00.004
07:02:02.108 INFO go security sensor peak memory (pre-GC, max allocation pressure): 728 MB
07:02:02.108 INFO go security sensor peak memory (post-GC, max live footprint): 297 MB
07:02:02.110 INFO Sensor GoSecuritySensor [security] (done) | time=2348ms
07:02:02.116 INFO ------------- Run sensors on project
07:02:02.356 INFO Sensor Deterministic Rule Engine for Go [dre]
07:02:02.398 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
07:02:02.723 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-822/.scannerwork/.sonartmp/bridge-dre/bridge
07:02:03.240 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=883ms
07:02:03.241 INFO Sensor Deterministic Rule Engine for Shell [dre]
07:02:03.246 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=6ms
07:02:03.247 INFO Sensor SQL Dialect Detection [dre]
07:02:03.248 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
07:02:03.249 INFO Sensor DRE Project Telemetry [dre]
07:02:03.250 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
07:02:03.250 INFO Sensor GoProjectSensor [go]
07:02:03.251 INFO Sensor GoProjectSensor [go] (done) | time=1ms
07:02:03.251 INFO Sensor Sonar Go A3S Context Collector [go]
07:02:03.251 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
07:02:03.251 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
07:02:03.251 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
07:02:03.252 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
07:02:03.505 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
07:02:03.506 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
07:02:03.516 INFO Using embedded Node.js runtime.
07:02:03.516 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
07:02:06.115 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
07:02:06.126 INFO gRPC analyze-project server listening on 127.0.0.1:35647
07:02:06.336 INFO Plugin version: [13.8.0.44569]
07:02:08.622 INFO Found 0 tsconfig.json file(s): []
07:02:08.840 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
07:02:08.844 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
07:02:08.889 INFO 37 source files to be analyzed
07:02:08.889 INFO 37/37 source files have been analyzed
07:02:08.943 INFO JasminAstConsumer done
07:02:08.944 INFO Hit the cache for 0 out of 36
07:02:08.953 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
07:02:08.954 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5698ms
07:02:08.954 INFO Sensor IaC Project Sensor [iac]
07:02:08.955 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
07:02:08.956 INFO Sensor Zero Coverage Sensor
07:02:09.033 INFO Sensor Zero Coverage Sensor (done) | time=79ms
07:02:09.043 INFO ------------- Gather SCA dependencies on project
07:02:09.313 INFO Dependency analysis skipped
07:02:09.340 INFO CPD Executor 3 files had no CPD blocks
07:02:09.341 INFO CPD Executor Calculating CPD for 218 files
07:02:09.425 INFO CPD Executor CPD calculation finished (done) | time=83ms
07:02:09.429 INFO SCM Publisher SCM provider for this project is: git
07:02:09.432 INFO SCM Publisher 17 source files to be analyzed
07:02:09.797 INFO SCM Publisher 17/17 source files have been analyzed (done) | time=361ms
07:02:09.803 INFO SCM revision ID 'e0b9ff1afa876e443557111435101a3394175bdf'
07:02:09.860 INFO SCM writing changed lines
07:02:09.863 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
07:02:09.863 INFO SCM writing changed lines (done) | time=3ms
07:02:09.952 INFO Analysis report generated in 146ms, dir size=795 KB
07:02:10.183 INFO Analysis report compressed in 231ms, zip size=385 KB
07:02:11.517 INFO Analysis report uploaded in 1335ms
07:02:11.519 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=ci-path-filters&resolved=false
07:02:11.519 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
07:02:11.519 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBv8hVvZe2HR5N6gRZF
07:02:11.519 INFO ------------- Upload SCA dependency files
07:02:12.122 INFO Sensor cache published successfully
07:02:12.446 INFO Analysis total time: 28.803 s
07:02:12.470 INFO SonarScanner Engine completed successfully
07:02:12.826 INFO EXECUTION SUCCESS
07:02:12.827 INFO Total time: 38.316s