Build 756 success
sonar on main · 69433232c5 · queued 2026-09-05 18:22 UTC · finished 2026-09-05 18:23 UTC · ran 38s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (69433232c5)
step 1/1 set -eu
20:22:32.388 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
20:22:32.392 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-859/sonar-project.properties
20:22:32.411 INFO SonarScanner CLI 8.1.0.6389
20:22:32.417 INFO Linux 6.12.105+deb13-amd64 amd64
20:22:35.437 INFO Communicating with SonarQube Cloud
20:22:35.438 INFO JRE provisioning: os[linux], arch[x86_64]
20:22:36.185 INFO Starting SonarScanner Engine...
20:22:36.185 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
20:22:39.587 INFO Load global settings
20:22:40.059 INFO Load global settings (done) | time=467ms
20:22:40.139 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
20:22:40.302 INFO Loading required plugins
20:22:40.303 INFO Load plugins index
20:22:40.370 INFO Load plugins index (done) | time=68ms
20:22:40.371 INFO Load/download plugins
20:22:40.423 INFO Load/download plugins (done) | time=52ms
20:22:40.532 INFO Loaded core extensions: sca, a3s, architecture
20:22:41.042 INFO Process project properties
20:22:41.076 INFO Project key: krz_gitbay
20:22:41.076 INFO Base dir: /var/lib/gitbay-runner/work/build-859
20:22:41.076 INFO Working dir: /var/lib/gitbay-runner/work/build-859/.scannerwork
20:22:41.086 INFO Load project settings for component key: 'krz_gitbay'
20:22:41.391 INFO Load project settings for component key: 'krz_gitbay' (done) | time=305ms
20:22:41.411 INFO Check ALM binding of project 'krz_gitbay'
20:22:41.466 INFO Detected project binding: NOT_BOUND
20:22:41.466 INFO Check ALM binding of project 'krz_gitbay' (done) | time=55ms
20:22:41.471 INFO Load branch configuration
20:22:41.472 INFO Load branch configuration (done) | time=1ms
20:22:41.475 INFO Create analysis
20:22:41.710 INFO Create analysis (done) | time=234ms
20:22:41.849 INFO Load quality profiles
20:22:42.218 INFO Load quality profiles (done) | time=368ms
20:22:42.389 INFO Load active rules
20:22:42.798 INFO Load active rules (done) | time=409ms
20:22:42.936 INFO Organization key: krz
20:22:42.953 INFO Preprocessing files...
20:22:43.205 INFO 5 languages detected in 430 preprocessed files (done) | time=251ms
20:22:43.207 INFO 542 files ignored because of inclusion/exclusion patterns
20:22:43.207 INFO 3 directories skipped because of exclusion patterns (content not counted)
20:22:43.207 INFO 28 files ignored because of scm ignore settings
20:22:43.225 INFO Loading plugins for detected languages
20:22:43.226 INFO Load/download plugins
20:22:43.318 INFO Load/download plugins (done) | time=92ms
20:22:43.605 INFO Load project repositories
20:22:43.831 INFO Load project repositories (done) | time=227ms
20:22:43.857 INFO Indexing files...
20:22:43.858 INFO Project configuration:
20:22:43.858 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
20:22:43.858 INFO Included tests: **/*_test.go
20:22:43.913 INFO 430 files indexed (done) | time=53ms
20:22:43.913 INFO Quality profile for css: Sonar way essentials
20:22:43.913 INFO Quality profile for go: Sonar way essentials
20:22:43.914 INFO Quality profile for shell: Sonar way essentials
20:22:43.914 INFO Quality profile for web: Sonar way essentials
20:22:43.914 INFO Quality profile for yaml: Sonar way essentials
20:22:43.914 INFO ------------- Run sensors on module gitbay
20:22:43.979 INFO Load metrics repository
20:22:44.038 INFO Load metrics repository (done) | time=59ms
20:22:44.049 INFO Sensor cache enabled
20:22:44.049 INFO Load sensor cache
20:22:44.395 INFO Load sensor cache (1 MB) | time=344ms
20:22:44.803 INFO Reflections took 64 ms to scan 1 urls, producing 30 keys and 295 values
20:22:45.465 INFO Sensor IaC YAML File Type Classification Sensor [iac]
20:22:45.500 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=35ms
20:22:45.501 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
20:22:45.502 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
20:22:45.502 INFO Sensor HTML [web]
20:22:45.869 INFO Sensor HTML [web] (done) | time=368ms
20:22:45.870 INFO Sensor Code Quality and Security for Go [go]
20:22:45.936 INFO 27 folders (363 files) to be analyzed
20:22:54.842 INFO 27/27 folders (363 files) have been analyzed
20:22:54.842 INFO Sensor Code Quality and Security for Go [go] (done) | time=8972ms
20:22:54.842 INFO Sensor IaC CloudFormation Sensor [iac]
20:22:54.843 INFO There are no files to be analyzed for the CloudFormation language
20:22:54.843 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
20:22:54.843 INFO Sensor IaC cfn-lint report Sensor [iac]
20:22:54.844 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
20:22:54.844 INFO Sensor IaC Kustomization Sensor [iac]
20:22:54.845 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
20:22:54.845 INFO Sensor IaC hadolint report Sensor [iac]
20:22:54.845 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
20:22:54.845 INFO Sensor Java Config Sensor [iac]
20:22:54.846 INFO There are no files to be analyzed for the Java language
20:22:54.846 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
20:22:54.846 INFO Sensor IaC Docker Sensor [iac]
20:22:54.848 INFO There are no files to be analyzed for the Docker language
20:22:54.849 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
20:22:54.849 INFO Sensor IaC Ansible Sensor [iac]
20:22:54.849 INFO There are no files to be analyzed for the Ansible language
20:22:54.849 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
20:22:54.850 INFO Sensor IaC ansible-lint report Sensor [iac]
20:22:54.850 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
20:22:54.850 INFO Sensor IaC spectral report Sensor [iac]
20:22:54.851 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
20:22:54.851 INFO Sensor IaC GitHub Actions Sensor [iac]
20:22:54.852 INFO There are no files to be analyzed for the GitHub Actions language
20:22:54.852 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
20:22:54.853 INFO Sensor IaC actionlint report Sensor [iac]
20:22:54.853 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
20:22:54.853 INFO Sensor IaC Azure Pipelines Sensor [iac]
20:22:54.853 INFO There are no files to be analyzed for the Azure Pipelines language
20:22:54.854 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
20:22:54.854 INFO Sensor IaC Shell Sensor [iac]
20:22:54.864 INFO 4 source files to be analyzed
20:22:54.926 INFO 4/4 source files have been analyzed
20:22:54.927 INFO Sensor IaC Shell Sensor [iac] (done) | time=75ms
20:22:54.928 INFO Sensor IaC Kubernetes Sensor [iac]
20:22:54.982 INFO There are no files to be analyzed for the Kubernetes language
20:22:54.983 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=55ms
20:22:54.983 INFO Sensor IaC YAML Sensor [iac]
20:22:54.983 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
20:22:54.983 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
20:22:54.983 INFO Sensor Serverless configuration file sensor [security]
20:22:54.984 INFO 0 Serverless function entries were found in the project
20:22:54.985 INFO 0 Serverless function handlers were kept as entrypoints
20:22:54.986 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
20:22:54.986 INFO Sensor AWS SAM template file sensor [security]
20:22:54.991 INFO Sensor AWS SAM template file sensor [security] (done) | time=4ms
20:22:54.991 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
20:22:55.014 INFO Available processors: 4
20:22:55.014 INFO Using 4 threads for analysis.
20:22:55.293 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
20:22:55.343 INFO Start fetching files for the text and secrets analysis
20:22:55.347 INFO Using Git CLI to retrieve dirty files
20:22:55.373 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
20:22:55.374 INFO Starting the text and secrets analysis
20:22:55.375 INFO 420 source files to be analyzed for the text and secrets analysis
20:22:55.847 INFO 420/420 source files have been analyzed for the text and secrets analysis
20:22:55.850 INFO Start fetching files for the binary file analysis
20:22:55.852 INFO There are no files to be analyzed for the binary file analysis
20:22:55.858 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=866ms
20:22:55.858 INFO Sensor GoSecuritySensor [security]
20:22:55.863 INFO 9 taint analysis rules enabled.
20:22:56.715 INFO Analyzing 2154 UCFGs to detect vulnerabilities.
20:22:57.819 INFO All rules entry points : 30
20:22:57.820 INFO Retained UCFGs : 128
20:22:57.867 INFO 0 / 128 UCFGs simulated, memory usage: 308 MB
20:22:58.157 INFO 128 / 128 UCFGs simulated, memory usage: 350 MB
20:22:58.164 WARN Failed to find InputFile for __unknown_file, check exclusions.
20:22:58.171 WARN Failed to find InputFile for __unknown_file, check exclusions.
20:22:58.180 INFO go security sensor: Begin: 2026-09-05T18:22:55.861018731Z, End: 2026-09-05T18:22:58.177741434Z, Duration: 00:00:02.316
Resolve files to analyze: Begin: 2026-09-05T18:22:55.863871705Z, End: 2026-09-05T18:22:55.865890233Z, Duration: 00:00:00.002
Load type hierarchy and UCFGs: Begin: 2026-09-05T18:22:55.866366180Z, End: 2026-09-05T18:22:56.713656113Z, Duration: 00:00:00.847
Load type hierarchy: Begin: 2026-09-05T18:22:55.866389726Z, End: 2026-09-05T18:22:55.872081713Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-05T18:22:55.872136506Z, End: 2026-09-05T18:22:56.713557034Z, Duration: 00:00:00.841
Check cache: Begin: 2026-09-05T18:22:56.713907682Z, End: 2026-09-05T18:22:56.714803690Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-05T18:22:56.714498191Z, End: 2026-09-05T18:22:56.714542177Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-05T18:22:56.714840216Z, End: 2026-09-05T18:22:57.414380810Z, Duration: 00:00:00.699
Variable Type Analysis #1: Begin: 2026-09-05T18:22:56.715309732Z, End: 2026-09-05T18:22:57.083516068Z, Duration: 00:00:00.368
Create runtime type propagation graph: Begin: 2026-09-05T18:22:56.716056707Z, End: 2026-09-05T18:22:56.909683489Z, Duration: 00:00:00.193
Run SCC (Tarjan) on 44604 nodes: Begin: 2026-09-05T18:22:56.910584666Z, End: 2026-09-05T18:22:56.983042048Z, Duration: 00:00:00.072
Propagate runtime types to strongly connected components: Begin: 2026-09-05T18:22:56.983224983Z, End: 2026-09-05T18:22:57.083392223Z, Duration: 00:00:00.100
Variable Type Analysis #2: Begin: 2026-09-05T18:22:57.086103433Z, End: 2026-09-05T18:22:57.412021579Z, Duration: 00:00:00.325
Create runtime type propagation graph: Begin: 2026-09-05T18:22:57.086111385Z, End: 2026-09-05T18:22:57.274928659Z, Duration: 00:00:00.188
Run SCC (Tarjan) on 44604 nodes: Begin: 2026-09-05T18:22:57.275030823Z, End: 2026-09-05T18:22:57.340901239Z, Duration: 00:00:00.065
Propagate runtime types to strongly connected components: Begin: 2026-09-05T18:22:57.341064165Z, End: 2026-09-05T18:22:57.411907707Z, Duration: 00:00:00.070
Load config: Begin: 2026-09-05T18:22:57.414444746Z, End: 2026-09-05T18:22:57.659052625Z, Duration: 00:00:00.244
Compute entry points: Begin: 2026-09-05T18:22:57.659139136Z, End: 2026-09-05T18:22:57.818659772Z, Duration: 00:00:00.159
Slice call graph: Begin: 2026-09-05T18:22:57.818988707Z, End: 2026-09-05T18:22:57.823666949Z, Duration: 00:00:00.004
Live variable analysis: Begin: 2026-09-05T18:22:57.823762653Z, End: 2026-09-05T18:22:57.865384681Z, Duration: 00:00:00.041
Taint analysis for go: Begin: 2026-09-05T18:22:57.865611853Z, End: 2026-09-05T18:22:58.155584564Z, Duration: 00:00:00.289
Report issues: Begin: 2026-09-05T18:22:58.155643383Z, End: 2026-09-05T18:22:58.171821795Z, Duration: 00:00:00.016
Store cache: Begin: 2026-09-05T18:22:58.172567627Z, End: 2026-09-05T18:22:58.176980059Z, Duration: 00:00:00.004
20:22:58.180 INFO go security sensor peak memory (pre-GC, max allocation pressure): 575 MB
20:22:58.182 INFO go security sensor peak memory (post-GC, max live footprint): 286 MB
20:22:58.182 INFO Sensor GoSecuritySensor [security] (done) | time=2321ms
20:22:58.189 INFO ------------- Run sensors on project
20:22:58.445 INFO Sensor Deterministic Rule Engine for Go [dre]
20:22:58.484 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
20:22:58.925 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-859/.scannerwork/.sonartmp/bridge-dre/bridge
20:22:59.452 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=1007ms
20:22:59.453 INFO Sensor Deterministic Rule Engine for Shell [dre]
20:22:59.460 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=7ms
20:22:59.461 INFO Sensor SQL Dialect Detection [dre]
20:22:59.463 INFO Sensor SQL Dialect Detection [dre] (done) | time=3ms
20:22:59.464 INFO Sensor DRE Project Telemetry [dre]
20:22:59.464 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
20:22:59.464 INFO Sensor GoProjectSensor [go]
20:22:59.464 INFO Sensor GoProjectSensor [go] (done) | time=0ms
20:22:59.465 INFO Sensor Sonar Go A3S Context Collector [go]
20:22:59.465 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
20:22:59.465 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
20:22:59.465 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
20:22:59.465 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
20:22:59.726 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
20:22:59.727 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
20:22:59.747 INFO Using embedded Node.js runtime.
20:22:59.749 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
20:23:02.225 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
20:23:02.233 INFO gRPC analyze-project server listening on 127.0.0.1:43759
20:23:02.441 INFO Plugin version: [13.8.0.44569]
20:23:04.668 INFO Found 0 tsconfig.json file(s): []
20:23:04.728 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
20:23:04.815 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
20:23:04.933 INFO 37 source files to be analyzed
20:23:04.934 INFO 37/37 source files have been analyzed
20:23:05.004 INFO JasminAstConsumer done
20:23:05.005 INFO Hit the cache for 0 out of 36
20:23:05.017 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
20:23:05.017 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5548ms
20:23:05.017 INFO Sensor IaC Project Sensor [iac]
20:23:05.018 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
20:23:05.018 INFO Sensor Zero Coverage Sensor
20:23:05.068 INFO Sensor Zero Coverage Sensor (done) | time=52ms
20:23:05.079 INFO ------------- Gather SCA dependencies on project
20:23:05.281 INFO Dependency analysis skipped
20:23:05.310 INFO CPD Executor 3 files had no CPD blocks
20:23:05.311 INFO CPD Executor Calculating CPD for 218 files
20:23:05.381 INFO CPD Executor CPD calculation finished (done) | time=69ms
20:23:05.384 INFO SCM Publisher SCM provider for this project is: git
20:23:05.386 INFO SCM Publisher 404 source files to be analyzed
20:23:06.194 INFO SCM Publisher 404/404 source files have been analyzed (done) | time=807ms
20:23:06.200 INFO SCM revision ID '69433232c5aae80adb658861d358b08c0418f002'
20:23:06.444 INFO Analysis report generated in 230ms, dir size=3 MB
20:23:06.991 INFO Analysis report compressed in 548ms, zip size=1 MB
20:23:07.590 INFO Analysis report uploaded in 598ms
20:23:07.592 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
20:23:07.592 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
20:23:07.592 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaByz1zbysLIlhLifwI9
20:23:07.592 INFO ------------- Upload SCA dependency files
20:23:08.164 INFO Sensor cache published successfully
20:23:08.516 INFO Analysis total time: 27.982 s
20:23:08.520 INFO SonarScanner Engine completed successfully
20:23:08.910 INFO EXECUTION SUCCESS
20:23:08.912 INFO Total time: 36.526s