Build 781 success
sonar on build-orphan-sha · ee8acf9bc4 · queued 2026-09-05 20:48 UTC · finished 2026-09-05 20:49 UTC · ran 37s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (ee8acf9bc4)
step 1/1 set -eu
22:48:41.599 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
22:48:41.602 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-884/sonar-project.properties
22:48:41.616 INFO SonarScanner CLI 8.1.0.6389
22:48:41.622 INFO Linux 6.12.105+deb13-amd64 amd64
22:48:44.608 INFO Communicating with SonarQube Cloud
22:48:44.609 INFO JRE provisioning: os[linux], arch[x86_64]
22:48:45.491 INFO Starting SonarScanner Engine...
22:48:45.491 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
22:48:48.915 INFO Load global settings
22:48:49.455 INFO Load global settings (done) | time=534ms
22:48:49.536 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
22:48:49.703 INFO Loading required plugins
22:48:49.704 INFO Load plugins index
22:48:49.773 INFO Load plugins index (done) | time=69ms
22:48:49.773 INFO Load/download plugins
22:48:49.840 INFO Load/download plugins (done) | time=66ms
22:48:49.956 INFO Loaded core extensions: sca, a3s, architecture
22:48:50.449 INFO Process project properties
22:48:50.466 INFO Project key: krz_gitbay
22:48:50.466 INFO Base dir: /var/lib/gitbay-runner/work/build-884
22:48:50.466 INFO Working dir: /var/lib/gitbay-runner/work/build-884/.scannerwork
22:48:50.472 INFO Load project settings for component key: 'krz_gitbay'
22:48:50.762 INFO Load project settings for component key: 'krz_gitbay' (done) | time=289ms
22:48:50.779 INFO Check ALM binding of project 'krz_gitbay'
22:48:50.915 INFO Detected project binding: NOT_BOUND
22:48:50.915 INFO Check ALM binding of project 'krz_gitbay' (done) | time=135ms
22:48:50.920 INFO Load branch configuration
22:48:50.922 INFO Load branch configuration (done) | time=1ms
22:48:50.927 INFO Create analysis
22:48:51.178 INFO Branch name: build-orphan-sha, type: short
22:48:51.178 INFO Create analysis (done) | time=250ms
22:48:51.369 INFO Load quality profiles
22:48:51.784 INFO Load quality profiles (done) | time=414ms
22:48:51.953 INFO Load active rules
22:48:52.379 INFO Load active rules (done) | time=429ms
22:48:52.525 INFO Organization key: krz
22:48:52.545 INFO Preprocessing files...
22:48:52.753 INFO 5 languages detected in 438 preprocessed files (done) | time=207ms
22:48:52.753 INFO 552 files ignored because of inclusion/exclusion patterns
22:48:52.753 INFO 3 directories skipped because of exclusion patterns (content not counted)
22:48:52.753 INFO 28 files ignored because of scm ignore settings
22:48:52.761 INFO Loading plugins for detected languages
22:48:52.762 INFO Load/download plugins
22:48:52.815 INFO Load/download plugins (done) | time=53ms
22:48:53.049 INFO Load project repositories
22:48:53.250 INFO Load project repositories (done) | time=200ms
22:48:53.253 INFO SCM collecting changed files in the branch
22:48:53.260 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
22:48:53.261 INFO SCM collecting changed files in the branch (done) | time=7ms
22:48:53.275 INFO Indexing files...
22:48:53.277 INFO Project configuration:
22:48:53.277 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
22:48:53.277 INFO Included tests: **/*_test.go
22:48:53.322 INFO 438 files indexed (done) | time=45ms
22:48:53.322 INFO Quality profile for css: Sonar way essentials
22:48:53.323 INFO Quality profile for go: Sonar way essentials
22:48:53.323 INFO Quality profile for shell: Sonar way essentials
22:48:53.323 INFO Quality profile for web: Sonar way essentials
22:48:53.323 INFO Quality profile for yaml: Sonar way essentials
22:48:53.323 INFO ------------- Run sensors on module gitbay
22:48:53.388 INFO Load metrics repository
22:48:53.460 INFO Load metrics repository (done) | time=71ms
22:48:53.467 INFO Sensor cache enabled
22:48:53.473 INFO Load sensor cache
22:48:53.840 INFO Load sensor cache (1 MB) | time=368ms
22:48:54.251 INFO Reflections took 73 ms to scan 1 urls, producing 30 keys and 295 values
22:48:54.900 INFO Sensor IaC YAML File Type Classification Sensor [iac]
22:48:54.931 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=31ms
22:48:54.932 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
22:48:54.932 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
22:48:54.932 INFO Sensor HTML [web]
22:48:55.399 INFO Sensor HTML [web] (done) | time=467ms
22:48:55.399 INFO Sensor Code Quality and Security for Go [go]
22:48:55.499 INFO 27 folders (371 files) to be analyzed
22:49:04.270 INFO 27/27 folders (371 files) have been analyzed
22:49:04.270 INFO Sensor Code Quality and Security for Go [go] (done) | time=8870ms
22:49:04.273 INFO Sensor IaC CloudFormation Sensor [iac]
22:49:04.274 INFO There are no files to be analyzed for the CloudFormation language
22:49:04.275 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=1ms
22:49:04.277 INFO Sensor IaC cfn-lint report Sensor [iac]
22:49:04.277 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=4ms
22:49:04.277 INFO Sensor IaC Kustomization Sensor [iac]
22:49:04.279 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=1ms
22:49:04.281 INFO Sensor IaC hadolint report Sensor [iac]
22:49:04.281 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
22:49:04.281 INFO Sensor Java Config Sensor [iac]
22:49:04.283 INFO There are no files to be analyzed for the Java language
22:49:04.284 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
22:49:04.285 INFO Sensor IaC Docker Sensor [iac]
22:49:04.286 INFO There are no files to be analyzed for the Docker language
22:49:04.286 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
22:49:04.286 INFO Sensor IaC Ansible Sensor [iac]
22:49:04.286 INFO There are no files to be analyzed for the Ansible language
22:49:04.287 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
22:49:04.287 INFO Sensor IaC ansible-lint report Sensor [iac]
22:49:04.287 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
22:49:04.287 INFO Sensor IaC spectral report Sensor [iac]
22:49:04.287 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
22:49:04.287 INFO Sensor IaC GitHub Actions Sensor [iac]
22:49:04.288 INFO There are no files to be analyzed for the GitHub Actions language
22:49:04.288 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
22:49:04.288 INFO Sensor IaC actionlint report Sensor [iac]
22:49:04.288 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
22:49:04.288 INFO Sensor IaC Azure Pipelines Sensor [iac]
22:49:04.288 INFO There are no files to be analyzed for the Azure Pipelines language
22:49:04.289 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
22:49:04.289 INFO Sensor IaC Shell Sensor [iac]
22:49:04.298 INFO 4 source files to be analyzed
22:49:04.361 INFO 4/4 source files have been analyzed
22:49:04.362 INFO Sensor IaC Shell Sensor [iac] (done) | time=74ms
22:49:04.362 INFO Sensor IaC Kubernetes Sensor [iac]
22:49:04.411 INFO There are no files to be analyzed for the Kubernetes language
22:49:04.412 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=49ms
22:49:04.413 INFO Sensor IaC YAML Sensor [iac]
22:49:04.413 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
22:49:04.413 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
22:49:04.414 INFO Sensor Serverless configuration file sensor [security]
22:49:04.415 INFO 0 Serverless function entries were found in the project
22:49:04.417 INFO 0 Serverless function handlers were kept as entrypoints
22:49:04.418 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
22:49:04.418 INFO Sensor AWS SAM template file sensor [security]
22:49:04.424 INFO Sensor AWS SAM template file sensor [security] (done) | time=8ms
22:49:04.425 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
22:49:04.447 INFO Available processors: 4
22:49:04.447 INFO Using 4 threads for analysis.
22:49:04.776 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
22:49:04.845 INFO Start fetching files for the text and secrets analysis
22:49:04.852 INFO Using Git CLI to retrieve dirty files
22:49:04.878 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
22:49:04.879 INFO Starting the text and secrets analysis
22:49:04.881 INFO 428 source files to be analyzed for the text and secrets analysis
22:49:05.367 INFO 428/428 source files have been analyzed for the text and secrets analysis
22:49:05.369 INFO Start fetching files for the binary file analysis
22:49:05.370 INFO There are no files to be analyzed for the binary file analysis
22:49:05.376 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=951ms
22:49:05.376 INFO Sensor GoSecuritySensor [security]
22:49:05.381 INFO 9 taint analysis rules enabled.
22:49:06.149 INFO Analyzing 2188 UCFGs to detect vulnerabilities.
22:49:07.174 INFO All rules entry points : 30
22:49:07.176 INFO Retained UCFGs : 128
22:49:07.214 INFO 0 / 128 UCFGs simulated, memory usage: 309 MB
22:49:07.485 INFO 128 / 128 UCFGs simulated, memory usage: 351 MB
22:49:07.494 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:49:07.498 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:49:07.504 INFO go security sensor: Begin: 2026-09-05T20:49:05.378583146Z, End: 2026-09-05T20:49:07.502624523Z, Duration: 00:00:02.124
Resolve files to analyze: Begin: 2026-09-05T20:49:05.381315117Z, End: 2026-09-05T20:49:05.382324326Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-05T20:49:05.382555053Z, End: 2026-09-05T20:49:06.145402154Z, Duration: 00:00:00.762
Load type hierarchy: Begin: 2026-09-05T20:49:05.382559300Z, End: 2026-09-05T20:49:05.387527896Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-05T20:49:05.387603821Z, End: 2026-09-05T20:49:06.145310325Z, Duration: 00:00:00.757
Check cache: Begin: 2026-09-05T20:49:06.145606672Z, End: 2026-09-05T20:49:06.146265683Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-05T20:49:06.145987104Z, End: 2026-09-05T20:49:06.146008276Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-05T20:49:06.146299374Z, End: 2026-09-05T20:49:06.770916002Z, Duration: 00:00:00.624
Variable Type Analysis #1: Begin: 2026-09-05T20:49:06.146811685Z, End: 2026-09-05T20:49:06.483324998Z, Duration: 00:00:00.336
Create runtime type propagation graph: Begin: 2026-09-05T20:49:06.147474121Z, End: 2026-09-05T20:49:06.297279522Z, Duration: 00:00:00.149
Run SCC (Tarjan) on 45627 nodes: Begin: 2026-09-05T20:49:06.297660075Z, End: 2026-09-05T20:49:06.414115780Z, Duration: 00:00:00.116
Propagate runtime types to strongly connected components: Begin: 2026-09-05T20:49:06.414347559Z, End: 2026-09-05T20:49:06.483202323Z, Duration: 00:00:00.068
Variable Type Analysis #2: Begin: 2026-09-05T20:49:06.485628815Z, End: 2026-09-05T20:49:06.768823663Z, Duration: 00:00:00.283
Create runtime type propagation graph: Begin: 2026-09-05T20:49:06.485637037Z, End: 2026-09-05T20:49:06.621976965Z, Duration: 00:00:00.136
Run SCC (Tarjan) on 45627 nodes: Begin: 2026-09-05T20:49:06.622153410Z, End: 2026-09-05T20:49:06.688800371Z, Duration: 00:00:00.066
Propagate runtime types to strongly connected components: Begin: 2026-09-05T20:49:06.688948064Z, End: 2026-09-05T20:49:06.768720979Z, Duration: 00:00:00.079
Load config: Begin: 2026-09-05T20:49:06.770982852Z, End: 2026-09-05T20:49:07.034581302Z, Duration: 00:00:00.263
Compute entry points: Begin: 2026-09-05T20:49:07.034785660Z, End: 2026-09-05T20:49:07.173416685Z, Duration: 00:00:00.138
Slice call graph: Begin: 2026-09-05T20:49:07.174463320Z, End: 2026-09-05T20:49:07.179428872Z, Duration: 00:00:00.004
Live variable analysis: Begin: 2026-09-05T20:49:07.179502672Z, End: 2026-09-05T20:49:07.211778862Z, Duration: 00:00:00.032
Taint analysis for go: Begin: 2026-09-05T20:49:07.212004742Z, End: 2026-09-05T20:49:07.485889761Z, Duration: 00:00:00.273
Report issues: Begin: 2026-09-05T20:49:07.485965815Z, End: 2026-09-05T20:49:07.497399201Z, Duration: 00:00:00.011
Store cache: Begin: 2026-09-05T20:49:07.497916329Z, End: 2026-09-05T20:49:07.502064741Z, Duration: 00:00:00.004
22:49:07.505 INFO go security sensor peak memory (pre-GC, max allocation pressure): 772 MB
22:49:07.505 INFO go security sensor peak memory (post-GC, max live footprint): 496 MB
22:49:07.506 INFO Sensor GoSecuritySensor [security] (done) | time=2129ms
22:49:07.512 INFO ------------- Run sensors on project
22:49:07.737 INFO Sensor Deterministic Rule Engine for Go [dre]
22:49:07.760 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
22:49:08.085 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-884/.scannerwork/.sonartmp/bridge-dre/bridge
22:49:08.455 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=731ms
22:49:08.458 INFO Sensor Deterministic Rule Engine for Shell [dre]
22:49:08.463 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=7ms
22:49:08.464 INFO Sensor SQL Dialect Detection [dre]
22:49:08.470 INFO Sensor SQL Dialect Detection [dre] (done) | time=5ms
22:49:08.470 INFO Sensor DRE Project Telemetry [dre]
22:49:08.470 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
22:49:08.470 INFO Sensor GoProjectSensor [go]
22:49:08.471 INFO Sensor GoProjectSensor [go] (done) | time=0ms
22:49:08.471 INFO Sensor Sonar Go A3S Context Collector [go]
22:49:08.471 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
22:49:08.471 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
22:49:08.471 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
22:49:08.471 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
22:49:08.718 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
22:49:08.719 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
22:49:08.729 INFO Using embedded Node.js runtime.
22:49:08.729 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
22:49:10.969 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
22:49:10.976 INFO gRPC analyze-project server listening on 127.0.0.1:46097
22:49:11.135 INFO Plugin version: [13.8.0.44569]
22:49:13.626 INFO Found 0 tsconfig.json file(s): []
22:49:13.863 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
22:49:13.889 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
22:49:13.909 INFO 37 source files to be analyzed
22:49:13.909 INFO 37/37 source files have been analyzed
22:49:13.941 INFO JasminAstConsumer done
22:49:13.949 INFO Hit the cache for 0 out of 36
22:49:13.949 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
22:49:13.949 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5474ms
22:49:13.949 INFO Sensor IaC Project Sensor [iac]
22:49:13.949 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
22:49:13.949 INFO Sensor Zero Coverage Sensor
22:49:14.035 INFO Sensor Zero Coverage Sensor (done) | time=87ms
22:49:14.048 INFO ------------- Gather SCA dependencies on project
22:49:14.313 INFO Dependency analysis skipped
22:49:14.347 INFO CPD Executor 2 files had no CPD blocks
22:49:14.347 INFO CPD Executor Calculating CPD for 219 files
22:49:14.440 INFO CPD Executor CPD calculation finished (done) | time=92ms
22:49:14.444 INFO SCM Publisher SCM provider for this project is: git
22:49:14.445 INFO SCM Publisher 34 source files to be analyzed
22:49:14.998 INFO SCM Publisher 34/34 source files have been analyzed (done) | time=554ms
22:49:15.007 INFO SCM revision ID 'ee8acf9bc4e6a425e8bf6a0db9a8269d592d28e0'
22:49:15.072 INFO SCM writing changed lines
22:49:15.075 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
22:49:15.075 INFO SCM writing changed lines (done) | time=4ms
22:49:15.161 INFO Analysis report generated in 152ms, dir size=974 KB
22:49:15.400 INFO Analysis report compressed in 238ms, zip size=455 KB
22:49:15.789 INFO Analysis report uploaded in 389ms
22:49:15.790 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=build-orphan-sha&resolved=false
22:49:15.790 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
22:49:15.791 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBzVSfMbMgFd3KsS_RJ
22:49:15.791 INFO ------------- Upload SCA dependency files
22:49:16.382 INFO Sensor cache published successfully
22:49:16.675 INFO Analysis total time: 26.717 s
22:49:16.703 INFO SonarScanner Engine completed successfully
22:49:17.064 INFO EXECUTION SUCCESS
22:49:17.065 INFO Total time: 35.468s