Build 793 success
sonar on mr-review-requests · a2d1580d3d · queued 2026-09-05 22:24 UTC · finished 2026-09-05 22:25 UTC · ran 35s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (a2d1580d3d)
step 1/1 set -eu
00:24:37.123 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
00:24:37.127 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-896/sonar-project.properties
00:24:37.150 INFO SonarScanner CLI 8.1.0.6389
00:24:37.154 INFO Linux 6.12.105+deb13-amd64 amd64
00:24:40.186 INFO Communicating with SonarQube Cloud
00:24:40.186 INFO JRE provisioning: os[linux], arch[x86_64]
00:24:40.946 INFO Starting SonarScanner Engine...
00:24:40.947 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
00:24:44.282 INFO Load global settings
00:24:44.664 INFO Load global settings (done) | time=372ms
00:24:44.739 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
00:24:44.914 INFO Loading required plugins
00:24:44.915 INFO Load plugins index
00:24:44.979 INFO Load plugins index (done) | time=62ms
00:24:44.979 INFO Load/download plugins
00:24:45.030 INFO Load/download plugins (done) | time=52ms
00:24:45.153 INFO Loaded core extensions: sca, a3s, architecture
00:24:45.596 INFO Process project properties
00:24:45.615 INFO Project key: krz_gitbay
00:24:45.615 INFO Base dir: /var/lib/gitbay-runner/work/build-896
00:24:45.616 INFO Working dir: /var/lib/gitbay-runner/work/build-896/.scannerwork
00:24:45.619 INFO Load project settings for component key: 'krz_gitbay'
00:24:45.889 INFO Load project settings for component key: 'krz_gitbay' (done) | time=268ms
00:24:45.906 INFO Check ALM binding of project 'krz_gitbay'
00:24:46.021 INFO Detected project binding: NOT_BOUND
00:24:46.024 INFO Check ALM binding of project 'krz_gitbay' (done) | time=115ms
00:24:46.026 INFO Load branch configuration
00:24:46.027 INFO Load branch configuration (done) | time=1ms
00:24:46.041 INFO Create analysis
00:24:46.212 INFO Branch name: mr-review-requests, type: short
00:24:46.213 INFO Create analysis (done) | time=173ms
00:24:46.355 INFO Load quality profiles
00:24:46.672 INFO Load quality profiles (done) | time=317ms
00:24:46.794 INFO Load active rules
00:24:47.196 INFO Load active rules (done) | time=399ms
00:24:47.319 INFO Organization key: krz
00:24:47.337 INFO Preprocessing files...
00:24:47.592 INFO 5 languages detected in 440 preprocessed files (done) | time=254ms
00:24:47.595 INFO 556 files ignored because of inclusion/exclusion patterns
00:24:47.602 INFO 3 directories skipped because of exclusion patterns (content not counted)
00:24:47.608 INFO 28 files ignored because of scm ignore settings
00:24:47.608 INFO Loading plugins for detected languages
00:24:47.609 INFO Load/download plugins
00:24:47.685 INFO Load/download plugins (done) | time=78ms
00:24:47.863 INFO Load project repositories
00:24:48.022 INFO Load project repositories (done) | time=158ms
00:24:48.024 INFO SCM collecting changed files in the branch
00:24:48.033 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
00:24:48.034 INFO SCM collecting changed files in the branch (done) | time=9ms
00:24:48.052 INFO Indexing files...
00:24:48.052 INFO Project configuration:
00:24:48.052 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
00:24:48.053 INFO Included tests: **/*_test.go
00:24:48.117 INFO 440 files indexed (done) | time=60ms
00:24:48.117 INFO Quality profile for css: Sonar way essentials
00:24:48.117 INFO Quality profile for go: Sonar way essentials
00:24:48.117 INFO Quality profile for shell: Sonar way essentials
00:24:48.117 INFO Quality profile for web: Sonar way essentials
00:24:48.117 INFO Quality profile for yaml: Sonar way essentials
00:24:48.117 INFO ------------- Run sensors on module gitbay
00:24:48.189 INFO Load metrics repository
00:24:48.245 INFO Load metrics repository (done) | time=56ms
00:24:48.255 INFO Sensor cache enabled
00:24:48.259 INFO Load sensor cache
00:24:48.688 INFO Load sensor cache (1 MB) | time=429ms
00:24:49.077 INFO Reflections took 57 ms to scan 1 urls, producing 30 keys and 295 values
00:24:49.723 INFO Sensor IaC YAML File Type Classification Sensor [iac]
00:24:49.748 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=23ms
00:24:49.749 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
00:24:49.749 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
00:24:49.749 INFO Sensor HTML [web]
00:24:50.117 INFO Sensor HTML [web] (done) | time=369ms
00:24:50.117 INFO Sensor Code Quality and Security for Go [go]
00:24:50.181 INFO 27 folders (373 files) to be analyzed
00:24:58.477 INFO 27/27 folders (373 files) have been analyzed
00:24:58.477 INFO Sensor Code Quality and Security for Go [go] (done) | time=8358ms
00:24:58.477 INFO Sensor IaC CloudFormation Sensor [iac]
00:24:58.477 INFO There are no files to be analyzed for the CloudFormation language
00:24:58.477 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
00:24:58.477 INFO Sensor IaC cfn-lint report Sensor [iac]
00:24:58.479 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=2ms
00:24:58.479 INFO Sensor IaC Kustomization Sensor [iac]
00:24:58.480 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=1ms
00:24:58.480 INFO Sensor IaC hadolint report Sensor [iac]
00:24:58.480 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
00:24:58.481 INFO Sensor Java Config Sensor [iac]
00:24:58.481 INFO There are no files to be analyzed for the Java language
00:24:58.481 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
00:24:58.481 INFO Sensor IaC Docker Sensor [iac]
00:24:58.484 INFO There are no files to be analyzed for the Docker language
00:24:58.485 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
00:24:58.485 INFO Sensor IaC Ansible Sensor [iac]
00:24:58.485 INFO There are no files to be analyzed for the Ansible language
00:24:58.485 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
00:24:58.486 INFO Sensor IaC ansible-lint report Sensor [iac]
00:24:58.487 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
00:24:58.487 INFO Sensor IaC spectral report Sensor [iac]
00:24:58.490 INFO Sensor IaC spectral report Sensor [iac] (done) | time=3ms
00:24:58.491 INFO Sensor IaC GitHub Actions Sensor [iac]
00:24:58.491 INFO There are no files to be analyzed for the GitHub Actions language
00:24:58.491 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
00:24:58.491 INFO Sensor IaC actionlint report Sensor [iac]
00:24:58.492 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
00:24:58.492 INFO Sensor IaC Azure Pipelines Sensor [iac]
00:24:58.493 INFO There are no files to be analyzed for the Azure Pipelines language
00:24:58.493 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
00:24:58.493 INFO Sensor IaC Shell Sensor [iac]
00:24:58.508 INFO 4 source files to be analyzed
00:24:58.577 INFO 4/4 source files have been analyzed
00:24:58.582 INFO Sensor IaC Shell Sensor [iac] (done) | time=87ms
00:24:58.582 INFO Sensor IaC Kubernetes Sensor [iac]
00:24:58.650 INFO There are no files to be analyzed for the Kubernetes language
00:24:58.650 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=70ms
00:24:58.652 INFO Sensor IaC YAML Sensor [iac]
00:24:58.653 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
00:24:58.654 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
00:24:58.655 INFO Sensor Serverless configuration file sensor [security]
00:24:58.655 INFO 0 Serverless function entries were found in the project
00:24:58.656 INFO 0 Serverless function handlers were kept as entrypoints
00:24:58.656 INFO Sensor Serverless configuration file sensor [security] (done) | time=4ms
00:24:58.664 INFO Sensor AWS SAM template file sensor [security]
00:24:58.665 INFO Sensor AWS SAM template file sensor [security] (done) | time=7ms
00:24:58.665 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
00:24:58.679 INFO Available processors: 4
00:24:58.680 INFO Using 4 threads for analysis.
00:24:58.947 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
00:24:58.995 INFO Start fetching files for the text and secrets analysis
00:24:59.003 INFO Using Git CLI to retrieve dirty files
00:24:59.030 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
00:24:59.033 INFO Starting the text and secrets analysis
00:24:59.037 INFO 430 source files to be analyzed for the text and secrets analysis
00:24:59.502 INFO 430/430 source files have been analyzed for the text and secrets analysis
00:24:59.503 INFO Start fetching files for the binary file analysis
00:24:59.505 INFO There are no files to be analyzed for the binary file analysis
00:24:59.513 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=846ms
00:24:59.513 INFO Sensor GoSecuritySensor [security]
00:24:59.517 INFO 9 taint analysis rules enabled.
00:25:00.249 INFO Analyzing 2201 UCFGs to detect vulnerabilities.
00:25:01.225 INFO All rules entry points : 31
00:25:01.228 INFO Retained UCFGs : 129
00:25:01.271 INFO 0 / 129 UCFGs simulated, memory usage: 357 MB
00:25:01.520 INFO 129 / 129 UCFGs simulated, memory usage: 399 MB
00:25:01.527 WARN Failed to find InputFile for __unknown_file, check exclusions.
00:25:01.529 WARN Failed to find InputFile for __unknown_file, check exclusions.
00:25:01.541 INFO go security sensor: Begin: 2026-09-05T22:24:59.515282493Z, End: 2026-09-05T22:25:01.534089374Z, Duration: 00:00:02.018
Resolve files to analyze: Begin: 2026-09-05T22:24:59.518022436Z, End: 2026-09-05T22:24:59.519071574Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-05T22:24:59.519453128Z, End: 2026-09-05T22:25:00.248445792Z, Duration: 00:00:00.728
Load type hierarchy: Begin: 2026-09-05T22:24:59.519458096Z, End: 2026-09-05T22:24:59.525364534Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-05T22:24:59.525451014Z, End: 2026-09-05T22:25:00.248346733Z, Duration: 00:00:00.722
Check cache: Begin: 2026-09-05T22:25:00.248596108Z, End: 2026-09-05T22:25:00.249267479Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-05T22:25:00.249006416Z, End: 2026-09-05T22:25:00.249035009Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-05T22:25:00.249298394Z, End: 2026-09-05T22:25:00.847143291Z, Duration: 00:00:00.597
Variable Type Analysis #1: Begin: 2026-09-05T22:25:00.249770405Z, End: 2026-09-05T22:25:00.622449540Z, Duration: 00:00:00.372
Create runtime type propagation graph: Begin: 2026-09-05T22:25:00.250374704Z, End: 2026-09-05T22:25:00.449508494Z, Duration: 00:00:00.199
Run SCC (Tarjan) on 45992 nodes: Begin: 2026-09-05T22:25:00.450092863Z, End: 2026-09-05T22:25:00.527275455Z, Duration: 00:00:00.077
Propagate runtime types to strongly connected components: Begin: 2026-09-05T22:25:00.527415035Z, End: 2026-09-05T22:25:00.622336559Z, Duration: 00:00:00.094
Variable Type Analysis #2: Begin: 2026-09-05T22:25:00.624791554Z, End: 2026-09-05T22:25:00.845443733Z, Duration: 00:00:00.220
Create runtime type propagation graph: Begin: 2026-09-05T22:25:00.624802300Z, End: 2026-09-05T22:25:00.735982540Z, Duration: 00:00:00.111
Run SCC (Tarjan) on 45992 nodes: Begin: 2026-09-05T22:25:00.736078044Z, End: 2026-09-05T22:25:00.785301513Z, Duration: 00:00:00.049
Propagate runtime types to strongly connected components: Begin: 2026-09-05T22:25:00.785425179Z, End: 2026-09-05T22:25:00.845331335Z, Duration: 00:00:00.059
Load config: Begin: 2026-09-05T22:25:00.847192014Z, End: 2026-09-05T22:25:01.070229675Z, Duration: 00:00:00.223
Compute entry points: Begin: 2026-09-05T22:25:01.070336015Z, End: 2026-09-05T22:25:01.224544893Z, Duration: 00:00:00.154
Slice call graph: Begin: 2026-09-05T22:25:01.224758565Z, End: 2026-09-05T22:25:01.227676235Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-05T22:25:01.227731818Z, End: 2026-09-05T22:25:01.258862042Z, Duration: 00:00:00.031
Taint analysis for go: Begin: 2026-09-05T22:25:01.259079610Z, End: 2026-09-05T22:25:01.520484631Z, Duration: 00:00:00.261
Report issues: Begin: 2026-09-05T22:25:01.520535428Z, End: 2026-09-05T22:25:01.530491730Z, Duration: 00:00:00.009
Store cache: Begin: 2026-09-05T22:25:01.530995458Z, End: 2026-09-05T22:25:01.533565155Z, Duration: 00:00:00.002
00:25:01.543 INFO go security sensor peak memory (pre-GC, max allocation pressure): 649 MB
00:25:01.546 INFO go security sensor peak memory (post-GC, max live footprint): 221 MB
00:25:01.546 INFO Sensor GoSecuritySensor [security] (done) | time=2022ms
00:25:01.547 INFO ------------- Run sensors on project
00:25:01.748 INFO Sensor Deterministic Rule Engine for Go [dre]
00:25:01.809 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
00:25:02.151 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-896/.scannerwork/.sonartmp/bridge-dre/bridge
00:25:02.647 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=898ms
00:25:02.648 INFO Sensor Deterministic Rule Engine for Shell [dre]
00:25:02.659 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=10ms
00:25:02.660 INFO Sensor SQL Dialect Detection [dre]
00:25:02.661 INFO Sensor SQL Dialect Detection [dre] (done) | time=2ms
00:25:02.661 INFO Sensor DRE Project Telemetry [dre]
00:25:02.662 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
00:25:02.662 INFO Sensor GoProjectSensor [go]
00:25:02.662 INFO Sensor GoProjectSensor [go] (done) | time=0ms
00:25:02.663 INFO Sensor Sonar Go A3S Context Collector [go]
00:25:02.664 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
00:25:02.664 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
00:25:02.664 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
00:25:02.664 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
00:25:02.917 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
00:25:02.919 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
00:25:02.927 INFO Using embedded Node.js runtime.
00:25:02.928 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
00:25:05.132 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
00:25:05.139 INFO gRPC analyze-project server listening on 127.0.0.1:39967
00:25:05.321 INFO Plugin version: [13.8.0.44569]
00:25:07.688 INFO Found 0 tsconfig.json file(s): []
00:25:07.784 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
00:25:07.981 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
00:25:07.981 INFO 37 source files to be analyzed
00:25:07.981 INFO 37/37 source files have been analyzed
00:25:08.013 INFO JasminAstConsumer done
00:25:08.013 INFO Hit the cache for 0 out of 36
00:25:08.016 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
00:25:08.018 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5352ms
00:25:08.018 INFO Sensor IaC Project Sensor [iac]
00:25:08.025 INFO Sensor IaC Project Sensor [iac] (done) | time=5ms
00:25:08.025 INFO Sensor Zero Coverage Sensor
00:25:08.106 INFO Sensor Zero Coverage Sensor (done) | time=84ms
00:25:08.129 INFO ------------- Gather SCA dependencies on project
00:25:08.234 INFO Dependency analysis skipped
00:25:08.278 INFO CPD Executor 2 files had no CPD blocks
00:25:08.279 INFO CPD Executor Calculating CPD for 219 files
00:25:08.356 INFO CPD Executor CPD calculation finished (done) | time=77ms
00:25:08.358 INFO SCM Publisher SCM provider for this project is: git
00:25:08.359 INFO SCM Publisher 44 source files to be analyzed
00:25:08.838 INFO SCM Publisher 44/44 source files have been analyzed (done) | time=478ms
00:25:08.846 INFO SCM revision ID 'a2d1580d3dbd22814b96515833e024d03b854c4a'
00:25:08.919 INFO SCM writing changed lines
00:25:08.924 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
00:25:08.925 INFO SCM writing changed lines (done) | time=5ms
00:25:09.021 INFO Analysis report generated in 173ms, dir size=1 MB
00:25:09.284 INFO Analysis report compressed in 262ms, zip size=528 KB
00:25:09.630 INFO Analysis report uploaded in 346ms
00:25:09.631 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=mr-review-requests&resolved=false
00:25:09.631 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
00:25:09.632 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaBzrPOyg6Fhx6Sn18HR
00:25:09.632 INFO ------------- Upload SCA dependency files
00:25:10.195 INFO Sensor cache published successfully
00:25:10.471 INFO Analysis total time: 25.319 s
00:25:10.474 INFO SonarScanner Engine completed successfully
00:25:10.821 INFO EXECUTION SUCCESS
00:25:10.822 INFO Total time: 33.702s