Build 801 success
sonar on feat-165-release-delete-web · 39bca7a663 · queued 2026-09-06 14:53 UTC · finished 2026-09-06 15:00 UTC · ran 34s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (39bca7a663)
step 1/1 set -eu
16:59:32.704 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
16:59:32.707 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-906/sonar-project.properties
16:59:32.718 INFO SonarScanner CLI 8.1.0.6389
16:59:32.722 INFO Linux 6.12.105+deb13-amd64 amd64
16:59:35.588 INFO Communicating with SonarQube Cloud
16:59:35.589 INFO JRE provisioning: os[linux], arch[x86_64]
16:59:36.354 INFO Starting SonarScanner Engine...
16:59:36.355 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
16:59:39.587 INFO Load global settings
16:59:39.981 INFO Load global settings (done) | time=388ms
16:59:40.061 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
16:59:40.209 INFO Loading required plugins
16:59:40.209 INFO Load plugins index
16:59:40.284 INFO Load plugins index (done) | time=72ms
16:59:40.285 INFO Load/download plugins
16:59:40.346 INFO Load/download plugins (done) | time=65ms
16:59:40.472 INFO Loaded core extensions: architecture, sca, a3s
16:59:40.951 INFO Process project properties
16:59:40.980 INFO Project key: krz_gitbay
16:59:40.980 INFO Base dir: /var/lib/gitbay-runner/work/build-906
16:59:40.981 INFO Working dir: /var/lib/gitbay-runner/work/build-906/.scannerwork
16:59:40.989 INFO Load project settings for component key: 'krz_gitbay'
16:59:41.298 INFO Load project settings for component key: 'krz_gitbay' (done) | time=309ms
16:59:41.319 INFO Check ALM binding of project 'krz_gitbay'
16:59:41.478 INFO Detected project binding: NOT_BOUND
16:59:41.481 INFO Check ALM binding of project 'krz_gitbay' (done) | time=161ms
16:59:41.485 INFO Load branch configuration
16:59:41.486 INFO Load branch configuration (done) | time=1ms
16:59:41.489 INFO Create analysis
16:59:41.740 INFO Branch name: feat-165-release-delete-web, type: short
16:59:41.743 INFO Create analysis (done) | time=251ms
16:59:41.921 INFO Load quality profiles
16:59:42.215 INFO Load quality profiles (done) | time=293ms
16:59:42.337 INFO Load active rules
16:59:42.784 INFO Load active rules (done) | time=447ms
16:59:42.919 INFO Organization key: krz
16:59:42.935 INFO Preprocessing files...
16:59:43.160 INFO 5 languages detected in 440 preprocessed files (done) | time=224ms
16:59:43.160 INFO 556 files ignored because of inclusion/exclusion patterns
16:59:43.161 INFO 3 directories skipped because of exclusion patterns (content not counted)
16:59:43.161 INFO 28 files ignored because of scm ignore settings
16:59:43.197 INFO Loading plugins for detected languages
16:59:43.198 INFO Load/download plugins
16:59:43.259 INFO Load/download plugins (done) | time=60ms
16:59:43.460 INFO Load project repositories
16:59:43.685 INFO Load project repositories (done) | time=224ms
16:59:43.689 INFO SCM collecting changed files in the branch
16:59:43.696 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
16:59:43.696 INFO SCM collecting changed files in the branch (done) | time=7ms
16:59:43.710 INFO Indexing files...
16:59:43.710 INFO Project configuration:
16:59:43.710 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
16:59:43.710 INFO Included tests: **/*_test.go
16:59:43.740 INFO 440 files indexed (done) | time=30ms
16:59:43.743 INFO Quality profile for css: Sonar way essentials
16:59:43.744 INFO Quality profile for go: Sonar way essentials
16:59:43.744 INFO Quality profile for shell: Sonar way essentials
16:59:43.744 INFO Quality profile for web: Sonar way essentials
16:59:43.745 INFO Quality profile for yaml: Sonar way essentials
16:59:43.745 INFO ------------- Run sensors on module gitbay
16:59:43.795 INFO Load metrics repository
16:59:43.859 INFO Load metrics repository (done) | time=65ms
16:59:43.867 INFO Sensor cache enabled
16:59:43.871 INFO Load sensor cache
16:59:44.266 INFO Load sensor cache (1 MB) | time=395ms
16:59:44.675 INFO Reflections took 58 ms to scan 1 urls, producing 30 keys and 295 values
16:59:45.332 INFO Sensor IaC YAML File Type Classification Sensor [iac]
16:59:45.356 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=25ms
16:59:45.357 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
16:59:45.358 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
16:59:45.360 INFO Sensor HTML [web]
16:59:45.715 INFO Sensor HTML [web] (done) | time=359ms
16:59:45.717 INFO Sensor Code Quality and Security for Go [go]
16:59:45.767 INFO 27 folders (373 files) to be analyzed
16:59:53.625 INFO 27/27 folders (373 files) have been analyzed
16:59:53.627 INFO Sensor Code Quality and Security for Go [go] (done) | time=7910ms
16:59:53.627 INFO Sensor IaC CloudFormation Sensor [iac]
16:59:53.628 INFO There are no files to be analyzed for the CloudFormation language
16:59:53.628 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
16:59:53.628 INFO Sensor IaC cfn-lint report Sensor [iac]
16:59:53.629 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
16:59:53.629 INFO Sensor IaC Kustomization Sensor [iac]
16:59:53.629 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
16:59:53.629 INFO Sensor IaC hadolint report Sensor [iac]
16:59:53.629 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
16:59:53.629 INFO Sensor Java Config Sensor [iac]
16:59:53.629 INFO There are no files to be analyzed for the Java language
16:59:53.629 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
16:59:53.629 INFO Sensor IaC Docker Sensor [iac]
16:59:53.631 INFO There are no files to be analyzed for the Docker language
16:59:53.631 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
16:59:53.631 INFO Sensor IaC Ansible Sensor [iac]
16:59:53.632 INFO There are no files to be analyzed for the Ansible language
16:59:53.632 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
16:59:53.632 INFO Sensor IaC ansible-lint report Sensor [iac]
16:59:53.633 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
16:59:53.633 INFO Sensor IaC spectral report Sensor [iac]
16:59:53.633 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
16:59:53.633 INFO Sensor IaC GitHub Actions Sensor [iac]
16:59:53.634 INFO There are no files to be analyzed for the GitHub Actions language
16:59:53.634 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
16:59:53.634 INFO Sensor IaC actionlint report Sensor [iac]
16:59:53.635 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
16:59:53.635 INFO Sensor IaC Azure Pipelines Sensor [iac]
16:59:53.635 INFO There are no files to be analyzed for the Azure Pipelines language
16:59:53.635 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
16:59:53.635 INFO Sensor IaC Shell Sensor [iac]
16:59:53.642 INFO 4 source files to be analyzed
16:59:53.716 INFO 4/4 source files have been analyzed
16:59:53.717 INFO Sensor IaC Shell Sensor [iac] (done) | time=84ms
16:59:53.717 INFO Sensor IaC Kubernetes Sensor [iac]
16:59:53.767 INFO There are no files to be analyzed for the Kubernetes language
16:59:53.768 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=49ms
16:59:53.769 INFO Sensor IaC YAML Sensor [iac]
16:59:53.770 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
16:59:53.770 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
16:59:53.771 INFO Sensor Serverless configuration file sensor [security]
16:59:53.773 INFO 0 Serverless function entries were found in the project
16:59:53.773 INFO 0 Serverless function handlers were kept as entrypoints
16:59:53.773 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
16:59:53.774 INFO Sensor AWS SAM template file sensor [security]
16:59:53.781 INFO Sensor AWS SAM template file sensor [security] (done) | time=7ms
16:59:53.782 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
16:59:53.804 INFO Available processors: 4
16:59:53.806 INFO Using 4 threads for analysis.
16:59:54.058 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
16:59:54.119 INFO Start fetching files for the text and secrets analysis
16:59:54.127 INFO Using Git CLI to retrieve dirty files
16:59:54.150 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
16:59:54.150 INFO Starting the text and secrets analysis
16:59:54.153 INFO 430 source files to be analyzed for the text and secrets analysis
16:59:54.606 INFO 430/430 source files have been analyzed for the text and secrets analysis
16:59:54.610 INFO Start fetching files for the binary file analysis
16:59:54.610 INFO There are no files to be analyzed for the binary file analysis
16:59:54.631 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=847ms
16:59:54.631 INFO Sensor GoSecuritySensor [security]
16:59:54.636 INFO 9 taint analysis rules enabled.
16:59:55.320 INFO Analyzing 2201 UCFGs to detect vulnerabilities.
16:59:56.391 INFO All rules entry points : 31
16:59:56.393 INFO Retained UCFGs : 129
16:59:56.477 INFO 0 / 129 UCFGs simulated, memory usage: 221 MB
16:59:56.729 INFO 129 / 129 UCFGs simulated, memory usage: 263 MB
16:59:56.735 WARN Failed to find InputFile for __unknown_file, check exclusions.
16:59:56.738 WARN Failed to find InputFile for __unknown_file, check exclusions.
16:59:56.744 INFO go security sensor: Begin: 2026-09-06T14:59:54.633191428Z, End: 2026-09-06T14:59:56.742935059Z, Duration: 00:00:02.109
Resolve files to analyze: Begin: 2026-09-06T14:59:54.636387658Z, End: 2026-09-06T14:59:54.638082739Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-06T14:59:54.638344092Z, End: 2026-09-06T14:59:55.318631088Z, Duration: 00:00:00.680
Load type hierarchy: Begin: 2026-09-06T14:59:54.638348529Z, End: 2026-09-06T14:59:54.647551235Z, Duration: 00:00:00.009
Load UCFGs: Begin: 2026-09-06T14:59:54.647625115Z, End: 2026-09-06T14:59:55.318398708Z, Duration: 00:00:00.670
Check cache: Begin: 2026-09-06T14:59:55.318772330Z, End: 2026-09-06T14:59:55.319381778Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T14:59:55.319170360Z, End: 2026-09-06T14:59:55.319189288Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T14:59:55.319411843Z, End: 2026-09-06T14:59:55.991413404Z, Duration: 00:00:00.672
Variable Type Analysis #1: Begin: 2026-09-06T14:59:55.319944084Z, End: 2026-09-06T14:59:55.768062164Z, Duration: 00:00:00.448
Create runtime type propagation graph: Begin: 2026-09-06T14:59:55.320750407Z, End: 2026-09-06T14:59:55.613828727Z, Duration: 00:00:00.293
Run SCC (Tarjan) on 46019 nodes: Begin: 2026-09-06T14:59:55.615223185Z, End: 2026-09-06T14:59:55.687381704Z, Duration: 00:00:00.072
Propagate runtime types to strongly connected components: Begin: 2026-09-06T14:59:55.687624779Z, End: 2026-09-06T14:59:55.767952519Z, Duration: 00:00:00.080
Variable Type Analysis #2: Begin: 2026-09-06T14:59:55.770360052Z, End: 2026-09-06T14:59:55.989218121Z, Duration: 00:00:00.218
Create runtime type propagation graph: Begin: 2026-09-06T14:59:55.770368955Z, End: 2026-09-06T14:59:55.858885485Z, Duration: 00:00:00.088
Run SCC (Tarjan) on 46019 nodes: Begin: 2026-09-06T14:59:55.858996992Z, End: 2026-09-06T14:59:55.914367822Z, Duration: 00:00:00.055
Propagate runtime types to strongly connected components: Begin: 2026-09-06T14:59:55.914508073Z, End: 2026-09-06T14:59:55.989108246Z, Duration: 00:00:00.074
Load config: Begin: 2026-09-06T14:59:55.991532825Z, End: 2026-09-06T14:59:56.206302793Z, Duration: 00:00:00.214
Compute entry points: Begin: 2026-09-06T14:59:56.206383754Z, End: 2026-09-06T14:59:56.390557609Z, Duration: 00:00:00.184
Slice call graph: Begin: 2026-09-06T14:59:56.391708220Z, End: 2026-09-06T14:59:56.395066423Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-06T14:59:56.395156688Z, End: 2026-09-06T14:59:56.471712904Z, Duration: 00:00:00.076
Taint analysis for go: Begin: 2026-09-06T14:59:56.471965774Z, End: 2026-09-06T14:59:56.729440506Z, Duration: 00:00:00.257
Report issues: Begin: 2026-09-06T14:59:56.729512714Z, End: 2026-09-06T14:59:56.738286004Z, Duration: 00:00:00.008
Store cache: Begin: 2026-09-06T14:59:56.738763963Z, End: 2026-09-06T14:59:56.742407956Z, Duration: 00:00:00.003
16:59:56.746 INFO go security sensor peak memory (pre-GC, max allocation pressure): 672 MB
16:59:56.746 INFO go security sensor peak memory (post-GC, max live footprint): 310 MB
16:59:56.747 INFO Sensor GoSecuritySensor [security] (done) | time=2115ms
16:59:56.752 INFO ------------- Run sensors on project
16:59:56.942 INFO Sensor Deterministic Rule Engine for Go [dre]
16:59:56.983 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
16:59:57.294 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-906/.scannerwork/.sonartmp/bridge-dre/bridge
16:59:57.581 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=638ms
16:59:57.581 INFO Sensor Deterministic Rule Engine for Shell [dre]
16:59:57.589 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
16:59:57.589 INFO Sensor SQL Dialect Detection [dre]
16:59:57.589 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
16:59:57.589 INFO Sensor DRE Project Telemetry [dre]
16:59:57.589 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
16:59:57.589 INFO Sensor GoProjectSensor [go]
16:59:57.589 INFO Sensor GoProjectSensor [go] (done) | time=0ms
16:59:57.589 INFO Sensor Sonar Go A3S Context Collector [go]
16:59:57.589 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
16:59:57.589 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
16:59:57.589 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
16:59:57.590 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
16:59:57.814 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
16:59:57.814 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
16:59:57.825 INFO Using embedded Node.js runtime.
16:59:57.826 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
17:00:00.229 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
17:00:00.241 INFO gRPC analyze-project server listening on 127.0.0.1:41503
17:00:00.415 INFO Plugin version: [13.8.0.44569]
17:00:02.827 INFO Found 0 tsconfig.json file(s): []
17:00:03.041 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
17:00:03.076 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
17:00:03.089 INFO 37 source files to be analyzed
17:00:03.089 INFO 37/37 source files have been analyzed
17:00:03.153 INFO JasminAstConsumer done
17:00:03.157 INFO Hit the cache for 0 out of 36
17:00:03.157 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
17:00:03.157 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5565ms
17:00:03.157 INFO Sensor IaC Project Sensor [iac]
17:00:03.157 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
17:00:03.157 INFO Sensor Zero Coverage Sensor
17:00:03.211 INFO Sensor Zero Coverage Sensor (done) | time=54ms
17:00:03.222 INFO ------------- Gather SCA dependencies on project
17:00:03.569 INFO Dependency analysis skipped
17:00:03.613 INFO CPD Executor 2 files had no CPD blocks
17:00:03.613 INFO CPD Executor Calculating CPD for 219 files
17:00:03.678 INFO CPD Executor CPD calculation finished (done) | time=65ms
17:00:03.680 INFO SCM Publisher SCM provider for this project is: git
17:00:03.681 INFO SCM Publisher 46 source files to be analyzed
17:00:04.166 INFO SCM Publisher 46/46 source files have been analyzed (done) | time=484ms
17:00:04.172 INFO SCM revision ID '39bca7a663a913bbec45df9291e300a1aaeaf032'
17:00:04.264 INFO SCM writing changed lines
17:00:04.266 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:00:04.267 INFO SCM writing changed lines (done) | time=3ms
17:00:04.371 INFO Analysis report generated in 193ms, dir size=1 MB
17:00:04.615 INFO Analysis report compressed in 243ms, zip size=533 KB
17:00:05.044 INFO Analysis report uploaded in 429ms
17:00:05.045 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-165-release-delete-web&resolved=false
17:00:05.045 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
17:00:05.046 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3O9TXKbaNl224kUz5
17:00:05.046 INFO ------------- Upload SCA dependency files
17:00:05.643 INFO Sensor cache published successfully
17:00:05.925 INFO Analysis total time: 25.453 s
17:00:05.928 INFO SonarScanner Engine completed successfully
17:00:06.302 INFO EXECUTION SUCCESS
17:00:06.303 INFO Total time: 33.600s