Build 805 success
sonar on feat-166-account-export-web · 2b6ee5e16d · queued 2026-09-06 14:56 UTC · finished 2026-09-06 15:08 UTC · ran 36s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (2b6ee5e16d)
step 1/1 set -eu
17:07:54.525 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
17:07:54.528 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-910/sonar-project.properties
17:07:54.539 INFO SonarScanner CLI 8.1.0.6389
17:07:54.543 INFO Linux 6.12.105+deb13-amd64 amd64
17:07:57.418 INFO Communicating with SonarQube Cloud
17:07:57.419 INFO JRE provisioning: os[linux], arch[x86_64]
17:07:58.249 INFO Starting SonarScanner Engine...
17:07:58.250 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
17:08:01.466 INFO Load global settings
17:08:01.894 INFO Load global settings (done) | time=422ms
17:08:01.968 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
17:08:02.108 INFO Loading required plugins
17:08:02.109 INFO Load plugins index
17:08:02.180 INFO Load plugins index (done) | time=71ms
17:08:02.181 INFO Load/download plugins
17:08:02.241 INFO Load/download plugins (done) | time=60ms
17:08:02.362 INFO Loaded core extensions: sca, a3s, architecture
17:08:02.849 INFO Process project properties
17:08:02.869 INFO Project key: krz_gitbay
17:08:02.869 INFO Base dir: /var/lib/gitbay-runner/work/build-910
17:08:02.870 INFO Working dir: /var/lib/gitbay-runner/work/build-910/.scannerwork
17:08:02.875 INFO Load project settings for component key: 'krz_gitbay'
17:08:03.244 INFO Load project settings for component key: 'krz_gitbay' (done) | time=368ms
17:08:03.262 INFO Check ALM binding of project 'krz_gitbay'
17:08:03.356 INFO Detected project binding: NOT_BOUND
17:08:03.357 INFO Check ALM binding of project 'krz_gitbay' (done) | time=95ms
17:08:03.359 INFO Load branch configuration
17:08:03.360 INFO Load branch configuration (done) | time=0ms
17:08:03.364 INFO Create analysis
17:08:03.615 INFO Branch name: feat-166-account-export-web, type: short
17:08:03.616 INFO Create analysis (done) | time=251ms
17:08:03.780 INFO Load quality profiles
17:08:04.198 INFO Load quality profiles (done) | time=418ms
17:08:04.321 INFO Load active rules
17:08:04.723 INFO Load active rules (done) | time=401ms
17:08:04.869 INFO Organization key: krz
17:08:04.884 INFO Preprocessing files...
17:08:05.145 INFO 5 languages detected in 440 preprocessed files (done) | time=259ms
17:08:05.147 INFO 556 files ignored because of inclusion/exclusion patterns
17:08:05.148 INFO 3 directories skipped because of exclusion patterns (content not counted)
17:08:05.148 INFO 28 files ignored because of scm ignore settings
17:08:05.156 INFO Loading plugins for detected languages
17:08:05.157 INFO Load/download plugins
17:08:05.209 INFO Load/download plugins (done) | time=52ms
17:08:05.397 INFO Load project repositories
17:08:05.627 INFO Load project repositories (done) | time=229ms
17:08:05.629 INFO SCM collecting changed files in the branch
17:08:05.639 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:08:05.639 INFO SCM collecting changed files in the branch (done) | time=8ms
17:08:05.656 INFO Indexing files...
17:08:05.656 INFO Project configuration:
17:08:05.656 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
17:08:05.657 INFO Included tests: **/*_test.go
17:08:05.704 INFO 440 files indexed (done) | time=46ms
17:08:05.706 INFO Quality profile for css: Sonar way essentials
17:08:05.707 INFO Quality profile for go: Sonar way essentials
17:08:05.707 INFO Quality profile for shell: Sonar way essentials
17:08:05.707 INFO Quality profile for web: Sonar way essentials
17:08:05.707 INFO Quality profile for yaml: Sonar way essentials
17:08:05.707 INFO ------------- Run sensors on module gitbay
17:08:05.776 INFO Load metrics repository
17:08:05.869 INFO Load metrics repository (done) | time=90ms
17:08:05.874 INFO Sensor cache enabled
17:08:05.878 INFO Load sensor cache
17:08:06.293 INFO Load sensor cache (1 MB) | time=413ms
17:08:06.686 INFO Reflections took 51 ms to scan 1 urls, producing 30 keys and 295 values
17:08:07.313 INFO Sensor IaC YAML File Type Classification Sensor [iac]
17:08:07.337 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=23ms
17:08:07.338 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
17:08:07.338 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
17:08:07.339 INFO Sensor HTML [web]
17:08:07.719 INFO Sensor HTML [web] (done) | time=379ms
17:08:07.720 INFO Sensor Code Quality and Security for Go [go]
17:08:07.782 INFO 27 folders (373 files) to be analyzed
17:08:15.898 INFO 27/27 folders (373 files) have been analyzed
17:08:15.900 INFO Sensor Code Quality and Security for Go [go] (done) | time=8177ms
17:08:15.901 INFO Sensor IaC CloudFormation Sensor [iac]
17:08:15.902 INFO There are no files to be analyzed for the CloudFormation language
17:08:15.903 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
17:08:15.903 INFO Sensor IaC cfn-lint report Sensor [iac]
17:08:15.904 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=1ms
17:08:15.904 INFO Sensor IaC Kustomization Sensor [iac]
17:08:15.904 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
17:08:15.904 INFO Sensor IaC hadolint report Sensor [iac]
17:08:15.904 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
17:08:15.905 INFO Sensor Java Config Sensor [iac]
17:08:15.907 INFO There are no files to be analyzed for the Java language
17:08:15.908 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
17:08:15.908 INFO Sensor IaC Docker Sensor [iac]
17:08:15.908 INFO There are no files to be analyzed for the Docker language
17:08:15.908 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
17:08:15.908 INFO Sensor IaC Ansible Sensor [iac]
17:08:15.908 INFO There are no files to be analyzed for the Ansible language
17:08:15.908 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
17:08:15.909 INFO Sensor IaC ansible-lint report Sensor [iac]
17:08:15.909 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
17:08:15.909 INFO Sensor IaC spectral report Sensor [iac]
17:08:15.909 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
17:08:15.909 INFO Sensor IaC GitHub Actions Sensor [iac]
17:08:15.909 INFO There are no files to be analyzed for the GitHub Actions language
17:08:15.909 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
17:08:15.909 INFO Sensor IaC actionlint report Sensor [iac]
17:08:15.909 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
17:08:15.909 INFO Sensor IaC Azure Pipelines Sensor [iac]
17:08:15.909 INFO There are no files to be analyzed for the Azure Pipelines language
17:08:15.909 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
17:08:15.910 INFO Sensor IaC Shell Sensor [iac]
17:08:15.923 INFO 4 source files to be analyzed
17:08:16.011 INFO 4/4 source files have been analyzed
17:08:16.012 INFO Sensor IaC Shell Sensor [iac] (done) | time=103ms
17:08:16.013 INFO Sensor IaC Kubernetes Sensor [iac]
17:08:16.075 INFO There are no files to be analyzed for the Kubernetes language
17:08:16.077 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=63ms
17:08:16.077 INFO Sensor IaC YAML Sensor [iac]
17:08:16.077 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
17:08:16.077 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
17:08:16.077 INFO Sensor Serverless configuration file sensor [security]
17:08:16.077 INFO 0 Serverless function entries were found in the project
17:08:16.080 INFO 0 Serverless function handlers were kept as entrypoints
17:08:16.081 INFO Sensor Serverless configuration file sensor [security] (done) | time=3ms
17:08:16.082 INFO Sensor AWS SAM template file sensor [security]
17:08:16.089 INFO Sensor AWS SAM template file sensor [security] (done) | time=6ms
17:08:16.089 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
17:08:16.108 INFO Available processors: 4
17:08:16.111 INFO Using 4 threads for analysis.
17:08:16.474 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
17:08:16.548 INFO Start fetching files for the text and secrets analysis
17:08:16.555 INFO Using Git CLI to retrieve dirty files
17:08:16.590 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
17:08:16.591 INFO Starting the text and secrets analysis
17:08:16.594 INFO 430 source files to be analyzed for the text and secrets analysis
17:08:17.147 INFO 430/430 source files have been analyzed for the text and secrets analysis
17:08:17.151 INFO Start fetching files for the binary file analysis
17:08:17.152 INFO There are no files to be analyzed for the binary file analysis
17:08:17.169 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=1083ms
17:08:17.170 INFO Sensor GoSecuritySensor [security]
17:08:17.181 INFO 9 taint analysis rules enabled.
17:08:17.853 INFO Analyzing 2202 UCFGs to detect vulnerabilities.
17:08:18.832 INFO All rules entry points : 31
17:08:18.833 INFO Retained UCFGs : 129
17:08:18.869 INFO 0 / 129 UCFGs simulated, memory usage: 248 MB
17:08:19.138 INFO 129 / 129 UCFGs simulated, memory usage: 290 MB
17:08:19.145 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:08:19.148 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:08:19.156 INFO go security sensor: Begin: 2026-09-06T15:08:17.172397148Z, End: 2026-09-06T15:08:19.153596431Z, Duration: 00:00:01.981
Resolve files to analyze: Begin: 2026-09-06T15:08:17.181610618Z, End: 2026-09-06T15:08:17.182522189Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-06T15:08:17.182761109Z, End: 2026-09-06T15:08:17.852759072Z, Duration: 00:00:00.669
Load type hierarchy: Begin: 2026-09-06T15:08:17.182765325Z, End: 2026-09-06T15:08:17.187782302Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-06T15:08:17.187846738Z, End: 2026-09-06T15:08:17.852596216Z, Duration: 00:00:00.664
Check cache: Begin: 2026-09-06T15:08:17.852894555Z, End: 2026-09-06T15:08:17.853461628Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T15:08:17.853239874Z, End: 2026-09-06T15:08:17.853258131Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T15:08:17.853514397Z, End: 2026-09-06T15:08:18.484357218Z, Duration: 00:00:00.630
Variable Type Analysis #1: Begin: 2026-09-06T15:08:17.853905856Z, End: 2026-09-06T15:08:18.220096886Z, Duration: 00:00:00.366
Create runtime type propagation graph: Begin: 2026-09-06T15:08:17.854394661Z, End: 2026-09-06T15:08:18.057551515Z, Duration: 00:00:00.203
Run SCC (Tarjan) on 46029 nodes: Begin: 2026-09-06T15:08:18.058501614Z, End: 2026-09-06T15:08:18.126807328Z, Duration: 00:00:00.068
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:08:18.126957173Z, End: 2026-09-06T15:08:18.219948202Z, Duration: 00:00:00.092
Variable Type Analysis #2: Begin: 2026-09-06T15:08:18.222482844Z, End: 2026-09-06T15:08:18.481855484Z, Duration: 00:00:00.259
Create runtime type propagation graph: Begin: 2026-09-06T15:08:18.222495854Z, End: 2026-09-06T15:08:18.350334766Z, Duration: 00:00:00.127
Run SCC (Tarjan) on 46029 nodes: Begin: 2026-09-06T15:08:18.350496809Z, End: 2026-09-06T15:08:18.405917721Z, Duration: 00:00:00.055
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:08:18.406083739Z, End: 2026-09-06T15:08:18.481673260Z, Duration: 00:00:00.075
Load config: Begin: 2026-09-06T15:08:18.484501415Z, End: 2026-09-06T15:08:18.666538567Z, Duration: 00:00:00.182
Compute entry points: Begin: 2026-09-06T15:08:18.666598038Z, End: 2026-09-06T15:08:18.831714887Z, Duration: 00:00:00.165
Slice call graph: Begin: 2026-09-06T15:08:18.832005625Z, End: 2026-09-06T15:08:18.834419295Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-06T15:08:18.834481719Z, End: 2026-09-06T15:08:18.867254650Z, Duration: 00:00:00.032
Taint analysis for go: Begin: 2026-09-06T15:08:18.867486309Z, End: 2026-09-06T15:08:19.137978466Z, Duration: 00:00:00.270
Report issues: Begin: 2026-09-06T15:08:19.138089613Z, End: 2026-09-06T15:08:19.148773075Z, Duration: 00:00:00.010
Store cache: Begin: 2026-09-06T15:08:19.149590514Z, End: 2026-09-06T15:08:19.152992501Z, Duration: 00:00:00.003
17:08:19.156 INFO go security sensor peak memory (pre-GC, max allocation pressure): 663 MB
17:08:19.156 INFO go security sensor peak memory (post-GC, max live footprint): 290 MB
17:08:19.156 INFO Sensor GoSecuritySensor [security] (done) | time=1985ms
17:08:19.163 INFO ------------- Run sensors on project
17:08:19.368 INFO Sensor Deterministic Rule Engine for Go [dre]
17:08:19.411 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
17:08:19.736 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-910/.scannerwork/.sonartmp/bridge-dre/bridge
17:08:20.294 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=926ms
17:08:20.295 INFO Sensor Deterministic Rule Engine for Shell [dre]
17:08:20.301 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=6ms
17:08:20.301 INFO Sensor SQL Dialect Detection [dre]
17:08:20.303 INFO Sensor SQL Dialect Detection [dre] (done) | time=2ms
17:08:20.304 INFO Sensor DRE Project Telemetry [dre]
17:08:20.304 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
17:08:20.304 INFO Sensor GoProjectSensor [go]
17:08:20.305 INFO Sensor GoProjectSensor [go] (done) | time=0ms
17:08:20.305 INFO Sensor Sonar Go A3S Context Collector [go]
17:08:20.305 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
17:08:20.305 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
17:08:20.305 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
17:08:20.305 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
17:08:20.538 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
17:08:20.538 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
17:08:20.549 INFO Using embedded Node.js runtime.
17:08:20.550 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
17:08:22.845 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
17:08:22.856 INFO gRPC analyze-project server listening on 127.0.0.1:36161
17:08:23.035 INFO Plugin version: [13.8.0.44569]
17:08:25.333 INFO Found 0 tsconfig.json file(s): []
17:08:25.597 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
17:08:25.599 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
17:08:25.625 INFO 37 source files to be analyzed
17:08:25.625 INFO 37/37 source files have been analyzed
17:08:25.676 INFO JasminAstConsumer done
17:08:25.677 INFO Hit the cache for 0 out of 36
17:08:25.679 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
17:08:25.692 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5379ms
17:08:25.693 INFO Sensor IaC Project Sensor [iac]
17:08:25.693 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
17:08:25.693 INFO Sensor Zero Coverage Sensor
17:08:25.746 INFO Sensor Zero Coverage Sensor (done) | time=59ms
17:08:25.756 INFO ------------- Gather SCA dependencies on project
17:08:25.993 INFO Dependency analysis skipped
17:08:26.037 INFO CPD Executor 2 files had no CPD blocks
17:08:26.038 INFO CPD Executor Calculating CPD for 219 files
17:08:26.120 INFO CPD Executor CPD calculation finished (done) | time=83ms
17:08:26.123 INFO SCM Publisher SCM provider for this project is: git
17:08:26.125 INFO SCM Publisher 45 source files to be analyzed
17:08:26.602 INFO SCM Publisher 45/45 source files have been analyzed (done) | time=476ms
17:08:26.608 INFO SCM revision ID '2b6ee5e16d4dafc02fd1743c14f2b57d6e50e105'
17:08:26.676 INFO SCM writing changed lines
17:08:26.679 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:08:26.680 INFO SCM writing changed lines (done) | time=4ms
17:08:26.763 INFO Analysis report generated in 150ms, dir size=1 MB
17:08:27.007 INFO Analysis report compressed in 243ms, zip size=532 KB
17:08:27.492 INFO Analysis report uploaded in 483ms
17:08:27.493 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-166-account-export-web&resolved=false
17:08:27.494 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
17:08:27.494 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3Q3-oR348sxUkOg2w
17:08:27.494 INFO ------------- Upload SCA dependency files
17:08:28.071 INFO Sensor cache published successfully
17:08:28.350 INFO Analysis total time: 25.987 s
17:08:28.352 INFO SonarScanner Engine completed successfully
17:08:28.707 INFO EXECUTION SUCCESS
17:08:28.708 INFO Total time: 34.185s