Build 809 success
sonar on feat-163-label-web · 6ac4cf450b · queued 2026-09-06 14:59 UTC · finished 2026-09-06 15:16 UTC · ran 38s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (6ac4cf450b)
step 1/1 set -eu
17:16:17.519 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
17:16:17.522 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-914/sonar-project.properties
17:16:17.533 INFO SonarScanner CLI 8.1.0.6389
17:16:17.537 INFO Linux 6.12.105+deb13-amd64 amd64
17:16:20.440 INFO Communicating with SonarQube Cloud
17:16:20.441 INFO JRE provisioning: os[linux], arch[x86_64]
17:16:21.191 INFO Starting SonarScanner Engine...
17:16:21.191 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
17:16:24.510 INFO Load global settings
17:16:25.455 INFO Load global settings (done) | time=939ms
17:16:25.541 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
17:16:25.703 INFO Loading required plugins
17:16:25.708 INFO Load plugins index
17:16:26.004 INFO Load plugins index (done) | time=299ms
17:16:26.004 INFO Load/download plugins
17:16:26.059 INFO Load/download plugins (done) | time=54ms
17:16:26.390 INFO Loaded core extensions: architecture, sca, a3s
17:16:26.892 INFO Process project properties
17:16:26.912 INFO Project key: krz_gitbay
17:16:26.912 INFO Base dir: /var/lib/gitbay-runner/work/build-914
17:16:26.913 INFO Working dir: /var/lib/gitbay-runner/work/build-914/.scannerwork
17:16:26.918 INFO Load project settings for component key: 'krz_gitbay'
17:16:27.377 INFO Load project settings for component key: 'krz_gitbay' (done) | time=456ms
17:16:27.392 INFO Check ALM binding of project 'krz_gitbay'
17:16:27.665 INFO Detected project binding: NOT_BOUND
17:16:27.666 INFO Check ALM binding of project 'krz_gitbay' (done) | time=273ms
17:16:27.670 INFO Load branch configuration
17:16:27.670 INFO Load branch configuration (done) | time=0ms
17:16:27.673 INFO Create analysis
17:16:27.922 INFO Branch name: feat-163-label-web, type: short
17:16:27.923 INFO Create analysis (done) | time=249ms
17:16:28.089 INFO Load quality profiles
17:16:28.679 INFO Load quality profiles (done) | time=590ms
17:16:28.801 INFO Load active rules
17:16:29.190 INFO Load active rules (done) | time=391ms
17:16:29.540 INFO Organization key: krz
17:16:29.561 INFO Preprocessing files...
17:16:29.770 INFO 5 languages detected in 443 preprocessed files (done) | time=207ms
17:16:29.770 INFO 559 files ignored because of inclusion/exclusion patterns
17:16:29.770 INFO 3 directories skipped because of exclusion patterns (content not counted)
17:16:29.771 INFO 28 files ignored because of scm ignore settings
17:16:29.779 INFO Loading plugins for detected languages
17:16:29.779 INFO Load/download plugins
17:16:29.861 INFO Load/download plugins (done) | time=82ms
17:16:30.059 INFO Load project repositories
17:16:30.593 INFO Load project repositories (done) | time=533ms
17:16:30.597 INFO SCM collecting changed files in the branch
17:16:30.609 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:16:30.609 INFO SCM collecting changed files in the branch (done) | time=11ms
17:16:30.629 INFO Indexing files...
17:16:30.629 INFO Project configuration:
17:16:30.629 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
17:16:30.629 INFO Included tests: **/*_test.go
17:16:30.676 INFO 443 files indexed (done) | time=49ms
17:16:30.679 INFO Quality profile for css: Sonar way essentials
17:16:30.679 INFO Quality profile for go: Sonar way essentials
17:16:30.681 INFO Quality profile for shell: Sonar way essentials
17:16:30.684 INFO Quality profile for web: Sonar way essentials
17:16:30.685 INFO Quality profile for yaml: Sonar way essentials
17:16:30.685 INFO ------------- Run sensors on module gitbay
17:16:30.738 INFO Load metrics repository
17:16:31.016 INFO Load metrics repository (done) | time=277ms
17:16:31.026 INFO Sensor cache enabled
17:16:31.037 INFO Load sensor cache
17:16:31.406 INFO Load sensor cache (1 MB) | time=374ms
17:16:31.821 INFO Reflections took 58 ms to scan 1 urls, producing 30 keys and 295 values
17:16:32.493 INFO Sensor IaC YAML File Type Classification Sensor [iac]
17:16:32.521 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=31ms
17:16:32.523 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
17:16:32.523 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
17:16:32.523 INFO Sensor HTML [web]
17:16:32.951 INFO Sensor HTML [web] (done) | time=427ms
17:16:32.953 INFO Sensor Code Quality and Security for Go [go]
17:16:33.011 INFO 27 folders (375 files) to be analyzed
17:16:41.193 INFO 27/27 folders (375 files) have been analyzed
17:16:41.193 INFO Sensor Code Quality and Security for Go [go] (done) | time=8241ms
17:16:41.193 INFO Sensor IaC CloudFormation Sensor [iac]
17:16:41.193 INFO There are no files to be analyzed for the CloudFormation language
17:16:41.194 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
17:16:41.194 INFO Sensor IaC cfn-lint report Sensor [iac]
17:16:41.195 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
17:16:41.196 INFO Sensor IaC Kustomization Sensor [iac]
17:16:41.196 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
17:16:41.196 INFO Sensor IaC hadolint report Sensor [iac]
17:16:41.196 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
17:16:41.196 INFO Sensor Java Config Sensor [iac]
17:16:41.196 INFO There are no files to be analyzed for the Java language
17:16:41.196 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
17:16:41.196 INFO Sensor IaC Docker Sensor [iac]
17:16:41.198 INFO There are no files to be analyzed for the Docker language
17:16:41.199 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
17:16:41.199 INFO Sensor IaC Ansible Sensor [iac]
17:16:41.199 INFO There are no files to be analyzed for the Ansible language
17:16:41.199 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
17:16:41.199 INFO Sensor IaC ansible-lint report Sensor [iac]
17:16:41.199 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
17:16:41.200 INFO Sensor IaC spectral report Sensor [iac]
17:16:41.200 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
17:16:41.200 INFO Sensor IaC GitHub Actions Sensor [iac]
17:16:41.201 INFO There are no files to be analyzed for the GitHub Actions language
17:16:41.202 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
17:16:41.202 INFO Sensor IaC actionlint report Sensor [iac]
17:16:41.202 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
17:16:41.202 INFO Sensor IaC Azure Pipelines Sensor [iac]
17:16:41.202 INFO There are no files to be analyzed for the Azure Pipelines language
17:16:41.202 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
17:16:41.202 INFO Sensor IaC Shell Sensor [iac]
17:16:41.213 INFO 4 source files to be analyzed
17:16:41.265 INFO 4/4 source files have been analyzed
17:16:41.265 INFO Sensor IaC Shell Sensor [iac] (done) | time=64ms
17:16:41.268 INFO Sensor IaC Kubernetes Sensor [iac]
17:16:41.317 INFO There are no files to be analyzed for the Kubernetes language
17:16:41.318 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=52ms
17:16:41.318 INFO Sensor IaC YAML Sensor [iac]
17:16:41.318 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
17:16:41.318 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
17:16:41.318 INFO Sensor Serverless configuration file sensor [security]
17:16:41.319 INFO 0 Serverless function entries were found in the project
17:16:41.321 INFO 0 Serverless function handlers were kept as entrypoints
17:16:41.321 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
17:16:41.321 INFO Sensor AWS SAM template file sensor [security]
17:16:41.333 INFO Sensor AWS SAM template file sensor [security] (done) | time=9ms
17:16:41.333 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
17:16:41.354 INFO Available processors: 4
17:16:41.354 INFO Using 4 threads for analysis.
17:16:41.630 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
17:16:41.688 INFO Start fetching files for the text and secrets analysis
17:16:41.694 INFO Using Git CLI to retrieve dirty files
17:16:41.723 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
17:16:41.725 INFO Starting the text and secrets analysis
17:16:41.727 INFO 433 source files to be analyzed for the text and secrets analysis
17:16:42.222 INFO 433/433 source files have been analyzed for the text and secrets analysis
17:16:42.224 INFO Start fetching files for the binary file analysis
17:16:42.229 INFO There are no files to be analyzed for the binary file analysis
17:16:42.233 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=902ms
17:16:42.233 INFO Sensor GoSecuritySensor [security]
17:16:42.238 INFO 9 taint analysis rules enabled.
17:16:42.972 INFO Analyzing 2205 UCFGs to detect vulnerabilities.
17:16:43.837 INFO All rules entry points : 32
17:16:43.841 INFO Retained UCFGs : 130
17:16:43.881 INFO 0 / 130 UCFGs simulated, memory usage: 415 MB
17:16:44.161 INFO 130 / 130 UCFGs simulated, memory usage: 186 MB
17:16:44.174 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:16:44.178 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:16:44.185 INFO go security sensor: Begin: 2026-09-06T15:16:42.235964103Z, End: 2026-09-06T15:16:44.183255623Z, Duration: 00:00:01.947
Resolve files to analyze: Begin: 2026-09-06T15:16:42.238335471Z, End: 2026-09-06T15:16:42.239149616Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-06T15:16:42.239392282Z, End: 2026-09-06T15:16:42.972035806Z, Duration: 00:00:00.732
Load type hierarchy: Begin: 2026-09-06T15:16:42.239396077Z, End: 2026-09-06T15:16:42.246571551Z, Duration: 00:00:00.007
Load UCFGs: Begin: 2026-09-06T15:16:42.248245290Z, End: 2026-09-06T15:16:42.971915084Z, Duration: 00:00:00.723
Check cache: Begin: 2026-09-06T15:16:42.972252521Z, End: 2026-09-06T15:16:42.973344805Z, Duration: 00:00:00.001
Load cache: Begin: 2026-09-06T15:16:42.972849179Z, End: 2026-09-06T15:16:42.972875580Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T15:16:42.973409683Z, End: 2026-09-06T15:16:43.506881483Z, Duration: 00:00:00.533
Variable Type Analysis #1: Begin: 2026-09-06T15:16:42.973859539Z, End: 2026-09-06T15:16:43.258017681Z, Duration: 00:00:00.284
Create runtime type propagation graph: Begin: 2026-09-06T15:16:42.974532182Z, End: 2026-09-06T15:16:43.113765270Z, Duration: 00:00:00.139
Run SCC (Tarjan) on 46120 nodes: Begin: 2026-09-06T15:16:43.114423060Z, End: 2026-09-06T15:16:43.183587895Z, Duration: 00:00:00.069
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:16:43.183762768Z, End: 2026-09-06T15:16:43.257904199Z, Duration: 00:00:00.074
Variable Type Analysis #2: Begin: 2026-09-06T15:16:43.269752896Z, End: 2026-09-06T15:16:43.504644938Z, Duration: 00:00:00.234
Create runtime type propagation graph: Begin: 2026-09-06T15:16:43.269768519Z, End: 2026-09-06T15:16:43.394885511Z, Duration: 00:00:00.125
Run SCC (Tarjan) on 46120 nodes: Begin: 2026-09-06T15:16:43.395014976Z, End: 2026-09-06T15:16:43.430941966Z, Duration: 00:00:00.035
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:16:43.431066473Z, End: 2026-09-06T15:16:43.504555924Z, Duration: 00:00:00.073
Load config: Begin: 2026-09-06T15:16:43.506954354Z, End: 2026-09-06T15:16:43.701473417Z, Duration: 00:00:00.194
Compute entry points: Begin: 2026-09-06T15:16:43.701550362Z, End: 2026-09-06T15:16:43.836334899Z, Duration: 00:00:00.134
Slice call graph: Begin: 2026-09-06T15:16:43.836526468Z, End: 2026-09-06T15:16:43.839200811Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-06T15:16:43.839244466Z, End: 2026-09-06T15:16:43.879408089Z, Duration: 00:00:00.040
Taint analysis for go: Begin: 2026-09-06T15:16:43.879622011Z, End: 2026-09-06T15:16:44.161304409Z, Duration: 00:00:00.281
Report issues: Begin: 2026-09-06T15:16:44.161366233Z, End: 2026-09-06T15:16:44.178229862Z, Duration: 00:00:00.016
Store cache: Begin: 2026-09-06T15:16:44.179365631Z, End: 2026-09-06T15:16:44.182677363Z, Duration: 00:00:00.003
17:16:44.185 INFO go security sensor peak memory (pre-GC, max allocation pressure): 650 MB
17:16:44.187 INFO go security sensor peak memory (post-GC, max live footprint): 292 MB
17:16:44.187 INFO Sensor GoSecuritySensor [security] (done) | time=1951ms
17:16:44.192 INFO ------------- Run sensors on project
17:16:44.377 INFO Sensor Deterministic Rule Engine for Go [dre]
17:16:44.425 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
17:16:44.734 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-914/.scannerwork/.sonartmp/bridge-dre/bridge
17:16:45.164 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=787ms
17:16:45.165 INFO Sensor Deterministic Rule Engine for Shell [dre]
17:16:45.174 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=9ms
17:16:45.175 INFO Sensor SQL Dialect Detection [dre]
17:16:45.176 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
17:16:45.176 INFO Sensor DRE Project Telemetry [dre]
17:16:45.176 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
17:16:45.176 INFO Sensor GoProjectSensor [go]
17:16:45.177 INFO Sensor GoProjectSensor [go] (done) | time=0ms
17:16:45.177 INFO Sensor Sonar Go A3S Context Collector [go]
17:16:45.177 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
17:16:45.178 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
17:16:45.178 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
17:16:45.178 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
17:16:45.400 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
17:16:45.400 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
17:16:45.408 INFO Using embedded Node.js runtime.
17:16:45.408 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
17:16:47.534 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
17:16:47.542 INFO gRPC analyze-project server listening on 127.0.0.1:44039
17:16:47.697 INFO Plugin version: [13.8.0.44569]
17:16:49.892 INFO Found 0 tsconfig.json file(s): []
17:16:49.957 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
17:16:50.031 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
17:16:50.159 INFO 38 source files to be analyzed
17:16:50.159 INFO 38/38 source files have been analyzed
17:16:50.205 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
17:16:50.259 INFO JasminAstConsumer done
17:16:50.261 INFO Hit the cache for 0 out of 37
17:16:50.265 INFO Miss the cache for 37 out of 37: ANALYSIS_MODE_INELIGIBLE [37/37]
17:16:50.265 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5082ms
17:16:50.266 INFO Sensor IaC Project Sensor [iac]
17:16:50.266 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
17:16:50.268 INFO Sensor Zero Coverage Sensor
17:16:50.319 INFO Sensor Zero Coverage Sensor (done) | time=53ms
17:16:50.343 INFO ------------- Gather SCA dependencies on project
17:16:50.479 INFO Dependency analysis skipped
17:16:50.518 INFO CPD Executor 2 files had no CPD blocks
17:16:50.519 INFO CPD Executor Calculating CPD for 221 files
17:16:50.583 INFO CPD Executor CPD calculation finished (done) | time=65ms
17:16:50.585 INFO SCM Publisher SCM provider for this project is: git
17:16:50.585 INFO SCM Publisher 49 source files to be analyzed
17:16:51.023 INFO SCM Publisher 49/49 source files have been analyzed (done) | time=436ms
17:16:51.030 INFO SCM revision ID '6ac4cf450b496c359c4cd9dd4161c329f24a4005'
17:16:51.112 INFO SCM writing changed lines
17:16:51.116 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:16:51.116 INFO SCM writing changed lines (done) | time=2ms
17:16:51.198 INFO Analysis report generated in 167ms, dir size=1 MB
17:16:51.463 INFO Analysis report compressed in 265ms, zip size=541 KB
17:16:53.180 INFO Analysis report uploaded in 1716ms
17:16:53.182 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-163-label-web&resolved=false
17:16:53.183 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
17:16:53.183 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3SzZvbMgFd3KsTPt4
17:16:53.184 INFO ------------- Upload SCA dependency files
17:16:53.768 INFO Sensor cache published successfully
17:16:54.109 INFO Analysis total time: 27.719 s
17:16:54.111 INFO SonarScanner Engine completed successfully
17:16:54.464 INFO EXECUTION SUCCESS
17:16:54.465 INFO Total time: 36.948s