Build 825 success
sonar on feat-165-release-delete-web · 70dc0648f9 · queued 2026-09-06 15:08 UTC · finished 2026-09-06 15:50 UTC · ran 34s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (70dc0648f9)
step 1/1 set -eu
17:49:51.604 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
17:49:51.607 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-930/sonar-project.properties
17:49:51.617 INFO SonarScanner CLI 8.1.0.6389
17:49:51.622 INFO Linux 6.12.105+deb13-amd64 amd64
17:49:54.455 INFO Communicating with SonarQube Cloud
17:49:54.456 INFO JRE provisioning: os[linux], arch[x86_64]
17:49:55.190 INFO Starting SonarScanner Engine...
17:49:55.190 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
17:49:58.368 INFO Load global settings
17:49:58.742 INFO Load global settings (done) | time=369ms
17:49:58.815 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
17:49:58.964 INFO Loading required plugins
17:49:58.964 INFO Load plugins index
17:49:59.037 INFO Load plugins index (done) | time=68ms
17:49:59.037 INFO Load/download plugins
17:49:59.079 INFO Load/download plugins (done) | time=45ms
17:49:59.189 INFO Loaded core extensions: sca, a3s, architecture
17:49:59.694 INFO Process project properties
17:49:59.719 INFO Project key: krz_gitbay
17:49:59.720 INFO Base dir: /var/lib/gitbay-runner/work/build-930
17:49:59.720 INFO Working dir: /var/lib/gitbay-runner/work/build-930/.scannerwork
17:49:59.725 INFO Load project settings for component key: 'krz_gitbay'
17:50:00.040 INFO Load project settings for component key: 'krz_gitbay' (done) | time=312ms
17:50:00.056 INFO Check ALM binding of project 'krz_gitbay'
17:50:00.218 INFO Detected project binding: NOT_BOUND
17:50:00.219 INFO Check ALM binding of project 'krz_gitbay' (done) | time=162ms
17:50:00.224 INFO Load branch configuration
17:50:00.224 INFO Load branch configuration (done) | time=0ms
17:50:00.227 INFO Create analysis
17:50:00.473 INFO Branch name: feat-165-release-delete-web, type: short
17:50:00.473 INFO Create analysis (done) | time=241ms
17:50:00.703 INFO Load quality profiles
17:50:01.052 INFO Load quality profiles (done) | time=351ms
17:50:01.168 INFO Load active rules
17:50:01.687 INFO Load active rules (done) | time=518ms
17:50:01.831 INFO Organization key: krz
17:50:01.850 INFO Preprocessing files...
17:50:02.103 INFO 5 languages detected in 440 preprocessed files (done) | time=251ms
17:50:02.104 INFO 556 files ignored because of inclusion/exclusion patterns
17:50:02.104 INFO 3 directories skipped because of exclusion patterns (content not counted)
17:50:02.105 INFO 28 files ignored because of scm ignore settings
17:50:02.116 INFO Loading plugins for detected languages
17:50:02.116 INFO Load/download plugins
17:50:02.184 INFO Load/download plugins (done) | time=68ms
17:50:02.381 INFO Load project repositories
17:50:02.534 INFO Load project repositories (done) | time=152ms
17:50:02.536 INFO SCM collecting changed files in the branch
17:50:02.546 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:50:02.547 INFO SCM collecting changed files in the branch (done) | time=10ms
17:50:02.562 INFO Indexing files...
17:50:02.562 INFO Project configuration:
17:50:02.562 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
17:50:02.562 INFO Included tests: **/*_test.go
17:50:02.598 INFO 440 files indexed (done) | time=35ms
17:50:02.598 INFO Quality profile for css: Sonar way essentials
17:50:02.599 INFO Quality profile for go: Sonar way essentials
17:50:02.600 INFO Quality profile for shell: Sonar way essentials
17:50:02.601 INFO Quality profile for web: Sonar way essentials
17:50:02.602 INFO Quality profile for yaml: Sonar way essentials
17:50:02.603 INFO ------------- Run sensors on module gitbay
17:50:02.654 INFO Load metrics repository
17:50:02.723 INFO Load metrics repository (done) | time=68ms
17:50:02.730 INFO Sensor cache enabled
17:50:02.734 INFO Load sensor cache
17:50:03.158 INFO Load sensor cache (1 MB) | time=424ms
17:50:03.585 INFO Reflections took 57 ms to scan 1 urls, producing 30 keys and 295 values
17:50:04.235 INFO Sensor IaC YAML File Type Classification Sensor [iac]
17:50:04.265 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=26ms
17:50:04.265 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
17:50:04.265 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
17:50:04.265 INFO Sensor HTML [web]
17:50:04.683 INFO Sensor HTML [web] (done) | time=419ms
17:50:04.684 INFO Sensor Code Quality and Security for Go [go]
17:50:04.763 INFO 27 folders (373 files) to be analyzed
17:50:12.473 INFO 27/27 folders (373 files) have been analyzed
17:50:12.474 INFO Sensor Code Quality and Security for Go [go] (done) | time=7786ms
17:50:12.474 INFO Sensor IaC CloudFormation Sensor [iac]
17:50:12.476 INFO There are no files to be analyzed for the CloudFormation language
17:50:12.476 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
17:50:12.476 INFO Sensor IaC cfn-lint report Sensor [iac]
17:50:12.476 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
17:50:12.476 INFO Sensor IaC Kustomization Sensor [iac]
17:50:12.482 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
17:50:12.482 INFO Sensor IaC hadolint report Sensor [iac]
17:50:12.482 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
17:50:12.482 INFO Sensor Java Config Sensor [iac]
17:50:12.482 INFO There are no files to be analyzed for the Java language
17:50:12.483 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
17:50:12.483 INFO Sensor IaC Docker Sensor [iac]
17:50:12.485 INFO There are no files to be analyzed for the Docker language
17:50:12.485 INFO Sensor IaC Docker Sensor [iac] (done) | time=7ms
17:50:12.485 INFO Sensor IaC Ansible Sensor [iac]
17:50:12.486 INFO There are no files to be analyzed for the Ansible language
17:50:12.486 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
17:50:12.486 INFO Sensor IaC ansible-lint report Sensor [iac]
17:50:12.486 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
17:50:12.486 INFO Sensor IaC spectral report Sensor [iac]
17:50:12.486 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
17:50:12.486 INFO Sensor IaC GitHub Actions Sensor [iac]
17:50:12.486 INFO There are no files to be analyzed for the GitHub Actions language
17:50:12.487 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
17:50:12.487 INFO Sensor IaC actionlint report Sensor [iac]
17:50:12.487 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
17:50:12.487 INFO Sensor IaC Azure Pipelines Sensor [iac]
17:50:12.487 INFO There are no files to be analyzed for the Azure Pipelines language
17:50:12.487 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
17:50:12.487 INFO Sensor IaC Shell Sensor [iac]
17:50:12.497 INFO 4 source files to be analyzed
17:50:12.546 INFO 4/4 source files have been analyzed
17:50:12.547 INFO Sensor IaC Shell Sensor [iac] (done) | time=59ms
17:50:12.547 INFO Sensor IaC Kubernetes Sensor [iac]
17:50:12.593 INFO There are no files to be analyzed for the Kubernetes language
17:50:12.594 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=46ms
17:50:12.596 INFO Sensor IaC YAML Sensor [iac]
17:50:12.597 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
17:50:12.597 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
17:50:12.597 INFO Sensor Serverless configuration file sensor [security]
17:50:12.597 INFO 0 Serverless function entries were found in the project
17:50:12.597 INFO 0 Serverless function handlers were kept as entrypoints
17:50:12.597 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
17:50:12.597 INFO Sensor AWS SAM template file sensor [security]
17:50:12.605 INFO Sensor AWS SAM template file sensor [security] (done) | time=6ms
17:50:12.605 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
17:50:12.623 INFO Available processors: 4
17:50:12.623 INFO Using 4 threads for analysis.
17:50:12.907 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
17:50:12.985 INFO Start fetching files for the text and secrets analysis
17:50:12.991 INFO Using Git CLI to retrieve dirty files
17:50:13.016 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
17:50:13.016 INFO Starting the text and secrets analysis
17:50:13.020 INFO 430 source files to be analyzed for the text and secrets analysis
17:50:13.503 INFO 430/430 source files have been analyzed for the text and secrets analysis
17:50:13.505 INFO Start fetching files for the binary file analysis
17:50:13.510 INFO There are no files to be analyzed for the binary file analysis
17:50:13.514 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=910ms
17:50:13.514 INFO Sensor GoSecuritySensor [security]
17:50:13.521 INFO 9 taint analysis rules enabled.
17:50:14.212 INFO Analyzing 2202 UCFGs to detect vulnerabilities.
17:50:15.297 INFO All rules entry points : 31
17:50:15.297 INFO Retained UCFGs : 129
17:50:15.336 INFO 0 / 129 UCFGs simulated, memory usage: 358 MB
17:50:15.601 INFO 129 / 129 UCFGs simulated, memory usage: 401 MB
17:50:15.608 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:50:15.611 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:50:15.617 INFO go security sensor: Begin: 2026-09-06T15:50:13.516490045Z, End: 2026-09-06T15:50:15.615788495Z, Duration: 00:00:02.099
Resolve files to analyze: Begin: 2026-09-06T15:50:13.521302065Z, End: 2026-09-06T15:50:13.523330957Z, Duration: 00:00:00.002
Load type hierarchy and UCFGs: Begin: 2026-09-06T15:50:13.523571018Z, End: 2026-09-06T15:50:14.210512027Z, Duration: 00:00:00.686
Load type hierarchy: Begin: 2026-09-06T15:50:13.523575665Z, End: 2026-09-06T15:50:13.530751310Z, Duration: 00:00:00.007
Load UCFGs: Begin: 2026-09-06T15:50:13.530834726Z, End: 2026-09-06T15:50:14.210435131Z, Duration: 00:00:00.679
Check cache: Begin: 2026-09-06T15:50:14.210667521Z, End: 2026-09-06T15:50:14.211247594Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T15:50:14.211036356Z, End: 2026-09-06T15:50:14.211052931Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T15:50:14.211283267Z, End: 2026-09-06T15:50:14.831484311Z, Duration: 00:00:00.620
Variable Type Analysis #1: Begin: 2026-09-06T15:50:14.211653605Z, End: 2026-09-06T15:50:14.542092063Z, Duration: 00:00:00.330
Create runtime type propagation graph: Begin: 2026-09-06T15:50:14.212140917Z, End: 2026-09-06T15:50:14.385985683Z, Duration: 00:00:00.173
Run SCC (Tarjan) on 46048 nodes: Begin: 2026-09-06T15:50:14.386694250Z, End: 2026-09-06T15:50:14.451996692Z, Duration: 00:00:00.065
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:50:14.452143662Z, End: 2026-09-06T15:50:14.541963229Z, Duration: 00:00:00.089
Variable Type Analysis #2: Begin: 2026-09-06T15:50:14.544283240Z, End: 2026-09-06T15:50:14.828832351Z, Duration: 00:00:00.284
Create runtime type propagation graph: Begin: 2026-09-06T15:50:14.544291012Z, End: 2026-09-06T15:50:14.690688374Z, Duration: 00:00:00.146
Run SCC (Tarjan) on 46048 nodes: Begin: 2026-09-06T15:50:14.690825561Z, End: 2026-09-06T15:50:14.739702823Z, Duration: 00:00:00.048
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:50:14.739917156Z, End: 2026-09-06T15:50:14.828705200Z, Duration: 00:00:00.088
Load config: Begin: 2026-09-06T15:50:14.831613305Z, End: 2026-09-06T15:50:15.126941624Z, Duration: 00:00:00.295
Compute entry points: Begin: 2026-09-06T15:50:15.127105831Z, End: 2026-09-06T15:50:15.296779652Z, Duration: 00:00:00.169
Slice call graph: Begin: 2026-09-06T15:50:15.297065662Z, End: 2026-09-06T15:50:15.301684321Z, Duration: 00:00:00.004
Live variable analysis: Begin: 2026-09-06T15:50:15.301772874Z, End: 2026-09-06T15:50:15.333620365Z, Duration: 00:00:00.031
Taint analysis for go: Begin: 2026-09-06T15:50:15.333868018Z, End: 2026-09-06T15:50:15.601480190Z, Duration: 00:00:00.267
Report issues: Begin: 2026-09-06T15:50:15.601532348Z, End: 2026-09-06T15:50:15.611716890Z, Duration: 00:00:00.010
Store cache: Begin: 2026-09-06T15:50:15.612284483Z, End: 2026-09-06T15:50:15.615205328Z, Duration: 00:00:00.002
17:50:15.617 INFO go security sensor peak memory (pre-GC, max allocation pressure): 862 MB
17:50:15.618 INFO go security sensor peak memory (post-GC, max live footprint): 286 MB
17:50:15.618 INFO Sensor GoSecuritySensor [security] (done) | time=2103ms
17:50:15.626 INFO ------------- Run sensors on project
17:50:15.821 INFO Sensor Deterministic Rule Engine for Go [dre]
17:50:15.856 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
17:50:16.252 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-930/.scannerwork/.sonartmp/bridge-dre/bridge
17:50:16.832 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=1010ms
17:50:16.833 INFO Sensor Deterministic Rule Engine for Shell [dre]
17:50:16.837 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
17:50:16.838 INFO Sensor SQL Dialect Detection [dre]
17:50:16.840 INFO Sensor SQL Dialect Detection [dre] (done) | time=2ms
17:50:16.840 INFO Sensor DRE Project Telemetry [dre]
17:50:16.841 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
17:50:16.841 INFO Sensor GoProjectSensor [go]
17:50:16.842 INFO Sensor GoProjectSensor [go] (done) | time=0ms
17:50:16.842 INFO Sensor Sonar Go A3S Context Collector [go]
17:50:16.842 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
17:50:16.842 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
17:50:16.842 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
17:50:16.843 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
17:50:17.097 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
17:50:17.098 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
17:50:17.107 INFO Using embedded Node.js runtime.
17:50:17.108 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
17:50:19.615 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
17:50:19.624 INFO gRPC analyze-project server listening on 127.0.0.1:44573
17:50:19.805 INFO Plugin version: [13.8.0.44569]
17:50:22.008 INFO Found 0 tsconfig.json file(s): []
17:50:22.107 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
17:50:22.181 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
17:50:22.322 INFO 37 source files to be analyzed
17:50:22.322 INFO 37/37 source files have been analyzed
17:50:22.417 INFO JasminAstConsumer done
17:50:22.417 INFO Hit the cache for 0 out of 36
17:50:22.417 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
17:50:22.417 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5576ms
17:50:22.418 INFO Sensor IaC Project Sensor [iac]
17:50:22.419 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
17:50:22.419 INFO Sensor Zero Coverage Sensor
17:50:22.450 INFO Sensor Zero Coverage Sensor (done) | time=30ms
17:50:22.460 INFO ------------- Gather SCA dependencies on project
17:50:22.659 INFO Dependency analysis skipped
17:50:22.689 INFO CPD Executor 2 files had no CPD blocks
17:50:22.689 INFO CPD Executor Calculating CPD for 219 files
17:50:22.767 INFO CPD Executor CPD calculation finished (done) | time=77ms
17:50:22.769 INFO SCM Publisher SCM provider for this project is: git
17:50:22.770 INFO SCM Publisher 48 source files to be analyzed
17:50:23.245 INFO SCM Publisher 48/48 source files have been analyzed (done) | time=474ms
17:50:23.251 INFO SCM revision ID '70dc0648f931f6f7112c6b71b0be485eeae4077f'
17:50:23.328 INFO SCM writing changed lines
17:50:23.331 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:50:23.331 INFO SCM writing changed lines (done) | time=3ms
17:50:23.433 INFO Analysis report generated in 178ms, dir size=1 MB
17:50:23.694 INFO Analysis report compressed in 261ms, zip size=538 KB
17:50:24.164 INFO Analysis report uploaded in 470ms
17:50:24.166 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-165-release-delete-web&resolved=false
17:50:24.166 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
17:50:24.166 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3aeZlysLIlhLigDEl
17:50:24.166 INFO ------------- Upload SCA dependency files
17:50:24.733 INFO Sensor cache published successfully
17:50:25.017 INFO Analysis total time: 25.825 s
17:50:25.017 INFO SonarScanner Engine completed successfully
17:50:25.380 INFO EXECUTION SUCCESS
17:50:25.381 INFO Total time: 33.778s