Build 830 success
sonar on feat-174-fork-web · 1d326c416f · queued 2026-09-06 15:17 UTC · finished 2026-09-06 15:58 UTC · ran 35s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (1d326c416f)
step 1/1 set -eu
17:58:14.547 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
17:58:14.549 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-935/sonar-project.properties
17:58:14.561 INFO SonarScanner CLI 8.1.0.6389
17:58:14.566 INFO Linux 6.12.105+deb13-amd64 amd64
17:58:17.497 INFO Communicating with SonarQube Cloud
17:58:17.497 INFO JRE provisioning: os[linux], arch[x86_64]
17:58:18.324 INFO Starting SonarScanner Engine...
17:58:18.325 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
17:58:21.609 INFO Load global settings
17:58:22.027 INFO Load global settings (done) | time=412ms
17:58:22.109 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
17:58:22.261 INFO Loading required plugins
17:58:22.261 INFO Load plugins index
17:58:22.311 INFO Load plugins index (done) | time=54ms
17:58:22.312 INFO Load/download plugins
17:58:22.359 INFO Load/download plugins (done) | time=47ms
17:58:22.472 INFO Loaded core extensions: architecture, sca, a3s
17:58:22.980 INFO Process project properties
17:58:23.001 INFO Project key: krz_gitbay
17:58:23.001 INFO Base dir: /var/lib/gitbay-runner/work/build-935
17:58:23.001 INFO Working dir: /var/lib/gitbay-runner/work/build-935/.scannerwork
17:58:23.007 INFO Load project settings for component key: 'krz_gitbay'
17:58:23.221 INFO Load project settings for component key: 'krz_gitbay' (done) | time=214ms
17:58:23.238 INFO Check ALM binding of project 'krz_gitbay'
17:58:23.393 INFO Detected project binding: NOT_BOUND
17:58:23.394 INFO Check ALM binding of project 'krz_gitbay' (done) | time=155ms
17:58:23.396 INFO Load branch configuration
17:58:23.397 INFO Load branch configuration (done) | time=0ms
17:58:23.400 INFO Create analysis
17:58:23.663 INFO Branch name: feat-174-fork-web, type: short
17:58:23.663 INFO Create analysis (done) | time=262ms
17:58:23.813 INFO Load quality profiles
17:58:24.179 INFO Load quality profiles (done) | time=365ms
17:58:24.301 INFO Load active rules
17:58:24.713 INFO Load active rules (done) | time=408ms
17:58:24.840 INFO Organization key: krz
17:58:24.858 INFO Preprocessing files...
17:58:25.140 INFO 5 languages detected in 442 preprocessed files (done) | time=272ms
17:58:25.140 INFO 558 files ignored because of inclusion/exclusion patterns
17:58:25.140 INFO 3 directories skipped because of exclusion patterns (content not counted)
17:58:25.140 INFO 28 files ignored because of scm ignore settings
17:58:25.148 INFO Loading plugins for detected languages
17:58:25.148 INFO Load/download plugins
17:58:25.219 INFO Load/download plugins (done) | time=70ms
17:58:25.419 INFO Load project repositories
17:58:25.617 INFO Load project repositories (done) | time=195ms
17:58:25.618 INFO SCM collecting changed files in the branch
17:58:25.625 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:58:25.625 INFO SCM collecting changed files in the branch (done) | time=8ms
17:58:25.641 INFO Indexing files...
17:58:25.641 INFO Project configuration:
17:58:25.641 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
17:58:25.641 INFO Included tests: **/*_test.go
17:58:25.690 INFO 442 files indexed (done) | time=51ms
17:58:25.693 INFO Quality profile for css: Sonar way essentials
17:58:25.693 INFO Quality profile for go: Sonar way essentials
17:58:25.693 INFO Quality profile for shell: Sonar way essentials
17:58:25.693 INFO Quality profile for web: Sonar way essentials
17:58:25.694 INFO Quality profile for yaml: Sonar way essentials
17:58:25.696 INFO ------------- Run sensors on module gitbay
17:58:25.748 INFO Load metrics repository
17:58:25.804 INFO Load metrics repository (done) | time=56ms
17:58:25.812 INFO Sensor cache enabled
17:58:25.815 INFO Load sensor cache
17:58:26.275 INFO Load sensor cache (1 MB) | time=459ms
17:58:26.680 INFO Reflections took 58 ms to scan 1 urls, producing 30 keys and 295 values
17:58:27.356 INFO Sensor IaC YAML File Type Classification Sensor [iac]
17:58:27.386 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=29ms
17:58:27.387 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
17:58:27.387 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
17:58:27.387 INFO Sensor HTML [web]
17:58:27.747 INFO Sensor HTML [web] (done) | time=360ms
17:58:27.748 INFO Sensor Code Quality and Security for Go [go]
17:58:27.806 INFO 27 folders (375 files) to be analyzed
17:58:35.897 INFO 27/27 folders (375 files) have been analyzed
17:58:35.897 INFO Sensor Code Quality and Security for Go [go] (done) | time=8149ms
17:58:35.897 INFO Sensor IaC CloudFormation Sensor [iac]
17:58:35.898 INFO There are no files to be analyzed for the CloudFormation language
17:58:35.898 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
17:58:35.899 INFO Sensor IaC cfn-lint report Sensor [iac]
17:58:35.899 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
17:58:35.899 INFO Sensor IaC Kustomization Sensor [iac]
17:58:35.900 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
17:58:35.900 INFO Sensor IaC hadolint report Sensor [iac]
17:58:35.900 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
17:58:35.900 INFO Sensor Java Config Sensor [iac]
17:58:35.901 INFO There are no files to be analyzed for the Java language
17:58:35.901 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
17:58:35.901 INFO Sensor IaC Docker Sensor [iac]
17:58:35.904 INFO There are no files to be analyzed for the Docker language
17:58:35.907 INFO Sensor IaC Docker Sensor [iac] (done) | time=3ms
17:58:35.907 INFO Sensor IaC Ansible Sensor [iac]
17:58:35.908 INFO There are no files to be analyzed for the Ansible language
17:58:35.908 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
17:58:35.908 INFO Sensor IaC ansible-lint report Sensor [iac]
17:58:35.908 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
17:58:35.909 INFO Sensor IaC spectral report Sensor [iac]
17:58:35.909 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
17:58:35.909 INFO Sensor IaC GitHub Actions Sensor [iac]
17:58:35.909 INFO There are no files to be analyzed for the GitHub Actions language
17:58:35.909 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
17:58:35.909 INFO Sensor IaC actionlint report Sensor [iac]
17:58:35.909 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
17:58:35.909 INFO Sensor IaC Azure Pipelines Sensor [iac]
17:58:35.909 INFO There are no files to be analyzed for the Azure Pipelines language
17:58:35.909 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
17:58:35.910 INFO Sensor IaC Shell Sensor [iac]
17:58:35.921 INFO 4 source files to be analyzed
17:58:35.987 INFO 4/4 source files have been analyzed
17:58:35.987 INFO Sensor IaC Shell Sensor [iac] (done) | time=80ms
17:58:35.987 INFO Sensor IaC Kubernetes Sensor [iac]
17:58:36.041 INFO There are no files to be analyzed for the Kubernetes language
17:58:36.044 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=54ms
17:58:36.045 INFO Sensor IaC YAML Sensor [iac]
17:58:36.046 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
17:58:36.046 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
17:58:36.048 INFO Sensor Serverless configuration file sensor [security]
17:58:36.049 INFO 0 Serverless function entries were found in the project
17:58:36.049 INFO 0 Serverless function handlers were kept as entrypoints
17:58:36.049 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
17:58:36.049 INFO Sensor AWS SAM template file sensor [security]
17:58:36.052 INFO Sensor AWS SAM template file sensor [security] (done) | time=7ms
17:58:36.052 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
17:58:36.069 INFO Available processors: 4
17:58:36.070 INFO Using 4 threads for analysis.
17:58:36.385 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
17:58:36.451 INFO Start fetching files for the text and secrets analysis
17:58:36.462 INFO Using Git CLI to retrieve dirty files
17:58:36.491 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
17:58:36.494 INFO Starting the text and secrets analysis
17:58:36.496 INFO 432 source files to be analyzed for the text and secrets analysis
17:58:36.940 INFO 432/432 source files have been analyzed for the text and secrets analysis
17:58:36.942 INFO Start fetching files for the binary file analysis
17:58:36.945 INFO There are no files to be analyzed for the binary file analysis
17:58:36.949 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=896ms
17:58:36.949 INFO Sensor GoSecuritySensor [security]
17:58:36.961 INFO 9 taint analysis rules enabled.
17:58:37.682 INFO Analyzing 2207 UCFGs to detect vulnerabilities.
17:58:38.597 INFO All rules entry points : 31
17:58:38.597 INFO Retained UCFGs : 129
17:58:38.635 INFO 0 / 129 UCFGs simulated, memory usage: 357 MB
17:58:38.878 INFO 129 / 129 UCFGs simulated, memory usage: 400 MB
17:58:38.884 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:58:38.888 WARN Failed to find InputFile for __unknown_file, check exclusions.
17:58:38.893 INFO go security sensor: Begin: 2026-09-06T15:58:36.955008971Z, End: 2026-09-06T15:58:38.891820837Z, Duration: 00:00:01.936
Resolve files to analyze: Begin: 2026-09-06T15:58:36.957412146Z, End: 2026-09-06T15:58:36.958287214Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-06T15:58:36.958501115Z, End: 2026-09-06T15:58:37.682218907Z, Duration: 00:00:00.723
Load type hierarchy: Begin: 2026-09-06T15:58:36.958504960Z, End: 2026-09-06T15:58:36.963346666Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-06T15:58:36.963413596Z, End: 2026-09-06T15:58:37.682098596Z, Duration: 00:00:00.718
Check cache: Begin: 2026-09-06T15:58:37.682330845Z, End: 2026-09-06T15:58:37.682818519Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T15:58:37.682618407Z, End: 2026-09-06T15:58:37.682633710Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T15:58:37.682842344Z, End: 2026-09-06T15:58:38.216526266Z, Duration: 00:00:00.533
Variable Type Analysis #1: Begin: 2026-09-06T15:58:37.683412032Z, End: 2026-09-06T15:58:37.956155335Z, Duration: 00:00:00.272
Create runtime type propagation graph: Begin: 2026-09-06T15:58:37.683881799Z, End: 2026-09-06T15:58:37.815762729Z, Duration: 00:00:00.131
Run SCC (Tarjan) on 46257 nodes: Begin: 2026-09-06T15:58:37.816171684Z, End: 2026-09-06T15:58:37.882833615Z, Duration: 00:00:00.066
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:58:37.882960836Z, End: 2026-09-06T15:58:37.956043738Z, Duration: 00:00:00.073
Variable Type Analysis #2: Begin: 2026-09-06T15:58:37.958372231Z, End: 2026-09-06T15:58:38.213902538Z, Duration: 00:00:00.255
Create runtime type propagation graph: Begin: 2026-09-06T15:58:37.958381204Z, End: 2026-09-06T15:58:38.085220861Z, Duration: 00:00:00.126
Run SCC (Tarjan) on 46257 nodes: Begin: 2026-09-06T15:58:38.085327381Z, End: 2026-09-06T15:58:38.168814646Z, Duration: 00:00:00.083
Propagate runtime types to strongly connected components: Begin: 2026-09-06T15:58:38.169110020Z, End: 2026-09-06T15:58:38.213798111Z, Duration: 00:00:00.044
Load config: Begin: 2026-09-06T15:58:38.216597192Z, End: 2026-09-06T15:58:38.425284586Z, Duration: 00:00:00.208
Compute entry points: Begin: 2026-09-06T15:58:38.425436545Z, End: 2026-09-06T15:58:38.594183409Z, Duration: 00:00:00.168
Slice call graph: Begin: 2026-09-06T15:58:38.594433826Z, End: 2026-09-06T15:58:38.597645158Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-06T15:58:38.597704797Z, End: 2026-09-06T15:58:38.629019820Z, Duration: 00:00:00.031
Taint analysis for go: Begin: 2026-09-06T15:58:38.629263747Z, End: 2026-09-06T15:58:38.878019022Z, Duration: 00:00:00.248
Report issues: Begin: 2026-09-06T15:58:38.878069227Z, End: 2026-09-06T15:58:38.887459605Z, Duration: 00:00:00.009
Store cache: Begin: 2026-09-06T15:58:38.887912486Z, End: 2026-09-06T15:58:38.891341465Z, Duration: 00:00:00.003
17:58:38.896 INFO go security sensor peak memory (pre-GC, max allocation pressure): 659 MB
17:58:38.896 INFO go security sensor peak memory (post-GC, max live footprint): 321 MB
17:58:38.896 INFO Sensor GoSecuritySensor [security] (done) | time=1944ms
17:58:38.902 INFO ------------- Run sensors on project
17:58:39.095 INFO Sensor Deterministic Rule Engine for Go [dre]
17:58:39.128 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
17:58:39.435 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-935/.scannerwork/.sonartmp/bridge-dre/bridge
17:58:39.878 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=783ms
17:58:39.879 INFO Sensor Deterministic Rule Engine for Shell [dre]
17:58:39.884 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
17:58:39.885 INFO Sensor SQL Dialect Detection [dre]
17:58:39.888 INFO Sensor SQL Dialect Detection [dre] (done) | time=2ms
17:58:39.888 INFO Sensor DRE Project Telemetry [dre]
17:58:39.888 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
17:58:39.888 INFO Sensor GoProjectSensor [go]
17:58:39.889 INFO Sensor GoProjectSensor [go] (done) | time=0ms
17:58:39.889 INFO Sensor Sonar Go A3S Context Collector [go]
17:58:39.889 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
17:58:39.889 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
17:58:39.889 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
17:58:39.889 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
17:58:40.101 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
17:58:40.104 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
17:58:40.112 INFO Using embedded Node.js runtime.
17:58:40.112 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
17:58:42.170 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
17:58:42.181 INFO gRPC analyze-project server listening on 127.0.0.1:38119
17:58:42.365 INFO Plugin version: [13.8.0.44569]
17:58:44.495 INFO Found 0 tsconfig.json file(s): []
17:58:44.562 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
17:58:44.733 INFO 37 source files to be analyzed
17:58:44.733 INFO 37/37 source files have been analyzed
17:58:44.758 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
17:58:44.815 INFO JasminAstConsumer done
17:58:44.815 INFO Hit the cache for 0 out of 36
17:58:44.815 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
17:58:44.815 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=4924ms
17:58:44.815 INFO Sensor IaC Project Sensor [iac]
17:58:44.819 INFO Sensor IaC Project Sensor [iac] (done) | time=4ms
17:58:44.820 INFO Sensor Zero Coverage Sensor
17:58:44.872 INFO Sensor Zero Coverage Sensor (done) | time=51ms
17:58:44.885 INFO ------------- Gather SCA dependencies on project
17:58:45.049 INFO Dependency analysis skipped
17:58:45.085 INFO CPD Executor 2 files had no CPD blocks
17:58:45.085 INFO CPD Executor Calculating CPD for 219 files
17:58:45.148 INFO CPD Executor CPD calculation finished (done) | time=63ms
17:58:45.152 INFO SCM Publisher SCM provider for this project is: git
17:58:45.155 INFO SCM Publisher 52 source files to be analyzed
17:58:45.647 INFO SCM Publisher 52/52 source files have been analyzed (done) | time=491ms
17:58:45.654 INFO SCM revision ID '1d326c416fdde7a7d02dab75c01e113c3bf13c9f'
17:58:45.729 INFO SCM writing changed lines
17:58:45.732 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
17:58:45.732 INFO SCM writing changed lines (done) | time=3ms
17:58:45.819 INFO Analysis report generated in 163ms, dir size=1 MB
17:58:46.074 INFO Analysis report compressed in 254ms, zip size=581 KB
17:58:46.380 INFO Analysis report uploaded in 307ms
17:58:46.382 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-174-fork-web&resolved=false
17:58:46.383 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
17:58:46.383 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3cZAwg6Fhx6Sn2MNA
17:58:46.383 INFO ------------- Upload SCA dependency files
17:58:46.999 INFO Sensor cache published successfully
17:58:47.255 INFO Analysis total time: 24.783 s
17:58:47.258 INFO SonarScanner Engine completed successfully
17:58:47.612 INFO EXECUTION SUCCESS
17:58:47.614 INFO Total time: 33.068s