Build 834 success
sonar on feat-166-account-export-web · 2867b44a48 · queued 2026-09-06 15:17 UTC · finished 2026-09-06 16:07 UTC · ran 34s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (2867b44a48)
step 1/1 set -eu
18:06:37.467 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
18:06:37.471 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-939/sonar-project.properties
18:06:37.482 INFO SonarScanner CLI 8.1.0.6389
18:06:37.486 INFO Linux 6.12.105+deb13-amd64 amd64
18:06:40.405 INFO Communicating with SonarQube Cloud
18:06:40.405 INFO JRE provisioning: os[linux], arch[x86_64]
18:06:41.419 INFO Starting SonarScanner Engine...
18:06:41.419 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
18:06:44.579 INFO Load global settings
18:06:44.935 INFO Load global settings (done) | time=349ms
18:06:45.020 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
18:06:45.182 INFO Loading required plugins
18:06:45.183 INFO Load plugins index
18:06:45.243 INFO Load plugins index (done) | time=61ms
18:06:45.244 INFO Load/download plugins
18:06:45.290 INFO Load/download plugins (done) | time=45ms
18:06:45.398 INFO Loaded core extensions: sca, a3s, architecture
18:06:45.854 INFO Process project properties
18:06:45.874 INFO Project key: krz_gitbay
18:06:45.874 INFO Base dir: /var/lib/gitbay-runner/work/build-939
18:06:45.874 INFO Working dir: /var/lib/gitbay-runner/work/build-939/.scannerwork
18:06:45.880 INFO Load project settings for component key: 'krz_gitbay'
18:06:46.165 INFO Load project settings for component key: 'krz_gitbay' (done) | time=284ms
18:06:46.186 INFO Check ALM binding of project 'krz_gitbay'
18:06:46.324 INFO Detected project binding: NOT_BOUND
18:06:46.325 INFO Check ALM binding of project 'krz_gitbay' (done) | time=138ms
18:06:46.333 INFO Load branch configuration
18:06:46.334 INFO Load branch configuration (done) | time=1ms
18:06:46.340 INFO Create analysis
18:06:46.523 INFO Branch name: feat-166-account-export-web, type: short
18:06:46.524 INFO Create analysis (done) | time=181ms
18:06:46.681 INFO Load quality profiles
18:06:47.019 INFO Load quality profiles (done) | time=338ms
18:06:47.157 INFO Load active rules
18:06:47.628 INFO Load active rules (done) | time=473ms
18:06:47.765 INFO Organization key: krz
18:06:47.780 INFO Preprocessing files...
18:06:48.110 INFO 5 languages detected in 440 preprocessed files (done) | time=329ms
18:06:48.110 INFO 556 files ignored because of inclusion/exclusion patterns
18:06:48.111 INFO 3 directories skipped because of exclusion patterns (content not counted)
18:06:48.111 INFO 28 files ignored because of scm ignore settings
18:06:48.123 INFO Loading plugins for detected languages
18:06:48.124 INFO Load/download plugins
18:06:48.190 INFO Load/download plugins (done) | time=67ms
18:06:48.407 INFO Load project repositories
18:06:48.576 INFO Load project repositories (done) | time=172ms
18:06:48.579 INFO SCM collecting changed files in the branch
18:06:48.588 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
18:06:48.589 INFO SCM collecting changed files in the branch (done) | time=9ms
18:06:48.605 INFO Indexing files...
18:06:48.605 INFO Project configuration:
18:06:48.605 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
18:06:48.606 INFO Included tests: **/*_test.go
18:06:48.642 INFO 440 files indexed (done) | time=36ms
18:06:48.645 INFO Quality profile for css: Sonar way essentials
18:06:48.646 INFO Quality profile for go: Sonar way essentials
18:06:48.647 INFO Quality profile for shell: Sonar way essentials
18:06:48.649 INFO Quality profile for web: Sonar way essentials
18:06:48.652 INFO Quality profile for yaml: Sonar way essentials
18:06:48.653 INFO ------------- Run sensors on module gitbay
18:06:48.741 INFO Load metrics repository
18:06:48.799 INFO Load metrics repository (done) | time=58ms
18:06:48.806 INFO Sensor cache enabled
18:06:48.809 INFO Load sensor cache
18:06:49.137 INFO Load sensor cache (1 MB) | time=327ms
18:06:49.611 INFO Reflections took 82 ms to scan 1 urls, producing 30 keys and 295 values
18:06:50.303 INFO Sensor IaC YAML File Type Classification Sensor [iac]
18:06:50.344 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=39ms
18:06:50.346 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
18:06:50.347 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
18:06:50.347 INFO Sensor HTML [web]
18:06:50.713 INFO Sensor HTML [web] (done) | time=368ms
18:06:50.713 INFO Sensor Code Quality and Security for Go [go]
18:06:50.784 INFO 27 folders (373 files) to be analyzed
18:06:58.818 INFO 27/27 folders (373 files) have been analyzed
18:06:58.818 INFO Sensor Code Quality and Security for Go [go] (done) | time=8105ms
18:06:58.821 INFO Sensor IaC CloudFormation Sensor [iac]
18:06:58.821 INFO There are no files to be analyzed for the CloudFormation language
18:06:58.821 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
18:06:58.821 INFO Sensor IaC cfn-lint report Sensor [iac]
18:06:58.821 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
18:06:58.822 INFO Sensor IaC Kustomization Sensor [iac]
18:06:58.822 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
18:06:58.822 INFO Sensor IaC hadolint report Sensor [iac]
18:06:58.822 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
18:06:58.822 INFO Sensor Java Config Sensor [iac]
18:06:58.822 INFO There are no files to be analyzed for the Java language
18:06:58.822 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
18:06:58.822 INFO Sensor IaC Docker Sensor [iac]
18:06:58.823 INFO There are no files to be analyzed for the Docker language
18:06:58.823 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
18:06:58.823 INFO Sensor IaC Ansible Sensor [iac]
18:06:58.823 INFO There are no files to be analyzed for the Ansible language
18:06:58.823 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
18:06:58.823 INFO Sensor IaC ansible-lint report Sensor [iac]
18:06:58.823 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
18:06:58.823 INFO Sensor IaC spectral report Sensor [iac]
18:06:58.824 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
18:06:58.824 INFO Sensor IaC GitHub Actions Sensor [iac]
18:06:58.824 INFO There are no files to be analyzed for the GitHub Actions language
18:06:58.824 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
18:06:58.824 INFO Sensor IaC actionlint report Sensor [iac]
18:06:58.824 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
18:06:58.824 INFO Sensor IaC Azure Pipelines Sensor [iac]
18:06:58.825 INFO There are no files to be analyzed for the Azure Pipelines language
18:06:58.825 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
18:06:58.825 INFO Sensor IaC Shell Sensor [iac]
18:06:58.835 INFO 4 source files to be analyzed
18:06:58.886 INFO 4/4 source files have been analyzed
18:06:58.893 INFO Sensor IaC Shell Sensor [iac] (done) | time=61ms
18:06:58.893 INFO Sensor IaC Kubernetes Sensor [iac]
18:06:58.935 INFO There are no files to be analyzed for the Kubernetes language
18:06:58.935 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=47ms
18:06:58.935 INFO Sensor IaC YAML Sensor [iac]
18:06:58.935 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
18:06:58.935 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
18:06:58.935 INFO Sensor Serverless configuration file sensor [security]
18:06:58.936 INFO 0 Serverless function entries were found in the project
18:06:58.937 INFO 0 Serverless function handlers were kept as entrypoints
18:06:58.937 INFO Sensor Serverless configuration file sensor [security] (done) | time=1ms
18:06:58.937 INFO Sensor AWS SAM template file sensor [security]
18:06:58.945 INFO Sensor AWS SAM template file sensor [security] (done) | time=8ms
18:06:58.946 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
18:06:58.964 INFO Available processors: 4
18:06:58.969 INFO Using 4 threads for analysis.
18:06:59.269 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
18:06:59.325 INFO Start fetching files for the text and secrets analysis
18:06:59.339 INFO Using Git CLI to retrieve dirty files
18:06:59.361 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
18:06:59.362 INFO Starting the text and secrets analysis
18:06:59.364 INFO 430 source files to be analyzed for the text and secrets analysis
18:06:59.762 INFO 430/430 source files have been analyzed for the text and secrets analysis
18:06:59.765 INFO Start fetching files for the binary file analysis
18:06:59.769 INFO There are no files to be analyzed for the binary file analysis
18:06:59.773 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=827ms
18:06:59.773 INFO Sensor GoSecuritySensor [security]
18:06:59.778 INFO 9 taint analysis rules enabled.
18:07:00.503 INFO Analyzing 2203 UCFGs to detect vulnerabilities.
18:07:01.485 INFO All rules entry points : 31
18:07:01.485 INFO Retained UCFGs : 129
18:07:01.520 INFO 0 / 129 UCFGs simulated, memory usage: 318 MB
18:07:01.787 INFO 129 / 129 UCFGs simulated, memory usage: 360 MB
18:07:01.793 WARN Failed to find InputFile for __unknown_file, check exclusions.
18:07:01.799 WARN Failed to find InputFile for __unknown_file, check exclusions.
18:07:01.805 INFO go security sensor: Begin: 2026-09-06T16:06:59.776134449Z, End: 2026-09-06T16:07:01.802357778Z, Duration: 00:00:02.026
Resolve files to analyze: Begin: 2026-09-06T16:06:59.779179741Z, End: 2026-09-06T16:06:59.780062189Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-06T16:06:59.780275499Z, End: 2026-09-06T16:07:00.503163305Z, Duration: 00:00:00.722
Load type hierarchy: Begin: 2026-09-06T16:06:59.780279836Z, End: 2026-09-06T16:06:59.784984394Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-06T16:06:59.785044925Z, End: 2026-09-06T16:07:00.503086049Z, Duration: 00:00:00.718
Check cache: Begin: 2026-09-06T16:07:00.503284137Z, End: 2026-09-06T16:07:00.503766512Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T16:07:00.503568275Z, End: 2026-09-06T16:07:00.503583998Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T16:07:00.503790068Z, End: 2026-09-06T16:07:01.055959320Z, Duration: 00:00:00.552
Variable Type Analysis #1: Begin: 2026-09-06T16:07:00.504126334Z, End: 2026-09-06T16:07:00.801626439Z, Duration: 00:00:00.297
Create runtime type propagation graph: Begin: 2026-09-06T16:07:00.504612235Z, End: 2026-09-06T16:07:00.648808526Z, Duration: 00:00:00.144
Run SCC (Tarjan) on 46080 nodes: Begin: 2026-09-06T16:07:00.649240025Z, End: 2026-09-06T16:07:00.710054571Z, Duration: 00:00:00.060
Propagate runtime types to strongly connected components: Begin: 2026-09-06T16:07:00.710192006Z, End: 2026-09-06T16:07:00.801504655Z, Duration: 00:00:00.091
Variable Type Analysis #2: Begin: 2026-09-06T16:07:00.804109144Z, End: 2026-09-06T16:07:01.054017308Z, Duration: 00:00:00.249
Create runtime type propagation graph: Begin: 2026-09-06T16:07:00.804120201Z, End: 2026-09-06T16:07:00.904035482Z, Duration: 00:00:00.099
Run SCC (Tarjan) on 46080 nodes: Begin: 2026-09-06T16:07:00.904131807Z, End: 2026-09-06T16:07:01.000847745Z, Duration: 00:00:00.096
Propagate runtime types to strongly connected components: Begin: 2026-09-06T16:07:01.000963440Z, End: 2026-09-06T16:07:01.053915596Z, Duration: 00:00:00.052
Load config: Begin: 2026-09-06T16:07:01.056027012Z, End: 2026-09-06T16:07:01.317418393Z, Duration: 00:00:00.261
Compute entry points: Begin: 2026-09-06T16:07:01.317612023Z, End: 2026-09-06T16:07:01.481694454Z, Duration: 00:00:00.164
Slice call graph: Begin: 2026-09-06T16:07:01.481965441Z, End: 2026-09-06T16:07:01.485172857Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-06T16:07:01.485261139Z, End: 2026-09-06T16:07:01.518252424Z, Duration: 00:00:00.032
Taint analysis for go: Begin: 2026-09-06T16:07:01.518463903Z, End: 2026-09-06T16:07:01.787432092Z, Duration: 00:00:00.268
Report issues: Begin: 2026-09-06T16:07:01.787501797Z, End: 2026-09-06T16:07:01.797917528Z, Duration: 00:00:00.010
Store cache: Begin: 2026-09-06T16:07:01.798388095Z, End: 2026-09-06T16:07:01.801885317Z, Duration: 00:00:00.003
18:07:01.805 INFO go security sensor peak memory (pre-GC, max allocation pressure): 788 MB
18:07:01.805 INFO go security sensor peak memory (post-GC, max live footprint): 350 MB
18:07:01.805 INFO Sensor GoSecuritySensor [security] (done) | time=2030ms
18:07:01.810 INFO ------------- Run sensors on project
18:07:02.014 INFO Sensor Deterministic Rule Engine for Go [dre]
18:07:02.055 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
18:07:02.367 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-939/.scannerwork/.sonartmp/bridge-dre/bridge
18:07:02.861 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=846ms
18:07:02.862 INFO Sensor Deterministic Rule Engine for Shell [dre]
18:07:02.867 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=5ms
18:07:02.867 INFO Sensor SQL Dialect Detection [dre]
18:07:02.870 INFO Sensor SQL Dialect Detection [dre] (done) | time=2ms
18:07:02.872 INFO Sensor DRE Project Telemetry [dre]
18:07:02.872 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
18:07:02.873 INFO Sensor GoProjectSensor [go]
18:07:02.876 INFO Sensor GoProjectSensor [go] (done) | time=1ms
18:07:02.876 INFO Sensor Sonar Go A3S Context Collector [go]
18:07:02.877 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
18:07:02.877 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
18:07:02.877 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
18:07:02.877 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
18:07:03.100 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
18:07:03.100 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
18:07:03.108 INFO Using embedded Node.js runtime.
18:07:03.108 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
18:07:05.225 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
18:07:05.234 INFO gRPC analyze-project server listening on 127.0.0.1:33549
18:07:05.407 INFO Plugin version: [13.8.0.44569]
18:07:07.513 INFO Found 0 tsconfig.json file(s): []
18:07:07.579 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
18:07:07.602 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
18:07:07.773 INFO 37 source files to be analyzed
18:07:07.774 INFO 37/37 source files have been analyzed
18:07:07.824 INFO JasminAstConsumer done
18:07:07.825 INFO Hit the cache for 0 out of 36
18:07:07.829 INFO Miss the cache for 36 out of 36: ANALYSIS_MODE_INELIGIBLE [36/36]
18:07:07.830 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=4953ms
18:07:07.830 INFO Sensor IaC Project Sensor [iac]
18:07:07.853 INFO Sensor IaC Project Sensor [iac] (done) | time=21ms
18:07:07.853 INFO Sensor Zero Coverage Sensor
18:07:07.903 INFO Sensor Zero Coverage Sensor (done) | time=50ms
18:07:07.912 INFO ------------- Gather SCA dependencies on project
18:07:08.037 INFO Dependency analysis skipped
18:07:08.061 INFO CPD Executor 2 files had no CPD blocks
18:07:08.062 INFO CPD Executor Calculating CPD for 219 files
18:07:08.155 INFO CPD Executor CPD calculation finished (done) | time=93ms
18:07:08.156 INFO SCM Publisher SCM provider for this project is: git
18:07:08.159 INFO SCM Publisher 49 source files to be analyzed
18:07:08.608 INFO SCM Publisher 49/49 source files have been analyzed (done) | time=450ms
18:07:08.615 INFO SCM revision ID '2867b44a48ea8afa6b7c21d5e1d69272a7b235fa'
18:07:08.682 INFO SCM writing changed lines
18:07:08.684 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
18:07:08.685 INFO SCM writing changed lines (done) | time=2ms
18:07:08.768 INFO Analysis report generated in 150ms, dir size=1 MB
18:07:09.007 INFO Analysis report compressed in 238ms, zip size=542 KB
18:07:09.332 INFO Analysis report uploaded in 325ms
18:07:09.334 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-166-account-export-web&resolved=false
18:07:09.334 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
18:07:09.335 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3eTzSKbaNl224kV_j
18:07:09.335 INFO ------------- Upload SCA dependency files
18:07:09.914 INFO Sensor cache published successfully
18:07:10.164 INFO Analysis total time: 24.764 s
18:07:10.166 INFO SonarScanner Engine completed successfully
18:07:10.516 INFO EXECUTION SUCCESS
18:07:10.517 INFO Total time: 33.051s