Build 842 success
sonar on feat-164-deps-status-web · 0f4f9b4c10 · queued 2026-09-06 16:53 UTC · finished 2026-09-06 17:01 UTC · ran 35s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (0f4f9b4c10)
step 1/1 set -eu
19:01:15.101 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
19:01:15.104 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-947/sonar-project.properties
19:01:15.115 INFO SonarScanner CLI 8.1.0.6389
19:01:15.119 INFO Linux 6.12.105+deb13-amd64 amd64
19:01:18.061 INFO Communicating with SonarQube Cloud
19:01:18.062 INFO JRE provisioning: os[linux], arch[x86_64]
19:01:18.878 INFO Starting SonarScanner Engine...
19:01:18.879 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
19:01:21.995 INFO Load global settings
19:01:22.433 INFO Load global settings (done) | time=432ms
19:01:22.524 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
19:01:22.720 INFO Loading required plugins
19:01:22.720 INFO Load plugins index
19:01:22.790 INFO Load plugins index (done) | time=69ms
19:01:22.791 INFO Load/download plugins
19:01:22.865 INFO Load/download plugins (done) | time=72ms
19:01:22.988 INFO Loaded core extensions: sca, a3s, architecture
19:01:23.475 INFO Process project properties
19:01:23.495 INFO Project key: krz_gitbay
19:01:23.495 INFO Base dir: /var/lib/gitbay-runner/work/build-947
19:01:23.496 INFO Working dir: /var/lib/gitbay-runner/work/build-947/.scannerwork
19:01:23.501 INFO Load project settings for component key: 'krz_gitbay'
19:01:23.784 INFO Load project settings for component key: 'krz_gitbay' (done) | time=282ms
19:01:23.804 INFO Check ALM binding of project 'krz_gitbay'
19:01:23.948 INFO Detected project binding: NOT_BOUND
19:01:23.949 INFO Check ALM binding of project 'krz_gitbay' (done) | time=144ms
19:01:23.952 INFO Load branch configuration
19:01:23.953 INFO Load branch configuration (done) | time=0ms
19:01:23.962 INFO Create analysis
19:01:24.153 INFO Branch name: feat-164-deps-status-web, type: short
19:01:24.153 INFO Create analysis (done) | time=191ms
19:01:24.332 INFO Load quality profiles
19:01:24.684 INFO Load quality profiles (done) | time=351ms
19:01:24.796 INFO Load active rules
19:01:25.180 INFO Load active rules (done) | time=385ms
19:01:25.321 INFO Organization key: krz
19:01:25.332 INFO Preprocessing files...
19:01:25.633 INFO 5 languages detected in 444 preprocessed files (done) | time=296ms
19:01:25.633 INFO 560 files ignored because of inclusion/exclusion patterns
19:01:25.633 INFO 3 directories skipped because of exclusion patterns (content not counted)
19:01:25.633 INFO 28 files ignored because of scm ignore settings
19:01:25.660 INFO Loading plugins for detected languages
19:01:25.661 INFO Load/download plugins
19:01:25.745 INFO Load/download plugins (done) | time=84ms
19:01:25.987 INFO Load project repositories
19:01:26.130 INFO Load project repositories (done) | time=141ms
19:01:26.135 INFO SCM collecting changed files in the branch
19:01:26.141 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
19:01:26.142 INFO SCM collecting changed files in the branch (done) | time=8ms
19:01:26.156 INFO Indexing files...
19:01:26.157 INFO Project configuration:
19:01:26.160 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
19:01:26.160 INFO Included tests: **/*_test.go
19:01:26.196 INFO 444 files indexed (done) | time=38ms
19:01:26.199 INFO Quality profile for css: Sonar way essentials
19:01:26.201 INFO Quality profile for go: Sonar way essentials
19:01:26.201 INFO Quality profile for shell: Sonar way essentials
19:01:26.202 INFO Quality profile for web: Sonar way essentials
19:01:26.203 INFO Quality profile for yaml: Sonar way essentials
19:01:26.204 INFO ------------- Run sensors on module gitbay
19:01:26.253 INFO Load metrics repository
19:01:26.321 INFO Load metrics repository (done) | time=66ms
19:01:26.327 INFO Sensor cache enabled
19:01:26.331 INFO Load sensor cache
19:01:26.741 INFO Load sensor cache (1 MB) | time=408ms
19:01:27.117 INFO Reflections took 66 ms to scan 1 urls, producing 30 keys and 295 values
19:01:27.742 INFO Sensor IaC YAML File Type Classification Sensor [iac]
19:01:27.766 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=22ms
19:01:27.767 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
19:01:27.767 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
19:01:27.767 INFO Sensor HTML [web]
19:01:28.201 INFO Sensor HTML [web] (done) | time=432ms
19:01:28.201 INFO Sensor Code Quality and Security for Go [go]
19:01:28.270 INFO 27 folders (376 files) to be analyzed
19:01:36.524 INFO 27/27 folders (376 files) have been analyzed
19:01:36.526 INFO Sensor Code Quality and Security for Go [go] (done) | time=8324ms
19:01:36.526 INFO Sensor IaC CloudFormation Sensor [iac]
19:01:36.527 INFO There are no files to be analyzed for the CloudFormation language
19:01:36.528 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
19:01:36.529 INFO Sensor IaC cfn-lint report Sensor [iac]
19:01:36.530 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
19:01:36.531 INFO Sensor IaC Kustomization Sensor [iac]
19:01:36.531 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
19:01:36.531 INFO Sensor IaC hadolint report Sensor [iac]
19:01:36.532 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
19:01:36.532 INFO Sensor Java Config Sensor [iac]
19:01:36.532 INFO There are no files to be analyzed for the Java language
19:01:36.532 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
19:01:36.532 INFO Sensor IaC Docker Sensor [iac]
19:01:36.532 INFO There are no files to be analyzed for the Docker language
19:01:36.532 INFO Sensor IaC Docker Sensor [iac] (done) | time=3ms
19:01:36.532 INFO Sensor IaC Ansible Sensor [iac]
19:01:36.532 INFO There are no files to be analyzed for the Ansible language
19:01:36.533 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
19:01:36.533 INFO Sensor IaC ansible-lint report Sensor [iac]
19:01:36.534 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
19:01:36.535 INFO Sensor IaC spectral report Sensor [iac]
19:01:36.535 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
19:01:36.536 INFO Sensor IaC GitHub Actions Sensor [iac]
19:01:36.536 INFO There are no files to be analyzed for the GitHub Actions language
19:01:36.536 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
19:01:36.536 INFO Sensor IaC actionlint report Sensor [iac]
19:01:36.536 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
19:01:36.537 INFO Sensor IaC Azure Pipelines Sensor [iac]
19:01:36.537 INFO There are no files to be analyzed for the Azure Pipelines language
19:01:36.537 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
19:01:36.537 INFO Sensor IaC Shell Sensor [iac]
19:01:36.555 INFO 4 source files to be analyzed
19:01:36.605 INFO 4/4 source files have been analyzed
19:01:36.606 INFO Sensor IaC Shell Sensor [iac] (done) | time=70ms
19:01:36.607 INFO Sensor IaC Kubernetes Sensor [iac]
19:01:36.653 INFO There are no files to be analyzed for the Kubernetes language
19:01:36.654 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=47ms
19:01:36.655 INFO Sensor IaC YAML Sensor [iac]
19:01:36.656 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
19:01:36.656 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
19:01:36.657 INFO Sensor Serverless configuration file sensor [security]
19:01:36.658 INFO 0 Serverless function entries were found in the project
19:01:36.661 INFO 0 Serverless function handlers were kept as entrypoints
19:01:36.661 INFO Sensor Serverless configuration file sensor [security] (done) | time=5ms
19:01:36.662 INFO Sensor AWS SAM template file sensor [security]
19:01:36.666 INFO Sensor AWS SAM template file sensor [security] (done) | time=4ms
19:01:36.667 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
19:01:36.684 INFO Available processors: 4
19:01:36.686 INFO Using 4 threads for analysis.
19:01:36.949 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
19:01:37.001 INFO Start fetching files for the text and secrets analysis
19:01:37.009 INFO Using Git CLI to retrieve dirty files
19:01:37.033 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
19:01:37.038 INFO Starting the text and secrets analysis
19:01:37.038 INFO 434 source files to be analyzed for the text and secrets analysis
19:01:37.485 INFO 434/434 source files have been analyzed for the text and secrets analysis
19:01:37.487 INFO Start fetching files for the binary file analysis
19:01:37.488 INFO There are no files to be analyzed for the binary file analysis
19:01:37.494 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=826ms
19:01:37.494 INFO Sensor GoSecuritySensor [security]
19:01:37.499 INFO 9 taint analysis rules enabled.
19:01:38.210 INFO Analyzing 2209 UCFGs to detect vulnerabilities.
19:01:39.143 INFO All rules entry points : 32
19:01:39.143 INFO Retained UCFGs : 130
19:01:39.193 INFO 0 / 130 UCFGs simulated, memory usage: 384 MB
19:01:39.445 INFO 130 / 130 UCFGs simulated, memory usage: 426 MB
19:01:39.450 WARN Failed to find InputFile for __unknown_file, check exclusions.
19:01:39.453 WARN Failed to find InputFile for __unknown_file, check exclusions.
19:01:39.459 INFO go security sensor: Begin: 2026-09-06T17:01:37.497164260Z, End: 2026-09-06T17:01:39.457444900Z, Duration: 00:00:01.960
Resolve files to analyze: Begin: 2026-09-06T17:01:37.499620326Z, End: 2026-09-06T17:01:37.500488252Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-06T17:01:37.500821153Z, End: 2026-09-06T17:01:38.210149358Z, Duration: 00:00:00.709
Load type hierarchy: Begin: 2026-09-06T17:01:37.500825319Z, End: 2026-09-06T17:01:37.505739833Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-06T17:01:37.505801666Z, End: 2026-09-06T17:01:38.210078831Z, Duration: 00:00:00.704
Check cache: Begin: 2026-09-06T17:01:38.210265573Z, End: 2026-09-06T17:01:38.210843042Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T17:01:38.210644042Z, End: 2026-09-06T17:01:38.210663962Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T17:01:38.210864925Z, End: 2026-09-06T17:01:38.810605230Z, Duration: 00:00:00.599
Variable Type Analysis #1: Begin: 2026-09-06T17:01:38.211568643Z, End: 2026-09-06T17:01:38.532575763Z, Duration: 00:00:00.321
Create runtime type propagation graph: Begin: 2026-09-06T17:01:38.212127464Z, End: 2026-09-06T17:01:38.374447671Z, Duration: 00:00:00.162
Run SCC (Tarjan) on 46240 nodes: Begin: 2026-09-06T17:01:38.374806071Z, End: 2026-09-06T17:01:38.436806414Z, Duration: 00:00:00.062
Propagate runtime types to strongly connected components: Begin: 2026-09-06T17:01:38.436960465Z, End: 2026-09-06T17:01:38.532459739Z, Duration: 00:00:00.095
Variable Type Analysis #2: Begin: 2026-09-06T17:01:38.534958998Z, End: 2026-09-06T17:01:38.807757095Z, Duration: 00:00:00.272
Create runtime type propagation graph: Begin: 2026-09-06T17:01:38.534968323Z, End: 2026-09-06T17:01:38.651779260Z, Duration: 00:00:00.116
Run SCC (Tarjan) on 46240 nodes: Begin: 2026-09-06T17:01:38.651891318Z, End: 2026-09-06T17:01:38.751953386Z, Duration: 00:00:00.100
Propagate runtime types to strongly connected components: Begin: 2026-09-06T17:01:38.752197133Z, End: 2026-09-06T17:01:38.806170568Z, Duration: 00:00:00.053
Load config: Begin: 2026-09-06T17:01:38.810653123Z, End: 2026-09-06T17:01:39.029836153Z, Duration: 00:00:00.219
Compute entry points: Begin: 2026-09-06T17:01:39.029990185Z, End: 2026-09-06T17:01:39.141722291Z, Duration: 00:00:00.111
Slice call graph: Begin: 2026-09-06T17:01:39.142033549Z, End: 2026-09-06T17:01:39.144827793Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-06T17:01:39.144888956Z, End: 2026-09-06T17:01:39.188071095Z, Duration: 00:00:00.043
Taint analysis for go: Begin: 2026-09-06T17:01:39.188287310Z, End: 2026-09-06T17:01:39.444578862Z, Duration: 00:00:00.256
Report issues: Begin: 2026-09-06T17:01:39.444637170Z, End: 2026-09-06T17:01:39.453487406Z, Duration: 00:00:00.008
Store cache: Begin: 2026-09-06T17:01:39.453973116Z, End: 2026-09-06T17:01:39.456966370Z, Duration: 00:00:00.002
19:01:39.460 INFO go security sensor peak memory (pre-GC, max allocation pressure): 800 MB
19:01:39.461 INFO go security sensor peak memory (post-GC, max live footprint): 325 MB
19:01:39.462 INFO Sensor GoSecuritySensor [security] (done) | time=1964ms
19:01:39.475 INFO ------------- Run sensors on project
19:01:39.677 INFO Sensor Deterministic Rule Engine for Go [dre]
19:01:39.710 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
19:01:40.011 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-947/.scannerwork/.sonartmp/bridge-dre/bridge
19:01:40.502 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=824ms
19:01:40.503 INFO Sensor Deterministic Rule Engine for Shell [dre]
19:01:40.509 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=7ms
19:01:40.509 INFO Sensor SQL Dialect Detection [dre]
19:01:40.511 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
19:01:40.511 INFO Sensor DRE Project Telemetry [dre]
19:01:40.512 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
19:01:40.513 INFO Sensor GoProjectSensor [go]
19:01:40.513 INFO Sensor GoProjectSensor [go] (done) | time=0ms
19:01:40.513 INFO Sensor Sonar Go A3S Context Collector [go]
19:01:40.513 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
19:01:40.513 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
19:01:40.513 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
19:01:40.513 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
19:01:40.755 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
19:01:40.756 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
19:01:40.772 INFO Using embedded Node.js runtime.
19:01:40.772 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
19:01:43.097 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
19:01:43.106 INFO gRPC analyze-project server listening on 127.0.0.1:37121
19:01:43.275 INFO Plugin version: [13.8.0.44569]
19:01:45.348 INFO Found 0 tsconfig.json file(s): []
19:01:45.423 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
19:01:45.566 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
19:01:45.595 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
19:01:45.610 INFO 38 source files to be analyzed
19:01:45.610 INFO 38/38 source files have been analyzed
19:01:45.661 INFO JasminAstConsumer done
19:01:45.661 INFO Hit the cache for 0 out of 37
19:01:45.661 INFO Miss the cache for 37 out of 37: ANALYSIS_MODE_INELIGIBLE [37/37]
19:01:45.661 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5147ms
19:01:45.662 INFO Sensor IaC Project Sensor [iac]
19:01:45.673 INFO Sensor IaC Project Sensor [iac] (done) | time=9ms
19:01:45.673 INFO Sensor Zero Coverage Sensor
19:01:45.719 INFO Sensor Zero Coverage Sensor (done) | time=48ms
19:01:45.730 INFO ------------- Gather SCA dependencies on project
19:01:45.954 INFO Dependency analysis skipped
19:01:46.001 INFO CPD Executor 2 files had no CPD blocks
19:01:46.001 INFO CPD Executor Calculating CPD for 221 files
19:01:46.101 INFO CPD Executor CPD calculation finished (done) | time=102ms
19:01:46.105 INFO SCM Publisher SCM provider for this project is: git
19:01:46.106 INFO SCM Publisher 60 source files to be analyzed
19:01:46.539 INFO SCM Publisher 60/60 source files have been analyzed (done) | time=432ms
19:01:46.548 INFO SCM revision ID '0f4f9b4c106d2e6f2ba93df83ff3653faead0e8b'
19:01:46.625 INFO SCM writing changed lines
19:01:46.625 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
19:01:46.625 INFO SCM writing changed lines (done) | time=2ms
19:01:46.708 INFO Analysis report generated in 158ms, dir size=1 MB
19:01:46.974 INFO Analysis report compressed in 265ms, zip size=570 KB
19:01:47.384 INFO Analysis report uploaded in 410ms
19:01:47.386 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-164-deps-status-web&resolved=false
19:01:47.388 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
19:01:47.389 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3q0G7BlKrDa6g_S3V
19:01:47.389 INFO ------------- Upload SCA dependency files
19:01:47.976 INFO Sensor cache published successfully
19:01:48.322 INFO Analysis total time: 25.334 s
19:01:48.324 INFO SonarScanner Engine completed successfully
19:01:48.671 INFO EXECUTION SUCCESS
19:01:48.672 INFO Total time: 33.573s