Build 850 success
sonar on feat-168-mr-from-fork-web · f1cc68cb41 · queued 2026-09-06 16:53 UTC · finished 2026-09-06 17:18 UTC · ran 34s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (f1cc68cb41)
step 1/1 set -eu
19:18:03.972 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
19:18:03.982 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-955/sonar-project.properties
19:18:03.993 INFO SonarScanner CLI 8.1.0.6389
19:18:03.997 INFO Linux 6.12.105+deb13-amd64 amd64
19:18:06.789 INFO Communicating with SonarQube Cloud
19:18:06.790 INFO JRE provisioning: os[linux], arch[x86_64]
19:18:07.530 INFO Starting SonarScanner Engine...
19:18:07.531 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
19:18:10.803 INFO Load global settings
19:18:11.227 INFO Load global settings (done) | time=418ms
19:18:11.322 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
19:18:11.521 INFO Loading required plugins
19:18:11.521 INFO Load plugins index
19:18:11.586 INFO Load plugins index (done) | time=67ms
19:18:11.593 INFO Load/download plugins
19:18:11.659 INFO Load/download plugins (done) | time=72ms
19:18:11.785 INFO Loaded core extensions: sca, a3s, architecture
19:18:12.281 INFO Process project properties
19:18:12.309 INFO Project key: krz_gitbay
19:18:12.310 INFO Base dir: /var/lib/gitbay-runner/work/build-955
19:18:12.310 INFO Working dir: /var/lib/gitbay-runner/work/build-955/.scannerwork
19:18:12.316 INFO Load project settings for component key: 'krz_gitbay'
19:18:12.582 INFO Load project settings for component key: 'krz_gitbay' (done) | time=266ms
19:18:12.609 INFO Check ALM binding of project 'krz_gitbay'
19:18:12.749 INFO Detected project binding: NOT_BOUND
19:18:12.750 INFO Check ALM binding of project 'krz_gitbay' (done) | time=140ms
19:18:12.754 INFO Load branch configuration
19:18:12.756 INFO Load branch configuration (done) | time=1ms
19:18:12.766 INFO Create analysis
19:18:13.002 INFO Branch name: feat-168-mr-from-fork-web, type: short
19:18:13.003 INFO Create analysis (done) | time=235ms
19:18:13.244 INFO Load quality profiles
19:18:13.581 INFO Load quality profiles (done) | time=337ms
19:18:13.685 INFO Load active rules
19:18:14.099 INFO Load active rules (done) | time=418ms
19:18:14.227 INFO Organization key: krz
19:18:14.243 INFO Preprocessing files...
19:18:14.447 INFO 5 languages detected in 445 preprocessed files (done) | time=203ms
19:18:14.448 INFO 561 files ignored because of inclusion/exclusion patterns
19:18:14.448 INFO 3 directories skipped because of exclusion patterns (content not counted)
19:18:14.448 INFO 28 files ignored because of scm ignore settings
19:18:14.459 INFO Loading plugins for detected languages
19:18:14.459 INFO Load/download plugins
19:18:14.513 INFO Load/download plugins (done) | time=53ms
19:18:14.701 INFO Load project repositories
19:18:14.820 INFO Load project repositories (done) | time=118ms
19:18:14.824 INFO SCM collecting changed files in the branch
19:18:14.834 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
19:18:14.834 INFO SCM collecting changed files in the branch (done) | time=11ms
19:18:14.849 INFO Indexing files...
19:18:14.850 INFO Project configuration:
19:18:14.850 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
19:18:14.850 INFO Included tests: **/*_test.go
19:18:14.889 INFO 445 files indexed (done) | time=37ms
19:18:14.889 INFO Quality profile for css: Sonar way essentials
19:18:14.889 INFO Quality profile for go: Sonar way essentials
19:18:14.889 INFO Quality profile for shell: Sonar way essentials
19:18:14.889 INFO Quality profile for web: Sonar way essentials
19:18:14.889 INFO Quality profile for yaml: Sonar way essentials
19:18:14.889 INFO ------------- Run sensors on module gitbay
19:18:14.961 INFO Load metrics repository
19:18:15.006 INFO Load metrics repository (done) | time=49ms
19:18:15.017 INFO Sensor cache enabled
19:18:15.021 INFO Load sensor cache
19:18:15.394 INFO Load sensor cache (1 MB) | time=372ms
19:18:15.778 INFO Reflections took 62 ms to scan 1 urls, producing 30 keys and 295 values
19:18:16.399 INFO Sensor IaC YAML File Type Classification Sensor [iac]
19:18:16.425 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=25ms
19:18:16.425 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
19:18:16.425 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
19:18:16.426 INFO Sensor HTML [web]
19:18:16.869 INFO Sensor HTML [web] (done) | time=441ms
19:18:16.869 INFO Sensor Code Quality and Security for Go [go]
19:18:16.938 INFO 27 folders (377 files) to be analyzed
19:18:25.108 INFO 27/27 folders (377 files) have been analyzed
19:18:25.108 INFO Sensor Code Quality and Security for Go [go] (done) | time=8240ms
19:18:25.109 INFO Sensor IaC CloudFormation Sensor [iac]
19:18:25.109 INFO There are no files to be analyzed for the CloudFormation language
19:18:25.109 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
19:18:25.109 INFO Sensor IaC cfn-lint report Sensor [iac]
19:18:25.109 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
19:18:25.110 INFO Sensor IaC Kustomization Sensor [iac]
19:18:25.110 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
19:18:25.111 INFO Sensor IaC hadolint report Sensor [iac]
19:18:25.111 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
19:18:25.111 INFO Sensor Java Config Sensor [iac]
19:18:25.111 INFO There are no files to be analyzed for the Java language
19:18:25.111 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
19:18:25.112 INFO Sensor IaC Docker Sensor [iac]
19:18:25.114 INFO There are no files to be analyzed for the Docker language
19:18:25.114 INFO Sensor IaC Docker Sensor [iac] (done) | time=2ms
19:18:25.114 INFO Sensor IaC Ansible Sensor [iac]
19:18:25.114 INFO There are no files to be analyzed for the Ansible language
19:18:25.114 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
19:18:25.114 INFO Sensor IaC ansible-lint report Sensor [iac]
19:18:25.114 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
19:18:25.114 INFO Sensor IaC spectral report Sensor [iac]
19:18:25.120 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
19:18:25.120 INFO Sensor IaC GitHub Actions Sensor [iac]
19:18:25.120 INFO There are no files to be analyzed for the GitHub Actions language
19:18:25.120 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
19:18:25.120 INFO Sensor IaC actionlint report Sensor [iac]
19:18:25.120 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
19:18:25.121 INFO Sensor IaC Azure Pipelines Sensor [iac]
19:18:25.121 INFO There are no files to be analyzed for the Azure Pipelines language
19:18:25.121 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
19:18:25.121 INFO Sensor IaC Shell Sensor [iac]
19:18:25.131 INFO 4 source files to be analyzed
19:18:25.199 INFO 4/4 source files have been analyzed
19:18:25.200 INFO Sensor IaC Shell Sensor [iac] (done) | time=82ms
19:18:25.201 INFO Sensor IaC Kubernetes Sensor [iac]
19:18:25.255 INFO There are no files to be analyzed for the Kubernetes language
19:18:25.255 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=55ms
19:18:25.255 INFO Sensor IaC YAML Sensor [iac]
19:18:25.255 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
19:18:25.255 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
19:18:25.256 INFO Sensor Serverless configuration file sensor [security]
19:18:25.257 INFO 0 Serverless function entries were found in the project
19:18:25.257 INFO 0 Serverless function handlers were kept as entrypoints
19:18:25.257 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
19:18:25.260 INFO Sensor AWS SAM template file sensor [security]
19:18:25.268 INFO Sensor AWS SAM template file sensor [security] (done) | time=5ms
19:18:25.269 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
19:18:25.286 INFO Available processors: 4
19:18:25.287 INFO Using 4 threads for analysis.
19:18:25.584 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
19:18:25.642 INFO Start fetching files for the text and secrets analysis
19:18:25.652 INFO Using Git CLI to retrieve dirty files
19:18:25.675 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
19:18:25.677 INFO Starting the text and secrets analysis
19:18:25.679 INFO 435 source files to be analyzed for the text and secrets analysis
19:18:26.087 INFO 435/435 source files have been analyzed for the text and secrets analysis
19:18:26.091 INFO Start fetching files for the binary file analysis
19:18:26.091 INFO There are no files to be analyzed for the binary file analysis
19:18:26.102 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=837ms
19:18:26.102 INFO Sensor GoSecuritySensor [security]
19:18:26.107 INFO 9 taint analysis rules enabled.
19:18:26.847 INFO Analyzing 2213 UCFGs to detect vulnerabilities.
19:18:27.732 INFO All rules entry points : 32
19:18:27.737 INFO Retained UCFGs : 130
19:18:27.778 INFO 0 / 130 UCFGs simulated, memory usage: 439 MB
19:18:28.025 INFO 130 / 130 UCFGs simulated, memory usage: 481 MB
19:18:28.031 WARN Failed to find InputFile for __unknown_file, check exclusions.
19:18:28.033 WARN Failed to find InputFile for __unknown_file, check exclusions.
19:18:28.039 INFO go security sensor: Begin: 2026-09-06T17:18:26.104614465Z, End: 2026-09-06T17:18:28.037699131Z, Duration: 00:00:01.933
Resolve files to analyze: Begin: 2026-09-06T17:18:26.107549762Z, End: 2026-09-06T17:18:26.108758511Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-06T17:18:26.109005943Z, End: 2026-09-06T17:18:26.846509715Z, Duration: 00:00:00.737
Load type hierarchy: Begin: 2026-09-06T17:18:26.109010520Z, End: 2026-09-06T17:18:26.114303463Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-06T17:18:26.114382411Z, End: 2026-09-06T17:18:26.846416696Z, Duration: 00:00:00.732
Check cache: Begin: 2026-09-06T17:18:26.847403129Z, End: 2026-09-06T17:18:26.848290595Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T17:18:26.847991665Z, End: 2026-09-06T17:18:26.848012577Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T17:18:26.848320379Z, End: 2026-09-06T17:18:27.395633443Z, Duration: 00:00:00.547
Variable Type Analysis #1: Begin: 2026-09-06T17:18:26.848685378Z, End: 2026-09-06T17:18:27.129601402Z, Duration: 00:00:00.280
Create runtime type propagation graph: Begin: 2026-09-06T17:18:26.849147063Z, End: 2026-09-06T17:18:26.980338853Z, Duration: 00:00:00.131
Run SCC (Tarjan) on 46456 nodes: Begin: 2026-09-06T17:18:26.980767088Z, End: 2026-09-06T17:18:27.041164611Z, Duration: 00:00:00.060
Propagate runtime types to strongly connected components: Begin: 2026-09-06T17:18:27.041322608Z, End: 2026-09-06T17:18:27.129445868Z, Duration: 00:00:00.088
Variable Type Analysis #2: Begin: 2026-09-06T17:18:27.131791087Z, End: 2026-09-06T17:18:27.393287633Z, Duration: 00:00:00.261
Create runtime type propagation graph: Begin: 2026-09-06T17:18:27.131798118Z, End: 2026-09-06T17:18:27.293556518Z, Duration: 00:00:00.161
Run SCC (Tarjan) on 46456 nodes: Begin: 2026-09-06T17:18:27.293658733Z, End: 2026-09-06T17:18:27.329314569Z, Duration: 00:00:00.035
Propagate runtime types to strongly connected components: Begin: 2026-09-06T17:18:27.329409823Z, End: 2026-09-06T17:18:27.393208885Z, Duration: 00:00:00.063
Load config: Begin: 2026-09-06T17:18:27.395682225Z, End: 2026-09-06T17:18:27.579757704Z, Duration: 00:00:00.184
Compute entry points: Begin: 2026-09-06T17:18:27.579810293Z, End: 2026-09-06T17:18:27.731961319Z, Duration: 00:00:00.152
Slice call graph: Begin: 2026-09-06T17:18:27.732792058Z, End: 2026-09-06T17:18:27.735751441Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-06T17:18:27.735793464Z, End: 2026-09-06T17:18:27.775615069Z, Duration: 00:00:00.039
Taint analysis for go: Begin: 2026-09-06T17:18:27.775885026Z, End: 2026-09-06T17:18:28.024724578Z, Duration: 00:00:00.248
Report issues: Begin: 2026-09-06T17:18:28.024784829Z, End: 2026-09-06T17:18:28.033689807Z, Duration: 00:00:00.008
Store cache: Begin: 2026-09-06T17:18:28.034179435Z, End: 2026-09-06T17:18:28.037224686Z, Duration: 00:00:00.003
19:18:28.039 INFO go security sensor peak memory (pre-GC, max allocation pressure): 626 MB
19:18:28.039 INFO go security sensor peak memory (post-GC, max live footprint): 317 MB
19:18:28.039 INFO Sensor GoSecuritySensor [security] (done) | time=1937ms
19:18:28.045 INFO ------------- Run sensors on project
19:18:28.237 INFO Sensor Deterministic Rule Engine for Go [dre]
19:18:28.278 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
19:18:28.587 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-955/.scannerwork/.sonartmp/bridge-dre/bridge
19:18:29.019 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=781ms
19:18:29.019 INFO Sensor Deterministic Rule Engine for Shell [dre]
19:18:29.027 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=8ms
19:18:29.027 INFO Sensor SQL Dialect Detection [dre]
19:18:29.029 INFO Sensor SQL Dialect Detection [dre] (done) | time=2ms
19:18:29.030 INFO Sensor DRE Project Telemetry [dre]
19:18:29.031 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
19:18:29.031 INFO Sensor GoProjectSensor [go]
19:18:29.031 INFO Sensor GoProjectSensor [go] (done) | time=0ms
19:18:29.031 INFO Sensor Sonar Go A3S Context Collector [go]
19:18:29.032 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
19:18:29.032 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
19:18:29.032 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
19:18:29.032 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
19:18:29.257 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
19:18:29.261 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
19:18:29.267 INFO Using embedded Node.js runtime.
19:18:29.267 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
19:18:31.625 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
19:18:31.638 INFO gRPC analyze-project server listening on 127.0.0.1:40575
19:18:31.801 INFO Plugin version: [13.8.0.44569]
19:18:33.998 INFO Found 0 tsconfig.json file(s): []
19:18:34.216 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
19:18:34.253 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
19:18:34.259 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
19:18:34.266 INFO 38 source files to be analyzed
19:18:34.266 INFO 38/38 source files have been analyzed
19:18:34.320 INFO JasminAstConsumer done
19:18:34.320 INFO Hit the cache for 0 out of 37
19:18:34.322 INFO Miss the cache for 37 out of 37: ANALYSIS_MODE_INELIGIBLE [37/37]
19:18:34.322 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5288ms
19:18:34.330 INFO Sensor IaC Project Sensor [iac]
19:18:34.331 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
19:18:34.331 INFO Sensor Zero Coverage Sensor
19:18:34.393 INFO Sensor Zero Coverage Sensor (done) | time=62ms
19:18:34.399 INFO ------------- Gather SCA dependencies on project
19:18:34.617 INFO Dependency analysis skipped
19:18:34.649 INFO CPD Executor 2 files had no CPD blocks
19:18:34.650 INFO CPD Executor Calculating CPD for 221 files
19:18:34.708 INFO CPD Executor CPD calculation finished (done) | time=58ms
19:18:34.711 INFO SCM Publisher SCM provider for this project is: git
19:18:34.712 INFO SCM Publisher 66 source files to be analyzed
19:18:35.229 INFO SCM Publisher 66/66 source files have been analyzed (done) | time=515ms
19:18:35.234 INFO SCM revision ID 'f1cc68cb4153dfad732a017394ed90f3529ad4cf'
19:18:35.310 INFO SCM writing changed lines
19:18:35.312 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
19:18:35.313 INFO SCM writing changed lines (done) | time=2ms
19:18:35.420 INFO Analysis report generated in 180ms, dir size=1 MB
19:18:35.718 INFO Analysis report compressed in 296ms, zip size=622 KB
19:18:36.052 INFO Analysis report uploaded in 335ms
19:18:36.054 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-168-mr-from-fork-web&resolved=false
19:18:36.054 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
19:18:36.054 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3uqXXBlKrDa6g_TJj
19:18:36.054 INFO ------------- Upload SCA dependency files
19:18:36.622 INFO Sensor cache published successfully
19:18:36.867 INFO Analysis total time: 25.081 s
19:18:36.869 INFO SonarScanner Engine completed successfully
19:18:37.221 INFO EXECUTION SUCCESS
19:18:37.222 INFO Total time: 33.251s