Build 854 success
sonar on feat-174-fork-web · e88e46e41d · queued 2026-09-06 16:55 UTC · finished 2026-09-06 17:27 UTC · ran 34s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (e88e46e41d)
step 1/1 set -eu
19:26:27.909 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
19:26:27.911 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-959/sonar-project.properties
19:26:27.922 INFO SonarScanner CLI 8.1.0.6389
19:26:27.936 INFO Linux 6.12.105+deb13-amd64 amd64
19:26:30.791 INFO Communicating with SonarQube Cloud
19:26:30.792 INFO JRE provisioning: os[linux], arch[x86_64]
19:26:31.576 INFO Starting SonarScanner Engine...
19:26:31.578 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
19:26:34.787 INFO Load global settings
19:26:35.230 INFO Load global settings (done) | time=435ms
19:26:35.304 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
19:26:35.462 INFO Loading required plugins
19:26:35.462 INFO Load plugins index
19:26:35.535 INFO Load plugins index (done) | time=74ms
19:26:35.537 INFO Load/download plugins
19:26:35.600 INFO Load/download plugins (done) | time=64ms
19:26:35.714 INFO Loaded core extensions: sca, a3s, architecture
19:26:36.263 INFO Process project properties
19:26:36.281 INFO Project key: krz_gitbay
19:26:36.281 INFO Base dir: /var/lib/gitbay-runner/work/build-959
19:26:36.281 INFO Working dir: /var/lib/gitbay-runner/work/build-959/.scannerwork
19:26:36.287 INFO Load project settings for component key: 'krz_gitbay'
19:26:36.517 INFO Load project settings for component key: 'krz_gitbay' (done) | time=230ms
19:26:36.537 INFO Check ALM binding of project 'krz_gitbay'
19:26:36.687 INFO Detected project binding: NOT_BOUND
19:26:36.687 INFO Check ALM binding of project 'krz_gitbay' (done) | time=151ms
19:26:36.691 INFO Load branch configuration
19:26:36.692 INFO Load branch configuration (done) | time=0ms
19:26:36.696 INFO Create analysis
19:26:36.936 INFO Branch name: feat-174-fork-web, type: short
19:26:36.936 INFO Create analysis (done) | time=239ms
19:26:37.125 INFO Load quality profiles
19:26:37.426 INFO Load quality profiles (done) | time=302ms
19:26:37.546 INFO Load active rules
19:26:37.959 INFO Load active rules (done) | time=413ms
19:26:38.124 INFO Organization key: krz
19:26:38.139 INFO Preprocessing files...
19:26:38.413 INFO 5 languages detected in 446 preprocessed files (done) | time=272ms
19:26:38.415 INFO 562 files ignored because of inclusion/exclusion patterns
19:26:38.417 INFO 3 directories skipped because of exclusion patterns (content not counted)
19:26:38.420 INFO 28 files ignored because of scm ignore settings
19:26:38.428 INFO Loading plugins for detected languages
19:26:38.429 INFO Load/download plugins
19:26:38.510 INFO Load/download plugins (done) | time=84ms
19:26:38.722 INFO Load project repositories
19:26:38.928 INFO Load project repositories (done) | time=205ms
19:26:38.931 INFO SCM collecting changed files in the branch
19:26:38.938 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
19:26:38.939 INFO SCM collecting changed files in the branch (done) | time=7ms
19:26:38.954 INFO Indexing files...
19:26:38.954 INFO Project configuration:
19:26:38.954 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
19:26:38.954 INFO Included tests: **/*_test.go
19:26:38.986 INFO 446 files indexed (done) | time=32ms
19:26:38.988 INFO Quality profile for css: Sonar way essentials
19:26:38.989 INFO Quality profile for go: Sonar way essentials
19:26:38.989 INFO Quality profile for shell: Sonar way essentials
19:26:38.989 INFO Quality profile for web: Sonar way essentials
19:26:38.989 INFO Quality profile for yaml: Sonar way essentials
19:26:38.990 INFO ------------- Run sensors on module gitbay
19:26:39.042 INFO Load metrics repository
19:26:39.114 INFO Load metrics repository (done) | time=73ms
19:26:39.128 INFO Sensor cache enabled
19:26:39.135 INFO Load sensor cache
19:26:39.541 INFO Load sensor cache (1 MB) | time=405ms
19:26:39.916 INFO Reflections took 60 ms to scan 1 urls, producing 30 keys and 295 values
19:26:40.574 INFO Sensor IaC YAML File Type Classification Sensor [iac]
19:26:40.597 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=22ms
19:26:40.598 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
19:26:40.602 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=3ms
19:26:40.602 INFO Sensor HTML [web]
19:26:40.969 INFO Sensor HTML [web] (done) | time=366ms
19:26:40.970 INFO Sensor Code Quality and Security for Go [go]
19:26:41.054 INFO 27 folders (378 files) to be analyzed
19:26:48.927 INFO 27/27 folders (378 files) have been analyzed
19:26:48.930 INFO Sensor Code Quality and Security for Go [go] (done) | time=7959ms
19:26:48.932 INFO Sensor IaC CloudFormation Sensor [iac]
19:26:48.933 INFO There are no files to be analyzed for the CloudFormation language
19:26:48.933 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=1ms
19:26:48.933 INFO Sensor IaC cfn-lint report Sensor [iac]
19:26:48.933 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
19:26:48.933 INFO Sensor IaC Kustomization Sensor [iac]
19:26:48.933 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
19:26:48.933 INFO Sensor IaC hadolint report Sensor [iac]
19:26:48.933 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
19:26:48.933 INFO Sensor Java Config Sensor [iac]
19:26:48.933 INFO There are no files to be analyzed for the Java language
19:26:48.933 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
19:26:48.940 INFO Sensor IaC Docker Sensor [iac]
19:26:48.942 INFO There are no files to be analyzed for the Docker language
19:26:48.943 INFO Sensor IaC Docker Sensor [iac] (done) | time=11ms
19:26:48.949 INFO Sensor IaC Ansible Sensor [iac]
19:26:48.949 INFO There are no files to be analyzed for the Ansible language
19:26:48.949 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
19:26:48.949 INFO Sensor IaC ansible-lint report Sensor [iac]
19:26:48.949 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
19:26:48.949 INFO Sensor IaC spectral report Sensor [iac]
19:26:48.949 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
19:26:48.949 INFO Sensor IaC GitHub Actions Sensor [iac]
19:26:48.949 INFO There are no files to be analyzed for the GitHub Actions language
19:26:48.949 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
19:26:48.949 INFO Sensor IaC actionlint report Sensor [iac]
19:26:48.949 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
19:26:48.950 INFO Sensor IaC Azure Pipelines Sensor [iac]
19:26:48.950 INFO There are no files to be analyzed for the Azure Pipelines language
19:26:48.950 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
19:26:48.950 INFO Sensor IaC Shell Sensor [iac]
19:26:48.956 INFO 4 source files to be analyzed
19:26:49.009 INFO 4/4 source files have been analyzed
19:26:49.009 INFO Sensor IaC Shell Sensor [iac] (done) | time=64ms
19:26:49.009 INFO Sensor IaC Kubernetes Sensor [iac]
19:26:49.063 INFO There are no files to be analyzed for the Kubernetes language
19:26:49.063 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=53ms
19:26:49.065 INFO Sensor IaC YAML Sensor [iac]
19:26:49.067 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
19:26:49.067 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
19:26:49.067 INFO Sensor Serverless configuration file sensor [security]
19:26:49.067 INFO 0 Serverless function entries were found in the project
19:26:49.067 INFO 0 Serverless function handlers were kept as entrypoints
19:26:49.067 INFO Sensor Serverless configuration file sensor [security] (done) | time=1ms
19:26:49.067 INFO Sensor AWS SAM template file sensor [security]
19:26:49.073 INFO Sensor AWS SAM template file sensor [security] (done) | time=6ms
19:26:49.073 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
19:26:49.088 INFO Available processors: 4
19:26:49.088 INFO Using 4 threads for analysis.
19:26:49.394 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
19:26:49.470 INFO Start fetching files for the text and secrets analysis
19:26:49.492 INFO Using Git CLI to retrieve dirty files
19:26:49.511 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
19:26:49.512 INFO Starting the text and secrets analysis
19:26:49.515 INFO 436 source files to be analyzed for the text and secrets analysis
19:26:49.938 INFO 436/436 source files have been analyzed for the text and secrets analysis
19:26:49.940 INFO Start fetching files for the binary file analysis
19:26:49.945 INFO There are no files to be analyzed for the binary file analysis
19:26:49.946 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=874ms
19:26:49.947 INFO Sensor GoSecuritySensor [security]
19:26:49.952 INFO 9 taint analysis rules enabled.
19:26:50.584 INFO Analyzing 2215 UCFGs to detect vulnerabilities.
19:26:51.524 INFO All rules entry points : 32
19:26:51.524 INFO Retained UCFGs : 130
19:26:51.569 INFO 0 / 130 UCFGs simulated, memory usage: 321 MB
19:26:51.817 INFO 130 / 130 UCFGs simulated, memory usage: 364 MB
19:26:51.823 WARN Failed to find InputFile for __unknown_file, check exclusions.
19:26:51.826 WARN Failed to find InputFile for __unknown_file, check exclusions.
19:26:51.831 INFO go security sensor: Begin: 2026-09-06T17:26:49.949645361Z, End: 2026-09-06T17:26:51.830582729Z, Duration: 00:00:01.880
Resolve files to analyze: Begin: 2026-09-06T17:26:49.952320906Z, End: 2026-09-06T17:26:49.953199597Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-06T17:26:49.953414902Z, End: 2026-09-06T17:26:50.583564636Z, Duration: 00:00:00.630
Load type hierarchy: Begin: 2026-09-06T17:26:49.953418807Z, End: 2026-09-06T17:26:49.957868010Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-06T17:26:49.957929882Z, End: 2026-09-06T17:26:50.583499990Z, Duration: 00:00:00.625
Check cache: Begin: 2026-09-06T17:26:50.583681432Z, End: 2026-09-06T17:26:50.584260593Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T17:26:50.584021574Z, End: 2026-09-06T17:26:50.584039661Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T17:26:50.584293322Z, End: 2026-09-06T17:26:51.144142192Z, Duration: 00:00:00.559
Variable Type Analysis #1: Begin: 2026-09-06T17:26:50.584765563Z, End: 2026-09-06T17:26:50.923004943Z, Duration: 00:00:00.338
Create runtime type propagation graph: Begin: 2026-09-06T17:26:50.585284704Z, End: 2026-09-06T17:26:50.727634283Z, Duration: 00:00:00.142
Run SCC (Tarjan) on 46562 nodes: Begin: 2026-09-06T17:26:50.728058391Z, End: 2026-09-06T17:26:50.794335203Z, Duration: 00:00:00.066
Propagate runtime types to strongly connected components: Begin: 2026-09-06T17:26:50.794474021Z, End: 2026-09-06T17:26:50.922891482Z, Duration: 00:00:00.128
Variable Type Analysis #2: Begin: 2026-09-06T17:26:50.925483471Z, End: 2026-09-06T17:26:51.142457738Z, Duration: 00:00:00.216
Create runtime type propagation graph: Begin: 2026-09-06T17:26:50.925494077Z, End: 2026-09-06T17:26:51.018486117Z, Duration: 00:00:00.092
Run SCC (Tarjan) on 46562 nodes: Begin: 2026-09-06T17:26:51.018587289Z, End: 2026-09-06T17:26:51.073388407Z, Duration: 00:00:00.054
Propagate runtime types to strongly connected components: Begin: 2026-09-06T17:26:51.073513135Z, End: 2026-09-06T17:26:51.142372130Z, Duration: 00:00:00.068
Load config: Begin: 2026-09-06T17:26:51.144189253Z, End: 2026-09-06T17:26:51.389537977Z, Duration: 00:00:00.245
Compute entry points: Begin: 2026-09-06T17:26:51.389685439Z, End: 2026-09-06T17:26:51.523529222Z, Duration: 00:00:00.133
Slice call graph: Begin: 2026-09-06T17:26:51.523786770Z, End: 2026-09-06T17:26:51.526617328Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-06T17:26:51.526708825Z, End: 2026-09-06T17:26:51.566452423Z, Duration: 00:00:00.039
Taint analysis for go: Begin: 2026-09-06T17:26:51.566690111Z, End: 2026-09-06T17:26:51.816707346Z, Duration: 00:00:00.250
Report issues: Begin: 2026-09-06T17:26:51.816786896Z, End: 2026-09-06T17:26:51.826403192Z, Duration: 00:00:00.009
Store cache: Begin: 2026-09-06T17:26:51.826925308Z, End: 2026-09-06T17:26:51.830083357Z, Duration: 00:00:00.003
19:26:51.832 INFO go security sensor peak memory (pre-GC, max allocation pressure): 637 MB
19:26:51.832 INFO go security sensor peak memory (post-GC, max live footprint): 322 MB
19:26:51.832 INFO Sensor GoSecuritySensor [security] (done) | time=1884ms
19:26:51.847 INFO ------------- Run sensors on project
19:26:52.031 INFO Sensor Deterministic Rule Engine for Go [dre]
19:26:52.068 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
19:26:52.552 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-959/.scannerwork/.sonartmp/bridge-dre/bridge
19:26:53.009 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=978ms
19:26:53.010 INFO Sensor Deterministic Rule Engine for Shell [dre]
19:26:53.017 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=7ms
19:26:53.017 INFO Sensor SQL Dialect Detection [dre]
19:26:53.019 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
19:26:53.024 INFO Sensor DRE Project Telemetry [dre]
19:26:53.025 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
19:26:53.025 INFO Sensor GoProjectSensor [go]
19:26:53.025 INFO Sensor GoProjectSensor [go] (done) | time=0ms
19:26:53.025 INFO Sensor Sonar Go A3S Context Collector [go]
19:26:53.025 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
19:26:53.025 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
19:26:53.025 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
19:26:53.025 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
19:26:53.275 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
19:26:53.277 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
19:26:53.287 INFO Using embedded Node.js runtime.
19:26:53.287 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
19:26:55.641 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
19:26:55.647 INFO gRPC analyze-project server listening on 127.0.0.1:37899
19:26:55.834 INFO Plugin version: [13.8.0.44569]
19:26:58.118 INFO Found 0 tsconfig.json file(s): []
19:26:58.184 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
19:26:58.189 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
19:26:58.242 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
19:26:58.377 INFO 38 source files to be analyzed
19:26:58.377 INFO 38/38 source files have been analyzed
19:26:58.391 INFO JasminAstConsumer done
19:26:58.391 INFO Hit the cache for 0 out of 37
19:26:58.392 INFO Miss the cache for 37 out of 37: ANALYSIS_MODE_INELIGIBLE [37/37]
19:26:58.392 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5370ms
19:26:58.392 INFO Sensor IaC Project Sensor [iac]
19:26:58.393 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
19:26:58.394 INFO Sensor Zero Coverage Sensor
19:26:58.429 INFO Sensor Zero Coverage Sensor (done) | time=32ms
19:26:58.437 INFO ------------- Gather SCA dependencies on project
19:26:58.621 INFO Dependency analysis skipped
19:26:58.670 INFO CPD Executor 2 files had no CPD blocks
19:26:58.670 INFO CPD Executor Calculating CPD for 221 files
19:26:58.744 INFO CPD Executor CPD calculation finished (done) | time=73ms
19:26:58.746 INFO SCM Publisher SCM provider for this project is: git
19:26:58.746 INFO SCM Publisher 68 source files to be analyzed
19:26:59.241 INFO SCM Publisher 68/68 source files have been analyzed (done) | time=489ms
19:26:59.245 INFO SCM revision ID 'e88e46e41d53cb8abbe7bbd63311082dd7a4f8f5'
19:26:59.320 INFO SCM writing changed lines
19:26:59.323 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
19:26:59.324 INFO SCM writing changed lines (done) | time=2ms
19:26:59.426 INFO Analysis report generated in 178ms, dir size=1 MB
19:26:59.696 INFO Analysis report compressed in 270ms, zip size=629 KB
19:27:00.130 INFO Analysis report uploaded in 434ms
19:27:00.131 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=feat-174-fork-web&resolved=false
19:27:00.132 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
19:27:00.132 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB3wlbpKbaNl224kXad
19:27:00.133 INFO ------------- Upload SCA dependency files
19:27:00.698 INFO Sensor cache published successfully
19:27:00.978 INFO Analysis total time: 25.263 s
19:27:00.980 INFO SonarScanner Engine completed successfully
19:27:01.334 INFO EXECUTION SUCCESS
19:27:01.335 INFO Total time: 33.428s