Build 886 success
sonar on bookmarks-146 · ee5ecbcbbd · queued 2026-09-06 18:41 UTC · finished 2026-09-06 18:58 UTC · ran 36s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (ee5ecbcbbd)
step 1/1 set -eu
20:57:44.362 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
20:57:44.364 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-991/sonar-project.properties
20:57:44.383 INFO SonarScanner CLI 8.1.0.6389
20:57:44.388 INFO Linux 6.12.105+deb13-amd64 amd64
20:57:47.283 INFO Communicating with SonarQube Cloud
20:57:47.283 INFO JRE provisioning: os[linux], arch[x86_64]
20:57:47.996 INFO Starting SonarScanner Engine...
20:57:47.997 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
20:57:51.369 INFO Load global settings
20:57:51.791 INFO Load global settings (done) | time=416ms
20:57:51.875 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
20:57:52.050 INFO Loading required plugins
20:57:52.050 INFO Load plugins index
20:57:52.130 INFO Load plugins index (done) | time=79ms
20:57:52.131 INFO Load/download plugins
20:57:52.192 INFO Load/download plugins (done) | time=60ms
20:57:52.330 INFO Loaded core extensions: sca, a3s, architecture
20:57:52.818 INFO Process project properties
20:57:52.849 INFO Project key: krz_gitbay
20:57:52.849 INFO Base dir: /var/lib/gitbay-runner/work/build-991
20:57:52.849 INFO Working dir: /var/lib/gitbay-runner/work/build-991/.scannerwork
20:57:52.857 INFO Load project settings for component key: 'krz_gitbay'
20:57:53.173 INFO Load project settings for component key: 'krz_gitbay' (done) | time=314ms
20:57:53.196 INFO Check ALM binding of project 'krz_gitbay'
20:57:53.263 INFO Detected project binding: NOT_BOUND
20:57:53.266 INFO Check ALM binding of project 'krz_gitbay' (done) | time=68ms
20:57:53.271 INFO Load branch configuration
20:57:53.272 INFO Load branch configuration (done) | time=1ms
20:57:53.275 INFO Create analysis
20:57:53.544 INFO Branch name: bookmarks-146, type: short
20:57:53.544 INFO Create analysis (done) | time=269ms
20:57:53.710 INFO Load quality profiles
20:57:54.096 INFO Load quality profiles (done) | time=385ms
20:57:54.280 INFO Load active rules
20:57:54.662 INFO Load active rules (done) | time=385ms
20:57:54.805 INFO Organization key: krz
20:57:54.825 INFO Preprocessing files...
20:57:55.099 INFO 5 languages detected in 454 preprocessed files (done) | time=271ms
20:57:55.101 INFO 572 files ignored because of inclusion/exclusion patterns
20:57:55.101 INFO 3 directories skipped because of exclusion patterns (content not counted)
20:57:55.101 INFO 28 files ignored because of scm ignore settings
20:57:55.114 INFO Loading plugins for detected languages
20:57:55.115 INFO Load/download plugins
20:57:55.183 INFO Load/download plugins (done) | time=68ms
20:57:55.379 INFO Load project repositories
20:57:55.587 INFO Load project repositories (done) | time=207ms
20:57:55.592 INFO SCM collecting changed files in the branch
20:57:55.603 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
20:57:55.603 INFO SCM collecting changed files in the branch (done) | time=10ms
20:57:55.625 INFO Indexing files...
20:57:55.625 INFO Project configuration:
20:57:55.626 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
20:57:55.626 INFO Included tests: **/*_test.go
20:57:55.677 INFO 454 files indexed (done) | time=54ms
20:57:55.685 INFO Quality profile for css: Sonar way essentials
20:57:55.685 INFO Quality profile for go: Sonar way essentials
20:57:55.685 INFO Quality profile for shell: Sonar way essentials
20:57:55.685 INFO Quality profile for web: Sonar way essentials
20:57:55.686 INFO Quality profile for yaml: Sonar way essentials
20:57:55.686 INFO ------------- Run sensors on module gitbay
20:57:55.770 INFO Load metrics repository
20:57:55.832 INFO Load metrics repository (done) | time=69ms
20:57:55.841 INFO Sensor cache enabled
20:57:55.845 INFO Load sensor cache
20:57:56.187 INFO Load sensor cache (1 MB) | time=341ms
20:57:56.606 INFO Reflections took 80 ms to scan 1 urls, producing 30 keys and 295 values
20:57:57.271 INFO Sensor IaC YAML File Type Classification Sensor [iac]
20:57:57.299 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=26ms
20:57:57.299 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
20:57:57.300 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
20:57:57.300 INFO Sensor HTML [web]
20:57:57.779 INFO Sensor HTML [web] (done) | time=480ms
20:57:57.779 INFO Sensor Code Quality and Security for Go [go]
20:57:57.852 INFO 27 folders (385 files) to be analyzed
20:58:06.149 INFO 27/27 folders (385 files) have been analyzed
20:58:06.149 INFO Sensor Code Quality and Security for Go [go] (done) | time=8369ms
20:58:06.149 INFO Sensor IaC CloudFormation Sensor [iac]
20:58:06.149 INFO There are no files to be analyzed for the CloudFormation language
20:58:06.149 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
20:58:06.150 INFO Sensor IaC cfn-lint report Sensor [iac]
20:58:06.150 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
20:58:06.152 INFO Sensor IaC Kustomization Sensor [iac]
20:58:06.153 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=1ms
20:58:06.153 INFO Sensor IaC hadolint report Sensor [iac]
20:58:06.153 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
20:58:06.154 INFO Sensor Java Config Sensor [iac]
20:58:06.154 INFO There are no files to be analyzed for the Java language
20:58:06.155 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
20:58:06.155 INFO Sensor IaC Docker Sensor [iac]
20:58:06.158 INFO There are no files to be analyzed for the Docker language
20:58:06.158 INFO Sensor IaC Docker Sensor [iac] (done) | time=3ms
20:58:06.159 INFO Sensor IaC Ansible Sensor [iac]
20:58:06.159 INFO There are no files to be analyzed for the Ansible language
20:58:06.159 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
20:58:06.159 INFO Sensor IaC ansible-lint report Sensor [iac]
20:58:06.159 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
20:58:06.159 INFO Sensor IaC spectral report Sensor [iac]
20:58:06.160 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
20:58:06.160 INFO Sensor IaC GitHub Actions Sensor [iac]
20:58:06.161 INFO There are no files to be analyzed for the GitHub Actions language
20:58:06.161 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
20:58:06.161 INFO Sensor IaC actionlint report Sensor [iac]
20:58:06.161 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
20:58:06.162 INFO Sensor IaC Azure Pipelines Sensor [iac]
20:58:06.162 INFO There are no files to be analyzed for the Azure Pipelines language
20:58:06.162 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
20:58:06.162 INFO Sensor IaC Shell Sensor [iac]
20:58:06.174 INFO 4 source files to be analyzed
20:58:06.246 INFO 4/4 source files have been analyzed
20:58:06.246 INFO Sensor IaC Shell Sensor [iac] (done) | time=83ms
20:58:06.246 INFO Sensor IaC Kubernetes Sensor [iac]
20:58:06.309 INFO There are no files to be analyzed for the Kubernetes language
20:58:06.309 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=60ms
20:58:06.309 INFO Sensor IaC YAML Sensor [iac]
20:58:06.310 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
20:58:06.310 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
20:58:06.310 INFO Sensor Serverless configuration file sensor [security]
20:58:06.310 INFO 0 Serverless function entries were found in the project
20:58:06.313 INFO 0 Serverless function handlers were kept as entrypoints
20:58:06.314 INFO Sensor Serverless configuration file sensor [security] (done) | time=6ms
20:58:06.315 INFO Sensor AWS SAM template file sensor [security]
20:58:06.321 INFO Sensor AWS SAM template file sensor [security] (done) | time=7ms
20:58:06.321 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
20:58:06.341 INFO Available processors: 4
20:58:06.342 INFO Using 4 threads for analysis.
20:58:06.676 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
20:58:06.734 INFO Start fetching files for the text and secrets analysis
20:58:06.740 INFO Using Git CLI to retrieve dirty files
20:58:06.760 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
20:58:06.762 INFO Starting the text and secrets analysis
20:58:06.763 INFO 444 source files to be analyzed for the text and secrets analysis
20:58:07.160 INFO 444/444 source files have been analyzed for the text and secrets analysis
20:58:07.161 INFO Start fetching files for the binary file analysis
20:58:07.162 INFO There are no files to be analyzed for the binary file analysis
20:58:07.165 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=843ms
20:58:07.165 INFO Sensor GoSecuritySensor [security]
20:58:07.170 INFO 9 taint analysis rules enabled.
20:58:07.877 INFO Analyzing 2245 UCFGs to detect vulnerabilities.
20:58:08.870 INFO All rules entry points : 32
20:58:08.870 INFO Retained UCFGs : 130
20:58:08.906 INFO 0 / 130 UCFGs simulated, memory usage: 295 MB
20:58:09.204 INFO 130 / 130 UCFGs simulated, memory usage: 338 MB
20:58:09.212 WARN Failed to find InputFile for __unknown_file, check exclusions.
20:58:09.215 WARN Failed to find InputFile for __unknown_file, check exclusions.
20:58:09.221 INFO go security sensor: Begin: 2026-09-06T18:58:07.167878416Z, End: 2026-09-06T18:58:09.219920545Z, Duration: 00:00:02.052
Resolve files to analyze: Begin: 2026-09-06T18:58:07.170668123Z, End: 2026-09-06T18:58:07.171743812Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-06T18:58:07.171974439Z, End: 2026-09-06T18:58:07.876432988Z, Duration: 00:00:00.704
Load type hierarchy: Begin: 2026-09-06T18:58:07.171979157Z, End: 2026-09-06T18:58:07.177195585Z, Duration: 00:00:00.005
Load UCFGs: Begin: 2026-09-06T18:58:07.177262686Z, End: 2026-09-06T18:58:07.876292976Z, Duration: 00:00:00.699
Check cache: Begin: 2026-09-06T18:58:07.876556543Z, End: 2026-09-06T18:58:07.877258199Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T18:58:07.876936334Z, End: 2026-09-06T18:58:07.876962714Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T18:58:07.877311789Z, End: 2026-09-06T18:58:08.456568934Z, Duration: 00:00:00.579
Variable Type Analysis #1: Begin: 2026-09-06T18:58:07.877877861Z, End: 2026-09-06T18:58:08.225518565Z, Duration: 00:00:00.347
Create runtime type propagation graph: Begin: 2026-09-06T18:58:07.878641510Z, End: 2026-09-06T18:58:08.049509625Z, Duration: 00:00:00.170
Run SCC (Tarjan) on 47175 nodes: Begin: 2026-09-06T18:58:08.049995486Z, End: 2026-09-06T18:58:08.117630692Z, Duration: 00:00:00.067
Propagate runtime types to strongly connected components: Begin: 2026-09-06T18:58:08.117842241Z, End: 2026-09-06T18:58:08.225404664Z, Duration: 00:00:00.107
Variable Type Analysis #2: Begin: 2026-09-06T18:58:08.228628565Z, End: 2026-09-06T18:58:08.454727643Z, Duration: 00:00:00.226
Create runtime type propagation graph: Begin: 2026-09-06T18:58:08.228640172Z, End: 2026-09-06T18:58:08.342611218Z, Duration: 00:00:00.113
Run SCC (Tarjan) on 47175 nodes: Begin: 2026-09-06T18:58:08.342732710Z, End: 2026-09-06T18:58:08.384558514Z, Duration: 00:00:00.041
Propagate runtime types to strongly connected components: Begin: 2026-09-06T18:58:08.384719756Z, End: 2026-09-06T18:58:08.454631979Z, Duration: 00:00:00.069
Load config: Begin: 2026-09-06T18:58:08.456652129Z, End: 2026-09-06T18:58:08.692813046Z, Duration: 00:00:00.236
Compute entry points: Begin: 2026-09-06T18:58:08.693041981Z, End: 2026-09-06T18:58:08.868188514Z, Duration: 00:00:00.175
Slice call graph: Begin: 2026-09-06T18:58:08.868462527Z, End: 2026-09-06T18:58:08.871489711Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-06T18:58:08.871537273Z, End: 2026-09-06T18:58:08.903655080Z, Duration: 00:00:00.032
Taint analysis for go: Begin: 2026-09-06T18:58:08.903907830Z, End: 2026-09-06T18:58:09.204380833Z, Duration: 00:00:00.300
Report issues: Begin: 2026-09-06T18:58:09.204517779Z, End: 2026-09-06T18:58:09.215153632Z, Duration: 00:00:00.010
Store cache: Begin: 2026-09-06T18:58:09.215811953Z, End: 2026-09-06T18:58:09.219306221Z, Duration: 00:00:00.003
20:58:09.221 INFO go security sensor peak memory (pre-GC, max allocation pressure): 470 MB
20:58:09.221 INFO go security sensor peak memory (post-GC, max live footprint): 196 MB
20:58:09.221 INFO Sensor GoSecuritySensor [security] (done) | time=2055ms
20:58:09.230 INFO ------------- Run sensors on project
20:58:09.447 INFO Sensor Deterministic Rule Engine for Go [dre]
20:58:09.479 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
20:58:09.785 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-991/.scannerwork/.sonartmp/bridge-dre/bridge
20:58:10.066 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=619ms
20:58:10.068 INFO Sensor Deterministic Rule Engine for Shell [dre]
20:58:10.071 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=4ms
20:58:10.072 INFO Sensor SQL Dialect Detection [dre]
20:58:10.075 INFO Sensor SQL Dialect Detection [dre] (done) | time=3ms
20:58:10.076 INFO Sensor DRE Project Telemetry [dre]
20:58:10.076 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
20:58:10.076 INFO Sensor GoProjectSensor [go]
20:58:10.076 INFO Sensor GoProjectSensor [go] (done) | time=0ms
20:58:10.077 INFO Sensor Sonar Go A3S Context Collector [go]
20:58:10.077 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
20:58:10.077 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
20:58:10.077 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
20:58:10.077 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
20:58:10.326 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
20:58:10.326 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
20:58:10.335 INFO Using embedded Node.js runtime.
20:58:10.335 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
20:58:12.523 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
20:58:12.532 INFO gRPC analyze-project server listening on 127.0.0.1:37643
20:58:12.709 INFO Plugin version: [13.8.0.44569]
20:58:15.109 INFO Found 0 tsconfig.json file(s): []
20:58:15.204 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
20:58:15.229 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
20:58:15.393 INFO 39 source files to be analyzed
20:58:15.393 INFO 39/39 source files have been analyzed
20:58:15.481 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
20:58:15.506 INFO JasminAstConsumer done
20:58:15.506 INFO Hit the cache for 0 out of 38
20:58:15.507 INFO Miss the cache for 38 out of 38: ANALYSIS_MODE_INELIGIBLE [38/38]
20:58:15.507 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5429ms
20:58:15.508 INFO Sensor IaC Project Sensor [iac]
20:58:15.509 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
20:58:15.510 INFO Sensor Zero Coverage Sensor
20:58:15.552 INFO Sensor Zero Coverage Sensor (done) | time=43ms
20:58:15.565 INFO ------------- Gather SCA dependencies on project
20:58:15.723 INFO Dependency analysis skipped
20:58:15.767 INFO CPD Executor 2 files had no CPD blocks
20:58:15.768 INFO CPD Executor Calculating CPD for 224 files
20:58:15.846 INFO CPD Executor CPD calculation finished (done) | time=79ms
20:58:15.848 INFO SCM Publisher SCM provider for this project is: git
20:58:15.850 INFO SCM Publisher 82 source files to be analyzed
20:58:16.442 INFO SCM Publisher 82/82 source files have been analyzed (done) | time=593ms
20:58:16.449 INFO SCM revision ID 'ee5ecbcbbda844caa061b10020b7c961212379f7'
20:58:16.528 INFO SCM writing changed lines
20:58:16.532 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
20:58:16.533 INFO SCM writing changed lines (done) | time=3ms
20:58:16.627 INFO Analysis report generated in 174ms, dir size=1 MB
20:58:16.917 INFO Analysis report compressed in 289ms, zip size=691 KB
20:58:17.377 INFO Analysis report uploaded in 460ms
20:58:17.380 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=bookmarks-146&resolved=false
20:58:17.380 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
20:58:17.380 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB4FepbysLIlhLigGnD
20:58:17.380 INFO ------------- Upload SCA dependency files
20:58:17.980 INFO Sensor cache published successfully
20:58:18.239 INFO Analysis total time: 25.909 s
20:58:18.240 INFO SonarScanner Engine completed successfully
20:58:18.594 INFO EXECUTION SUCCESS
20:58:18.595 INFO Total time: 34.235s