Build 895 success
sonar on runner-podman-144 · bc465c991f · queued 2026-09-06 18:47 UTC · finished 2026-09-06 19:15 UTC · ran 36s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (bc465c991f)
step 1/1 set -eu
21:15:15.187 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
21:15:15.190 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-1000/sonar-project.properties
21:15:15.201 INFO SonarScanner CLI 8.1.0.6389
21:15:15.205 INFO Linux 6.12.105+deb13-amd64 amd64
21:15:18.115 INFO Communicating with SonarQube Cloud
21:15:18.116 INFO JRE provisioning: os[linux], arch[x86_64]
21:15:18.877 INFO Starting SonarScanner Engine...
21:15:18.878 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
21:15:22.121 INFO Load global settings
21:15:22.544 INFO Load global settings (done) | time=418ms
21:15:22.625 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
21:15:22.773 INFO Loading required plugins
21:15:22.782 INFO Load plugins index
21:15:22.852 INFO Load plugins index (done) | time=69ms
21:15:22.853 INFO Load/download plugins
21:15:22.925 INFO Load/download plugins (done) | time=73ms
21:15:23.053 INFO Loaded core extensions: sca, a3s, architecture
21:15:23.572 INFO Process project properties
21:15:23.592 INFO Project key: krz_gitbay
21:15:23.592 INFO Base dir: /var/lib/gitbay-runner/work/build-1000
21:15:23.592 INFO Working dir: /var/lib/gitbay-runner/work/build-1000/.scannerwork
21:15:23.598 INFO Load project settings for component key: 'krz_gitbay'
21:15:23.839 INFO Load project settings for component key: 'krz_gitbay' (done) | time=240ms
21:15:23.860 INFO Check ALM binding of project 'krz_gitbay'
21:15:24.080 INFO Detected project binding: NOT_BOUND
21:15:24.081 INFO Check ALM binding of project 'krz_gitbay' (done) | time=220ms
21:15:24.086 INFO Load branch configuration
21:15:24.087 INFO Load branch configuration (done) | time=1ms
21:15:24.090 INFO Create analysis
21:15:24.439 INFO Branch name: runner-podman-144, type: short
21:15:24.440 INFO Create analysis (done) | time=348ms
21:15:24.600 INFO Load quality profiles
21:15:24.961 INFO Load quality profiles (done) | time=360ms
21:15:25.089 INFO Load active rules
21:15:25.493 INFO Load active rules (done) | time=406ms
21:15:25.622 INFO Organization key: krz
21:15:25.638 INFO Preprocessing files...
21:15:25.885 INFO 5 languages detected in 456 preprocessed files (done) | time=243ms
21:15:25.885 INFO 574 files ignored because of inclusion/exclusion patterns
21:15:25.885 INFO 3 directories skipped because of exclusion patterns (content not counted)
21:15:25.885 INFO 28 files ignored because of scm ignore settings
21:15:25.894 INFO Loading plugins for detected languages
21:15:25.894 INFO Load/download plugins
21:15:25.977 INFO Load/download plugins (done) | time=82ms
21:15:26.183 INFO Load project repositories
21:15:26.304 INFO Load project repositories (done) | time=119ms
21:15:26.306 INFO SCM collecting changed files in the branch
21:15:26.315 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
21:15:26.316 INFO SCM collecting changed files in the branch (done) | time=9ms
21:15:26.331 INFO Indexing files...
21:15:26.331 INFO Project configuration:
21:15:26.331 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
21:15:26.331 INFO Included tests: **/*_test.go
21:15:26.377 INFO 456 files indexed (done) | time=44ms
21:15:26.377 INFO Quality profile for css: Sonar way essentials
21:15:26.377 INFO Quality profile for go: Sonar way essentials
21:15:26.377 INFO Quality profile for shell: Sonar way essentials
21:15:26.377 INFO Quality profile for web: Sonar way essentials
21:15:26.380 INFO Quality profile for yaml: Sonar way essentials
21:15:26.381 INFO ------------- Run sensors on module gitbay
21:15:26.444 INFO Load metrics repository
21:15:26.504 INFO Load metrics repository (done) | time=59ms
21:15:26.510 INFO Sensor cache enabled
21:15:26.514 INFO Load sensor cache
21:15:26.899 INFO Load sensor cache (1 MB) | time=385ms
21:15:27.321 INFO Reflections took 82 ms to scan 1 urls, producing 30 keys and 295 values
21:15:27.974 INFO Sensor IaC YAML File Type Classification Sensor [iac]
21:15:28.008 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=34ms
21:15:28.009 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
21:15:28.009 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
21:15:28.010 INFO Sensor HTML [web]
21:15:28.448 INFO Sensor HTML [web] (done) | time=440ms
21:15:28.449 INFO Sensor Code Quality and Security for Go [go]
21:15:28.524 INFO 27 folders (387 files) to be analyzed
21:15:36.825 INFO 27/27 folders (387 files) have been analyzed
21:15:36.825 INFO Sensor Code Quality and Security for Go [go] (done) | time=8373ms
21:15:36.825 INFO Sensor IaC CloudFormation Sensor [iac]
21:15:36.825 INFO There are no files to be analyzed for the CloudFormation language
21:15:36.825 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=1ms
21:15:36.825 INFO Sensor IaC cfn-lint report Sensor [iac]
21:15:36.826 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
21:15:36.826 INFO Sensor IaC Kustomization Sensor [iac]
21:15:36.826 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
21:15:36.826 INFO Sensor IaC hadolint report Sensor [iac]
21:15:36.826 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
21:15:36.826 INFO Sensor Java Config Sensor [iac]
21:15:36.826 INFO There are no files to be analyzed for the Java language
21:15:36.826 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
21:15:36.827 INFO Sensor IaC Docker Sensor [iac]
21:15:36.830 INFO There are no files to be analyzed for the Docker language
21:15:36.830 INFO Sensor IaC Docker Sensor [iac] (done) | time=3ms
21:15:36.831 INFO Sensor IaC Ansible Sensor [iac]
21:15:36.831 INFO There are no files to be analyzed for the Ansible language
21:15:36.832 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
21:15:36.832 INFO Sensor IaC ansible-lint report Sensor [iac]
21:15:36.832 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
21:15:36.832 INFO Sensor IaC spectral report Sensor [iac]
21:15:36.833 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
21:15:36.836 INFO Sensor IaC GitHub Actions Sensor [iac]
21:15:36.837 INFO There are no files to be analyzed for the GitHub Actions language
21:15:36.837 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
21:15:36.837 INFO Sensor IaC actionlint report Sensor [iac]
21:15:36.837 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
21:15:36.837 INFO Sensor IaC Azure Pipelines Sensor [iac]
21:15:36.837 INFO There are no files to be analyzed for the Azure Pipelines language
21:15:36.837 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
21:15:36.837 INFO Sensor IaC Shell Sensor [iac]
21:15:36.850 INFO 4 source files to be analyzed
21:15:36.926 INFO 4/4 source files have been analyzed
21:15:36.928 INFO Sensor IaC Shell Sensor [iac] (done) | time=91ms
21:15:36.929 INFO Sensor IaC Kubernetes Sensor [iac]
21:15:36.981 INFO There are no files to be analyzed for the Kubernetes language
21:15:36.985 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=55ms
21:15:36.985 INFO Sensor IaC YAML Sensor [iac]
21:15:36.985 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
21:15:36.985 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
21:15:36.985 INFO Sensor Serverless configuration file sensor [security]
21:15:36.985 INFO 0 Serverless function entries were found in the project
21:15:36.987 INFO 0 Serverless function handlers were kept as entrypoints
21:15:36.988 INFO Sensor Serverless configuration file sensor [security] (done) | time=4ms
21:15:36.988 INFO Sensor AWS SAM template file sensor [security]
21:15:36.996 INFO Sensor AWS SAM template file sensor [security] (done) | time=5ms
21:15:36.996 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
21:15:37.027 INFO Available processors: 4
21:15:37.027 INFO Using 4 threads for analysis.
21:15:37.339 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
21:15:37.409 INFO Start fetching files for the text and secrets analysis
21:15:37.418 INFO Using Git CLI to retrieve dirty files
21:15:37.452 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
21:15:37.453 INFO Starting the text and secrets analysis
21:15:37.453 INFO 446 source files to be analyzed for the text and secrets analysis
21:15:37.927 INFO 446/446 source files have been analyzed for the text and secrets analysis
21:15:37.929 INFO Start fetching files for the binary file analysis
21:15:37.931 INFO There are no files to be analyzed for the binary file analysis
21:15:37.938 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=943ms
21:15:37.938 INFO Sensor GoSecuritySensor [security]
21:15:37.946 INFO 9 taint analysis rules enabled.
21:15:38.652 INFO Analyzing 2253 UCFGs to detect vulnerabilities.
21:15:39.525 INFO All rules entry points : 32
21:15:39.528 INFO Retained UCFGs : 130
21:15:39.581 INFO 0 / 130 UCFGs simulated, memory usage: 407 MB
21:15:39.853 INFO 130 / 130 UCFGs simulated, memory usage: 449 MB
21:15:39.858 WARN Failed to find InputFile for __unknown_file, check exclusions.
21:15:39.862 WARN Failed to find InputFile for __unknown_file, check exclusions.
21:15:39.869 INFO go security sensor: Begin: 2026-09-06T19:15:37.940967611Z, End: 2026-09-06T19:15:39.867645983Z, Duration: 00:00:01.926
Resolve files to analyze: Begin: 2026-09-06T19:15:37.946657530Z, End: 2026-09-06T19:15:37.947522762Z, Duration: 00:00:00.000
Load type hierarchy and UCFGs: Begin: 2026-09-06T19:15:37.947735240Z, End: 2026-09-06T19:15:38.630023468Z, Duration: 00:00:00.682
Load type hierarchy: Begin: 2026-09-06T19:15:37.947739256Z, End: 2026-09-06T19:15:37.957601993Z, Duration: 00:00:00.009
Load UCFGs: Begin: 2026-09-06T19:15:37.957718066Z, End: 2026-09-06T19:15:38.629898070Z, Duration: 00:00:00.672
Check cache: Begin: 2026-09-06T19:15:38.640423231Z, End: 2026-09-06T19:15:38.641384897Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T19:15:38.640992947Z, End: 2026-09-06T19:15:38.641028421Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T19:15:38.641476294Z, End: 2026-09-06T19:15:39.192191706Z, Duration: 00:00:00.550
Variable Type Analysis #1: Begin: 2026-09-06T19:15:38.641930698Z, End: 2026-09-06T19:15:38.943548938Z, Duration: 00:00:00.301
Create runtime type propagation graph: Begin: 2026-09-06T19:15:38.642543580Z, End: 2026-09-06T19:15:38.785548941Z, Duration: 00:00:00.143
Run SCC (Tarjan) on 47241 nodes: Begin: 2026-09-06T19:15:38.786035223Z, End: 2026-09-06T19:15:38.854871554Z, Duration: 00:00:00.068
Propagate runtime types to strongly connected components: Begin: 2026-09-06T19:15:38.855026887Z, End: 2026-09-06T19:15:38.943421818Z, Duration: 00:00:00.088
Variable Type Analysis #2: Begin: 2026-09-06T19:15:38.945957992Z, End: 2026-09-06T19:15:39.189632326Z, Duration: 00:00:00.243
Create runtime type propagation graph: Begin: 2026-09-06T19:15:38.945967105Z, End: 2026-09-06T19:15:39.097538022Z, Duration: 00:00:00.151
Run SCC (Tarjan) on 47241 nodes: Begin: 2026-09-06T19:15:39.097896791Z, End: 2026-09-06T19:15:39.130585490Z, Duration: 00:00:00.032
Propagate runtime types to strongly connected components: Begin: 2026-09-06T19:15:39.130708585Z, End: 2026-09-06T19:15:39.189517313Z, Duration: 00:00:00.058
Load config: Begin: 2026-09-06T19:15:39.192249253Z, End: 2026-09-06T19:15:39.396124582Z, Duration: 00:00:00.203
Compute entry points: Begin: 2026-09-06T19:15:39.396318564Z, End: 2026-09-06T19:15:39.524864507Z, Duration: 00:00:00.128
Slice call graph: Begin: 2026-09-06T19:15:39.525833104Z, End: 2026-09-06T19:15:39.529812089Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-06T19:15:39.529904107Z, End: 2026-09-06T19:15:39.578392651Z, Duration: 00:00:00.048
Taint analysis for go: Begin: 2026-09-06T19:15:39.578698400Z, End: 2026-09-06T19:15:39.850871872Z, Duration: 00:00:00.272
Report issues: Begin: 2026-09-06T19:15:39.850945323Z, End: 2026-09-06T19:15:39.862697971Z, Duration: 00:00:00.011
Store cache: Begin: 2026-09-06T19:15:39.863504864Z, End: 2026-09-06T19:15:39.867070217Z, Duration: 00:00:00.003
21:15:39.869 INFO go security sensor peak memory (pre-GC, max allocation pressure): 595 MB
21:15:39.869 INFO go security sensor peak memory (post-GC, max live footprint): 319 MB
21:15:39.869 INFO Sensor GoSecuritySensor [security] (done) | time=1930ms
21:15:39.877 INFO ------------- Run sensors on project
21:15:40.080 INFO Sensor Deterministic Rule Engine for Go [dre]
21:15:40.113 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
21:15:40.451 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-1000/.scannerwork/.sonartmp/bridge-dre/bridge
21:15:41.048 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=967ms
21:15:41.049 INFO Sensor Deterministic Rule Engine for Shell [dre]
21:15:41.056 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=6ms
21:15:41.056 INFO Sensor SQL Dialect Detection [dre]
21:15:41.074 INFO Sensor SQL Dialect Detection [dre] (done) | time=18ms
21:15:41.075 INFO Sensor DRE Project Telemetry [dre]
21:15:41.076 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
21:15:41.076 INFO Sensor GoProjectSensor [go]
21:15:41.076 INFO Sensor GoProjectSensor [go] (done) | time=1ms
21:15:41.076 INFO Sensor Sonar Go A3S Context Collector [go]
21:15:41.077 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
21:15:41.077 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
21:15:41.077 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
21:15:41.077 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
21:15:41.350 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
21:15:41.351 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
21:15:41.361 INFO Using embedded Node.js runtime.
21:15:41.361 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
21:15:43.868 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
21:15:43.878 INFO gRPC analyze-project server listening on 127.0.0.1:37171
21:15:44.033 INFO Plugin version: [13.8.0.44569]
21:15:46.335 INFO Found 0 tsconfig.json file(s): []
21:15:46.392 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
21:15:46.409 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
21:15:46.452 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
21:15:46.590 INFO 39 source files to be analyzed
21:15:46.590 INFO 39/39 source files have been analyzed
21:15:46.637 INFO JasminAstConsumer done
21:15:46.637 INFO Hit the cache for 0 out of 38
21:15:46.637 INFO Miss the cache for 38 out of 38: ANALYSIS_MODE_INELIGIBLE [38/38]
21:15:46.637 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5557ms
21:15:46.637 INFO Sensor IaC Project Sensor [iac]
21:15:46.637 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
21:15:46.638 INFO Sensor Zero Coverage Sensor
21:15:46.714 INFO Sensor Zero Coverage Sensor (done) | time=75ms
21:15:46.727 INFO ------------- Gather SCA dependencies on project
21:15:46.866 INFO Dependency analysis skipped
21:15:46.901 INFO CPD Executor 2 files had no CPD blocks
21:15:46.901 INFO CPD Executor Calculating CPD for 224 files
21:15:46.975 INFO CPD Executor CPD calculation finished (done) | time=74ms
21:15:46.977 INFO SCM Publisher SCM provider for this project is: git
21:15:46.979 INFO SCM Publisher 86 source files to be analyzed
21:15:47.540 INFO SCM Publisher 86/86 source files have been analyzed (done) | time=558ms
21:15:47.547 INFO SCM revision ID 'bc465c991f960a1f59c93b8c564c49261db5dec1'
21:15:47.624 INFO SCM writing changed lines
21:15:47.628 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
21:15:47.629 INFO SCM writing changed lines (done) | time=3ms
21:15:47.711 INFO Analysis report generated in 161ms, dir size=1 MB
21:15:48.001 INFO Analysis report compressed in 289ms, zip size=707 KB
21:15:48.358 INFO Analysis report uploaded in 356ms
21:15:48.359 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=runner-podman-144&resolved=false
21:15:48.360 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
21:15:48.360 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB4JfPEZe2HR5N6g1V2
21:15:48.360 INFO ------------- Upload SCA dependency files
21:15:48.967 INFO Sensor cache published successfully
21:15:49.257 INFO Analysis total time: 26.204 s
21:15:49.260 INFO SonarScanner Engine completed successfully
21:15:49.629 INFO EXECUTION SUCCESS
21:15:49.630 INFO Total time: 34.445s