Build 938 success
sonar on main · b4a2206ec2 · queued 2026-09-06 20:03 UTC · finished 2026-09-06 20:12 UTC · ran 35s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (b4a2206ec2)
step 1/1 set -eu
22:11:37.088 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
22:11:37.091 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-1043/sonar-project.properties
22:11:37.103 INFO SonarScanner CLI 8.1.0.6389
22:11:37.107 INFO Linux 6.12.105+deb13-amd64 amd64
22:11:40.026 INFO Communicating with SonarQube Cloud
22:11:40.027 INFO JRE provisioning: os[linux], arch[x86_64]
22:11:40.805 INFO Starting SonarScanner Engine...
22:11:40.806 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
22:11:44.062 INFO Load global settings
22:11:44.484 INFO Load global settings (done) | time=417ms
22:11:44.559 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
22:11:44.761 INFO Loading required plugins
22:11:44.761 INFO Load plugins index
22:11:44.841 INFO Load plugins index (done) | time=81ms
22:11:44.841 INFO Load/download plugins
22:11:44.890 INFO Load/download plugins (done) | time=49ms
22:11:45.012 INFO Loaded core extensions: sca, a3s, architecture
22:11:45.537 INFO Process project properties
22:11:45.560 INFO Project key: krz_gitbay
22:11:45.560 INFO Base dir: /var/lib/gitbay-runner/work/build-1043
22:11:45.560 INFO Working dir: /var/lib/gitbay-runner/work/build-1043/.scannerwork
22:11:45.567 INFO Load project settings for component key: 'krz_gitbay'
22:11:45.773 INFO Load project settings for component key: 'krz_gitbay' (done) | time=206ms
22:11:45.805 INFO Check ALM binding of project 'krz_gitbay'
22:11:45.865 INFO Detected project binding: NOT_BOUND
22:11:45.865 INFO Check ALM binding of project 'krz_gitbay' (done) | time=62ms
22:11:45.871 INFO Load branch configuration
22:11:45.873 INFO Load branch configuration (done) | time=1ms
22:11:45.878 INFO Create analysis
22:11:46.162 INFO Create analysis (done) | time=284ms
22:11:46.314 INFO Load quality profiles
22:11:46.735 INFO Load quality profiles (done) | time=421ms
22:11:46.859 INFO Load active rules
22:11:47.279 INFO Load active rules (done) | time=419ms
22:11:47.412 INFO Organization key: krz
22:11:47.429 INFO Preprocessing files...
22:11:47.742 INFO 5 languages detected in 454 preprocessed files (done) | time=312ms
22:11:47.744 INFO 572 files ignored because of inclusion/exclusion patterns
22:11:47.746 INFO 3 directories skipped because of exclusion patterns (content not counted)
22:11:47.747 INFO 28 files ignored because of scm ignore settings
22:11:47.755 INFO Loading plugins for detected languages
22:11:47.755 INFO Load/download plugins
22:11:47.817 INFO Load/download plugins (done) | time=62ms
22:11:48.000 INFO Load project repositories
22:11:48.110 INFO Load project repositories (done) | time=110ms
22:11:48.130 INFO Indexing files...
22:11:48.131 INFO Project configuration:
22:11:48.132 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
22:11:48.132 INFO Included tests: **/*_test.go
22:11:48.175 INFO 454 files indexed (done) | time=45ms
22:11:48.178 INFO Quality profile for css: Sonar way essentials
22:11:48.180 INFO Quality profile for go: Sonar way essentials
22:11:48.184 INFO Quality profile for shell: Sonar way essentials
22:11:48.185 INFO Quality profile for web: Sonar way essentials
22:11:48.185 INFO Quality profile for yaml: Sonar way essentials
22:11:48.185 INFO ------------- Run sensors on module gitbay
22:11:48.245 INFO Load metrics repository
22:11:48.304 INFO Load metrics repository (done) | time=56ms
22:11:48.311 INFO Sensor cache enabled
22:11:48.313 INFO Load sensor cache
22:11:48.683 INFO Load sensor cache (1 MB) | time=368ms
22:11:49.060 INFO Reflections took 59 ms to scan 1 urls, producing 30 keys and 295 values
22:11:49.704 INFO Sensor IaC YAML File Type Classification Sensor [iac]
22:11:49.745 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=37ms
22:11:49.745 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
22:11:49.745 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
22:11:49.745 INFO Sensor HTML [web]
22:11:50.160 INFO Sensor HTML [web] (done) | time=416ms
22:11:50.162 INFO Sensor Code Quality and Security for Go [go]
22:11:50.215 INFO 27 folders (385 files) to be analyzed
22:11:58.432 INFO 27/27 folders (385 files) have been analyzed
22:11:58.433 INFO Sensor Code Quality and Security for Go [go] (done) | time=8268ms
22:11:58.433 INFO Sensor IaC CloudFormation Sensor [iac]
22:11:58.433 INFO There are no files to be analyzed for the CloudFormation language
22:11:58.433 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
22:11:58.433 INFO Sensor IaC cfn-lint report Sensor [iac]
22:11:58.433 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
22:11:58.433 INFO Sensor IaC Kustomization Sensor [iac]
22:11:58.434 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
22:11:58.434 INFO Sensor IaC hadolint report Sensor [iac]
22:11:58.434 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
22:11:58.434 INFO Sensor Java Config Sensor [iac]
22:11:58.434 INFO There are no files to be analyzed for the Java language
22:11:58.434 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
22:11:58.434 INFO Sensor IaC Docker Sensor [iac]
22:11:58.436 INFO There are no files to be analyzed for the Docker language
22:11:58.437 INFO Sensor IaC Docker Sensor [iac] (done) | time=4ms
22:11:58.437 INFO Sensor IaC Ansible Sensor [iac]
22:11:58.437 INFO There are no files to be analyzed for the Ansible language
22:11:58.437 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
22:11:58.437 INFO Sensor IaC ansible-lint report Sensor [iac]
22:11:58.437 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
22:11:58.437 INFO Sensor IaC spectral report Sensor [iac]
22:11:58.440 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
22:11:58.441 INFO Sensor IaC GitHub Actions Sensor [iac]
22:11:58.441 INFO There are no files to be analyzed for the GitHub Actions language
22:11:58.441 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
22:11:58.441 INFO Sensor IaC actionlint report Sensor [iac]
22:11:58.441 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
22:11:58.441 INFO Sensor IaC Azure Pipelines Sensor [iac]
22:11:58.442 INFO There are no files to be analyzed for the Azure Pipelines language
22:11:58.442 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
22:11:58.442 INFO Sensor IaC Shell Sensor [iac]
22:11:58.454 INFO 4 source files to be analyzed
22:11:58.517 INFO 4/4 source files have been analyzed
22:11:58.517 INFO Sensor IaC Shell Sensor [iac] (done) | time=74ms
22:11:58.517 INFO Sensor IaC Kubernetes Sensor [iac]
22:11:58.572 INFO There are no files to be analyzed for the Kubernetes language
22:11:58.572 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=50ms
22:11:58.572 INFO Sensor IaC YAML Sensor [iac]
22:11:58.572 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
22:11:58.572 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
22:11:58.572 INFO Sensor Serverless configuration file sensor [security]
22:11:58.572 INFO 0 Serverless function entries were found in the project
22:11:58.573 INFO 0 Serverless function handlers were kept as entrypoints
22:11:58.573 INFO Sensor Serverless configuration file sensor [security] (done) | time=1ms
22:11:58.573 INFO Sensor AWS SAM template file sensor [security]
22:11:58.573 INFO Sensor AWS SAM template file sensor [security] (done) | time=3ms
22:11:58.573 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
22:11:58.588 INFO Available processors: 4
22:11:58.590 INFO Using 4 threads for analysis.
22:11:58.862 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
22:11:58.915 INFO Start fetching files for the text and secrets analysis
22:11:58.920 INFO Using Git CLI to retrieve dirty files
22:11:58.955 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
22:11:58.956 INFO Starting the text and secrets analysis
22:11:58.956 INFO 444 source files to be analyzed for the text and secrets analysis
22:11:59.477 INFO 444/444 source files have been analyzed for the text and secrets analysis
22:11:59.479 INFO Start fetching files for the binary file analysis
22:11:59.479 INFO There are no files to be analyzed for the binary file analysis
22:11:59.488 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=916ms
22:11:59.489 INFO Sensor GoSecuritySensor [security]
22:11:59.495 INFO 9 taint analysis rules enabled.
22:12:00.241 INFO Analyzing 2245 UCFGs to detect vulnerabilities.
22:12:01.185 INFO All rules entry points : 32
22:12:01.187 INFO Retained UCFGs : 130
22:12:01.252 INFO 0 / 130 UCFGs simulated, memory usage: 732 MB
22:12:01.568 INFO 130 / 130 UCFGs simulated, memory usage: 775 MB
22:12:01.576 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:12:01.583 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:12:01.590 INFO go security sensor: Begin: 2026-09-06T20:11:59.492945296Z, End: 2026-09-06T20:12:01.589049050Z, Duration: 00:00:02.096
Resolve files to analyze: Begin: 2026-09-06T20:11:59.495446078Z, End: 2026-09-06T20:11:59.496633334Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-06T20:11:59.497040246Z, End: 2026-09-06T20:12:00.237761714Z, Duration: 00:00:00.740
Load type hierarchy: Begin: 2026-09-06T20:11:59.497044752Z, End: 2026-09-06T20:11:59.501960838Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-06T20:11:59.502024545Z, End: 2026-09-06T20:12:00.237511138Z, Duration: 00:00:00.735
Check cache: Begin: 2026-09-06T20:12:00.238009426Z, End: 2026-09-06T20:12:00.238919896Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T20:12:00.238511422Z, End: 2026-09-06T20:12:00.238535668Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T20:12:00.238966757Z, End: 2026-09-06T20:12:00.812274054Z, Duration: 00:00:00.573
Variable Type Analysis #1: Begin: 2026-09-06T20:12:00.239547331Z, End: 2026-09-06T20:12:00.572939600Z, Duration: 00:00:00.333
Create runtime type propagation graph: Begin: 2026-09-06T20:12:00.240327854Z, End: 2026-09-06T20:12:00.398739131Z, Duration: 00:00:00.158
Run SCC (Tarjan) on 47178 nodes: Begin: 2026-09-06T20:12:00.399273835Z, End: 2026-09-06T20:12:00.473468541Z, Duration: 00:00:00.074
Propagate runtime types to strongly connected components: Begin: 2026-09-06T20:12:00.473619958Z, End: 2026-09-06T20:12:00.572828775Z, Duration: 00:00:00.099
Variable Type Analysis #2: Begin: 2026-09-06T20:12:00.575539682Z, End: 2026-09-06T20:12:00.810434267Z, Duration: 00:00:00.234
Create runtime type propagation graph: Begin: 2026-09-06T20:12:00.575548826Z, End: 2026-09-06T20:12:00.682497075Z, Duration: 00:00:00.106
Run SCC (Tarjan) on 47178 nodes: Begin: 2026-09-06T20:12:00.682615502Z, End: 2026-09-06T20:12:00.738650408Z, Duration: 00:00:00.056
Propagate runtime types to strongly connected components: Begin: 2026-09-06T20:12:00.738841726Z, End: 2026-09-06T20:12:00.810307957Z, Duration: 00:00:00.071
Load config: Begin: 2026-09-06T20:12:00.812326424Z, End: 2026-09-06T20:12:01.018758491Z, Duration: 00:00:00.206
Compute entry points: Begin: 2026-09-06T20:12:01.018827314Z, End: 2026-09-06T20:12:01.185044714Z, Duration: 00:00:00.166
Slice call graph: Begin: 2026-09-06T20:12:01.185364465Z, End: 2026-09-06T20:12:01.190188933Z, Duration: 00:00:00.004
Live variable analysis: Begin: 2026-09-06T20:12:01.190293069Z, End: 2026-09-06T20:12:01.248498449Z, Duration: 00:00:00.058
Taint analysis for go: Begin: 2026-09-06T20:12:01.248795406Z, End: 2026-09-06T20:12:01.568383030Z, Duration: 00:00:00.319
Report issues: Begin: 2026-09-06T20:12:01.568449411Z, End: 2026-09-06T20:12:01.582799437Z, Duration: 00:00:00.014
Store cache: Begin: 2026-09-06T20:12:01.583863999Z, End: 2026-09-06T20:12:01.588237519Z, Duration: 00:00:00.004
22:12:01.591 INFO go security sensor peak memory (pre-GC, max allocation pressure): 799 MB
22:12:01.591 INFO go security sensor peak memory (post-GC, max live footprint): 308 MB
22:12:01.591 INFO Sensor GoSecuritySensor [security] (done) | time=2102ms
22:12:01.602 INFO ------------- Run sensors on project
22:12:01.868 INFO Sensor Deterministic Rule Engine for Go [dre]
22:12:01.925 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
22:12:02.304 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-1043/.scannerwork/.sonartmp/bridge-dre/bridge
22:12:02.571 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=703ms
22:12:02.571 INFO Sensor Deterministic Rule Engine for Shell [dre]
22:12:02.581 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=9ms
22:12:02.582 INFO Sensor SQL Dialect Detection [dre]
22:12:02.583 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
22:12:02.583 INFO Sensor DRE Project Telemetry [dre]
22:12:02.584 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
22:12:02.584 INFO Sensor GoProjectSensor [go]
22:12:02.585 INFO Sensor GoProjectSensor [go] (done) | time=1ms
22:12:02.586 INFO Sensor Sonar Go A3S Context Collector [go]
22:12:02.586 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
22:12:02.586 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
22:12:02.586 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
22:12:02.587 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
22:12:02.800 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
22:12:02.801 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
22:12:02.810 INFO Using embedded Node.js runtime.
22:12:02.810 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
22:12:05.013 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
22:12:05.023 INFO gRPC analyze-project server listening on 127.0.0.1:39477
22:12:05.192 INFO Plugin version: [13.8.0.44569]
22:12:07.446 INFO Found 0 tsconfig.json file(s): []
22:12:07.510 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
22:12:07.573 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
22:12:07.725 INFO 39 source files to be analyzed
22:12:07.725 INFO 39/39 source files have been analyzed
22:12:07.734 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
22:12:07.780 INFO JasminAstConsumer done
22:12:07.785 INFO Hit the cache for 0 out of 38
22:12:07.785 INFO Miss the cache for 38 out of 38: ANALYSIS_MODE_INELIGIBLE [38/38]
22:12:07.785 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5193ms
22:12:07.786 INFO Sensor IaC Project Sensor [iac]
22:12:07.787 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
22:12:07.787 INFO Sensor Zero Coverage Sensor
22:12:07.843 INFO Sensor Zero Coverage Sensor (done) | time=56ms
22:12:07.855 INFO ------------- Gather SCA dependencies on project
22:12:08.001 INFO Dependency analysis skipped
22:12:08.038 INFO CPD Executor 2 files had no CPD blocks
22:12:08.039 INFO CPD Executor Calculating CPD for 224 files
22:12:08.116 INFO CPD Executor CPD calculation finished (done) | time=77ms
22:12:08.119 INFO SCM Publisher SCM provider for this project is: git
22:12:08.121 INFO SCM Publisher 428 source files to be analyzed
22:12:08.908 INFO SCM Publisher 428/428 source files have been analyzed (done) | time=785ms
22:12:08.915 INFO SCM revision ID 'b4a2206ec2e71d04b592ef40e5dd59444c522bf0'
22:12:09.144 INFO Analysis report generated in 214ms, dir size=3 MB
22:12:09.679 INFO Analysis report compressed in 534ms, zip size=1 MB
22:12:10.265 INFO Analysis report uploaded in 585ms
22:12:10.265 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
22:12:10.265 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
22:12:10.266 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB4WY5SKbaNl224kac9
22:12:10.266 INFO ------------- Upload SCA dependency files
22:12:10.866 INFO Sensor cache published successfully
22:12:11.163 INFO Analysis total time: 26.152 s
22:12:11.169 INFO SonarScanner Engine completed successfully
22:12:11.522 INFO EXECUTION SUCCESS
22:12:11.523 INFO Total time: 34.437s