Build 953 success
sonar on main · c0efa6334a · queued 2026-09-06 20:48 UTC · finished 2026-09-06 20:49 UTC · ran 36s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (c0efa6334a)
step 1/1 set -eu
22:49:03.240 INFO Scanner configuration file: /var/lib/gitbay-runner/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
22:49:03.243 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-1058/sonar-project.properties
22:49:03.256 INFO SonarScanner CLI 8.1.0.6389
22:49:03.261 INFO Linux 6.12.105+deb13-amd64 amd64
22:49:06.159 INFO Communicating with SonarQube Cloud
22:49:06.160 INFO JRE provisioning: os[linux], arch[x86_64]
22:49:07.094 INFO Starting SonarScanner Engine...
22:49:07.095 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
22:49:10.267 INFO Load global settings
22:49:10.635 INFO Load global settings (done) | time=362ms
22:49:10.721 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
22:49:10.885 INFO Loading required plugins
22:49:10.885 INFO Load plugins index
22:49:10.956 INFO Load plugins index (done) | time=70ms
22:49:10.959 INFO Load/download plugins
22:49:11.005 INFO Load/download plugins (done) | time=49ms
22:49:11.120 INFO Loaded core extensions: sca, a3s, architecture
22:49:11.563 INFO Process project properties
22:49:11.593 INFO Project key: krz_gitbay
22:49:11.593 INFO Base dir: /var/lib/gitbay-runner/work/build-1058
22:49:11.593 INFO Working dir: /var/lib/gitbay-runner/work/build-1058/.scannerwork
22:49:11.600 INFO Load project settings for component key: 'krz_gitbay'
22:49:11.902 INFO Load project settings for component key: 'krz_gitbay' (done) | time=301ms
22:49:11.923 INFO Check ALM binding of project 'krz_gitbay'
22:49:12.087 INFO Detected project binding: NOT_BOUND
22:49:12.088 INFO Check ALM binding of project 'krz_gitbay' (done) | time=163ms
22:49:12.093 INFO Load branch configuration
22:49:12.093 INFO Load branch configuration (done) | time=1ms
22:49:12.104 INFO Create analysis
22:49:12.366 INFO Create analysis (done) | time=263ms
22:49:12.511 INFO Load quality profiles
22:49:12.873 INFO Load quality profiles (done) | time=362ms
22:49:13.009 INFO Load active rules
22:49:13.406 INFO Load active rules (done) | time=397ms
22:49:13.540 INFO Organization key: krz
22:49:13.554 INFO Preprocessing files...
22:49:13.763 INFO 5 languages detected in 458 preprocessed files (done) | time=208ms
22:49:13.765 INFO 576 files ignored because of inclusion/exclusion patterns
22:49:13.766 INFO 3 directories skipped because of exclusion patterns (content not counted)
22:49:13.767 INFO 28 files ignored because of scm ignore settings
22:49:13.775 INFO Loading plugins for detected languages
22:49:13.776 INFO Load/download plugins
22:49:13.825 INFO Load/download plugins (done) | time=50ms
22:49:14.038 INFO Load project repositories
22:49:14.243 INFO Load project repositories (done) | time=205ms
22:49:14.261 INFO Indexing files...
22:49:14.262 INFO Project configuration:
22:49:14.262 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
22:49:14.263 INFO Included tests: **/*_test.go
22:49:14.305 INFO 458 files indexed (done) | time=40ms
22:49:14.305 INFO Quality profile for css: Sonar way essentials
22:49:14.305 INFO Quality profile for go: Sonar way essentials
22:49:14.306 INFO Quality profile for shell: Sonar way essentials
22:49:14.306 INFO Quality profile for web: Sonar way essentials
22:49:14.306 INFO Quality profile for yaml: Sonar way essentials
22:49:14.306 INFO ------------- Run sensors on module gitbay
22:49:14.374 INFO Load metrics repository
22:49:14.467 INFO Load metrics repository (done) | time=92ms
22:49:14.474 INFO Sensor cache enabled
22:49:14.476 INFO Load sensor cache
22:49:14.805 INFO Load sensor cache (1 MB) | time=328ms
22:49:15.153 INFO Reflections took 58 ms to scan 1 urls, producing 30 keys and 295 values
22:49:15.799 INFO Sensor IaC YAML File Type Classification Sensor [iac]
22:49:15.824 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=24ms
22:49:15.826 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
22:49:15.827 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
22:49:15.828 INFO Sensor HTML [web]
22:49:16.281 INFO Sensor HTML [web] (done) | time=456ms
22:49:16.282 INFO Sensor Code Quality and Security for Go [go]
22:49:16.363 INFO 27 folders (386 files) to be analyzed
22:49:24.341 INFO 27/27 folders (386 files) have been analyzed
22:49:24.341 INFO Sensor Code Quality and Security for Go [go] (done) | time=8057ms
22:49:24.341 INFO Sensor IaC CloudFormation Sensor [iac]
22:49:24.341 INFO There are no files to be analyzed for the CloudFormation language
22:49:24.341 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
22:49:24.341 INFO Sensor IaC cfn-lint report Sensor [iac]
22:49:24.341 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
22:49:24.341 INFO Sensor IaC Kustomization Sensor [iac]
22:49:24.341 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
22:49:24.341 INFO Sensor IaC hadolint report Sensor [iac]
22:49:24.342 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
22:49:24.342 INFO Sensor Java Config Sensor [iac]
22:49:24.342 INFO There are no files to be analyzed for the Java language
22:49:24.342 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
22:49:24.342 INFO Sensor IaC Docker Sensor [iac]
22:49:24.344 INFO There are no files to be analyzed for the Docker language
22:49:24.347 INFO Sensor IaC Docker Sensor [iac] (done) | time=1ms
22:49:24.348 INFO Sensor IaC Ansible Sensor [iac]
22:49:24.349 INFO There are no files to be analyzed for the Ansible language
22:49:24.349 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
22:49:24.349 INFO Sensor IaC ansible-lint report Sensor [iac]
22:49:24.349 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
22:49:24.349 INFO Sensor IaC spectral report Sensor [iac]
22:49:24.350 INFO Sensor IaC spectral report Sensor [iac] (done) | time=0ms
22:49:24.350 INFO Sensor IaC GitHub Actions Sensor [iac]
22:49:24.352 INFO There are no files to be analyzed for the GitHub Actions language
22:49:24.352 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
22:49:24.352 INFO Sensor IaC actionlint report Sensor [iac]
22:49:24.353 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
22:49:24.353 INFO Sensor IaC Azure Pipelines Sensor [iac]
22:49:24.353 INFO There are no files to be analyzed for the Azure Pipelines language
22:49:24.353 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
22:49:24.353 INFO Sensor IaC Shell Sensor [iac]
22:49:24.361 INFO 5 source files to be analyzed
22:49:24.419 INFO 5/5 source files have been analyzed
22:49:24.420 INFO Sensor IaC Shell Sensor [iac] (done) | time=74ms
22:49:24.421 INFO Sensor IaC Kubernetes Sensor [iac]
22:49:24.485 INFO There are no files to be analyzed for the Kubernetes language
22:49:24.485 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=65ms
22:49:24.486 INFO Sensor IaC YAML Sensor [iac]
22:49:24.486 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
22:49:24.486 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
22:49:24.492 INFO Sensor Serverless configuration file sensor [security]
22:49:24.493 INFO 0 Serverless function entries were found in the project
22:49:24.493 INFO 0 Serverless function handlers were kept as entrypoints
22:49:24.493 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
22:49:24.493 INFO Sensor AWS SAM template file sensor [security]
22:49:24.494 INFO Sensor AWS SAM template file sensor [security] (done) | time=6ms
22:49:24.494 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
22:49:24.510 INFO Available processors: 4
22:49:24.510 INFO Using 4 threads for analysis.
22:49:24.787 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
22:49:24.837 INFO Start fetching files for the text and secrets analysis
22:49:24.843 INFO Using Git CLI to retrieve dirty files
22:49:24.871 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
22:49:24.873 INFO Starting the text and secrets analysis
22:49:24.874 INFO 446 source files to be analyzed for the text and secrets analysis
22:49:25.304 INFO 446/446 source files have been analyzed for the text and secrets analysis
22:49:25.306 INFO Start fetching files for the binary file analysis
22:49:25.306 INFO There are no files to be analyzed for the binary file analysis
22:49:25.315 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=820ms
22:49:25.316 INFO Sensor GoSecuritySensor [security]
22:49:25.321 INFO 9 taint analysis rules enabled.
22:49:25.986 INFO Analyzing 2250 UCFGs to detect vulnerabilities.
22:49:26.980 INFO All rules entry points : 32
22:49:26.982 INFO Retained UCFGs : 130
22:49:27.021 INFO 0 / 130 UCFGs simulated, memory usage: 348 MB
22:49:27.293 INFO 130 / 130 UCFGs simulated, memory usage: 390 MB
22:49:27.296 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:49:27.301 WARN Failed to find InputFile for __unknown_file, check exclusions.
22:49:27.307 INFO go security sensor: Begin: 2026-09-06T20:49:25.317430003Z, End: 2026-09-06T20:49:27.306275322Z, Duration: 00:00:01.988
Resolve files to analyze: Begin: 2026-09-06T20:49:25.321526496Z, End: 2026-09-06T20:49:25.322701144Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-06T20:49:25.322957348Z, End: 2026-09-06T20:49:25.985452330Z, Duration: 00:00:00.662
Load type hierarchy: Begin: 2026-09-06T20:49:25.322961104Z, End: 2026-09-06T20:49:25.327509377Z, Duration: 00:00:00.004
Load UCFGs: Begin: 2026-09-06T20:49:25.327558070Z, End: 2026-09-06T20:49:25.985333260Z, Duration: 00:00:00.657
Check cache: Begin: 2026-09-06T20:49:25.985605630Z, End: 2026-09-06T20:49:25.986246714Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T20:49:25.985966834Z, End: 2026-09-06T20:49:25.985983580Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T20:49:25.986280366Z, End: 2026-09-06T20:49:26.539904072Z, Duration: 00:00:00.553
Variable Type Analysis #1: Begin: 2026-09-06T20:49:25.986671394Z, End: 2026-09-06T20:49:26.326685267Z, Duration: 00:00:00.340
Create runtime type propagation graph: Begin: 2026-09-06T20:49:25.987302533Z, End: 2026-09-06T20:49:26.124221192Z, Duration: 00:00:00.136
Run SCC (Tarjan) on 47207 nodes: Begin: 2026-09-06T20:49:26.124626813Z, End: 2026-09-06T20:49:26.198317172Z, Duration: 00:00:00.073
Propagate runtime types to strongly connected components: Begin: 2026-09-06T20:49:26.198470723Z, End: 2026-09-06T20:49:26.326583144Z, Duration: 00:00:00.128
Variable Type Analysis #2: Begin: 2026-09-06T20:49:26.328856704Z, End: 2026-09-06T20:49:26.537714698Z, Duration: 00:00:00.208
Create runtime type propagation graph: Begin: 2026-09-06T20:49:26.328863474Z, End: 2026-09-06T20:49:26.422835424Z, Duration: 00:00:00.093
Run SCC (Tarjan) on 47207 nodes: Begin: 2026-09-06T20:49:26.422949406Z, End: 2026-09-06T20:49:26.462462029Z, Duration: 00:00:00.039
Propagate runtime types to strongly connected components: Begin: 2026-09-06T20:49:26.462596771Z, End: 2026-09-06T20:49:26.537582920Z, Duration: 00:00:00.074
Load config: Begin: 2026-09-06T20:49:26.539992494Z, End: 2026-09-06T20:49:26.854645676Z, Duration: 00:00:00.314
Compute entry points: Begin: 2026-09-06T20:49:26.854828862Z, End: 2026-09-06T20:49:26.979825476Z, Duration: 00:00:00.124
Slice call graph: Begin: 2026-09-06T20:49:26.980088382Z, End: 2026-09-06T20:49:26.982601531Z, Duration: 00:00:00.002
Live variable analysis: Begin: 2026-09-06T20:49:26.982694021Z, End: 2026-09-06T20:49:27.018521409Z, Duration: 00:00:00.035
Taint analysis for go: Begin: 2026-09-06T20:49:27.018760599Z, End: 2026-09-06T20:49:27.289486586Z, Duration: 00:00:00.270
Report issues: Begin: 2026-09-06T20:49:27.289545145Z, End: 2026-09-06T20:49:27.301897788Z, Duration: 00:00:00.012
Store cache: Begin: 2026-09-06T20:49:27.302498671Z, End: 2026-09-06T20:49:27.305707168Z, Duration: 00:00:00.003
22:49:27.309 INFO go security sensor peak memory (pre-GC, max allocation pressure): 757 MB
22:49:27.309 INFO go security sensor peak memory (post-GC, max live footprint): 315 MB
22:49:27.310 INFO Sensor GoSecuritySensor [security] (done) | time=1991ms
22:49:27.315 INFO ------------- Run sensors on project
22:49:27.521 INFO Sensor Deterministic Rule Engine for Go [dre]
22:49:27.570 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
22:49:28.010 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-1058/.scannerwork/.sonartmp/bridge-dre/bridge
22:49:28.514 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=993ms
22:49:28.514 INFO Sensor Deterministic Rule Engine for Shell [dre]
22:49:28.520 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=6ms
22:49:28.520 INFO Sensor SQL Dialect Detection [dre]
22:49:28.524 INFO Sensor SQL Dialect Detection [dre] (done) | time=3ms
22:49:28.525 INFO Sensor DRE Project Telemetry [dre]
22:49:28.525 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
22:49:28.525 INFO Sensor GoProjectSensor [go]
22:49:28.526 INFO Sensor GoProjectSensor [go] (done) | time=0ms
22:49:28.526 INFO Sensor Sonar Go A3S Context Collector [go]
22:49:28.527 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
22:49:28.527 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
22:49:28.527 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
22:49:28.527 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
22:49:28.756 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
22:49:28.757 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
22:49:28.776 INFO Using embedded Node.js runtime.
22:49:28.777 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
22:49:31.186 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
22:49:31.196 INFO gRPC analyze-project server listening on 127.0.0.1:44813
22:49:31.393 INFO Plugin version: [13.8.0.44569]
22:49:33.381 INFO Found 0 tsconfig.json file(s): []
22:49:33.559 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
22:49:33.595 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
22:49:33.603 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
22:49:33.621 INFO 39 source files to be analyzed
22:49:33.621 INFO 39/39 source files have been analyzed
22:49:33.669 INFO JasminAstConsumer done
22:49:33.670 INFO Hit the cache for 0 out of 38
22:49:33.671 INFO Miss the cache for 38 out of 38: ANALYSIS_MODE_INELIGIBLE [38/38]
22:49:33.671 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5143ms
22:49:33.671 INFO Sensor IaC Project Sensor [iac]
22:49:33.671 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
22:49:33.672 INFO Sensor Zero Coverage Sensor
22:49:33.742 INFO Sensor Zero Coverage Sensor (done) | time=70ms
22:49:33.751 INFO ------------- Gather SCA dependencies on project
22:49:33.971 INFO Dependency analysis skipped
22:49:34.000 INFO CPD Executor 2 files had no CPD blocks
22:49:34.000 INFO CPD Executor Calculating CPD for 224 files
22:49:34.068 INFO CPD Executor CPD calculation finished (done) | time=68ms
22:49:34.071 INFO SCM Publisher SCM provider for this project is: git
22:49:34.072 INFO SCM Publisher 430 source files to be analyzed
22:49:34.829 INFO SCM Publisher 430/430 source files have been analyzed (done) | time=756ms
22:49:34.841 INFO SCM revision ID 'c0efa6334ac8f919f564f9e9cb7e33208a802c86'
22:49:35.082 INFO Analysis report generated in 236ms, dir size=3 MB
22:49:35.630 INFO Analysis report compressed in 546ms, zip size=1 MB
22:49:36.390 INFO Analysis report uploaded in 759ms
22:49:36.390 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay
22:49:36.391 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
22:49:36.391 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB4e9REbMgFd3KsTVq2
22:49:36.391 INFO ------------- Upload SCA dependency files
22:49:36.960 INFO Sensor cache published successfully
22:49:37.288 INFO Analysis total time: 26.168 s
22:49:37.291 INFO SonarScanner Engine completed successfully
22:49:37.650 INFO EXECUTION SUCCESS
22:49:37.651 INFO Total time: 34.413s