Build 957 success
sonar on ci-rebase-diffbase-176 · 8c791ac207 · queued 2026-09-06 21:41 UTC · finished 2026-09-06 21:43 UTC · ran 49s
setup
$ git clone ssh://git@127.0.0.1/krz/gitbay.git (8c791ac207)
step 1/1 set -eu
installing sonar-scanner 8.1.0.6389
23:42:27.610 INFO Scanner configuration file: /var/lib/gitbay-runner/work/build-1062/.sonar/sonar-scanner-8.1.0.6389-linux-x64/conf/sonar-scanner.properties
23:42:27.614 INFO Project root configuration file: /var/lib/gitbay-runner/work/build-1062/sonar-project.properties
23:42:27.627 INFO SonarScanner CLI 8.1.0.6389
23:42:27.632 INFO Linux 6.12.105+deb13-amd64 amd64
23:42:30.512 INFO Communicating with SonarQube Cloud
23:42:30.513 INFO JRE provisioning: os[linux], arch[x86_64]
23:42:34.314 INFO Starting SonarScanner Engine...
23:42:34.314 INFO Java 21.0.11 Eclipse Adoptium (64-bit)
23:42:37.473 INFO Load global settings
23:42:40.520 INFO Load global settings (done) | time=3040ms
23:42:40.604 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu
23:42:40.768 INFO Loading required plugins
23:42:40.769 INFO Load plugins index
23:42:40.837 INFO Load plugins index (done) | time=67ms
23:42:40.837 INFO Load/download plugins
23:42:40.883 INFO Load/download plugins (done) | time=46ms
23:42:41.004 INFO Loaded core extensions: sca, a3s, architecture
23:42:43.811 INFO Process project properties
23:42:43.832 INFO Project key: krz_gitbay
23:42:43.832 INFO Base dir: /var/lib/gitbay-runner/work/build-1062
23:42:43.833 INFO Working dir: /var/lib/gitbay-runner/work/build-1062/.scannerwork
23:42:43.837 INFO Load project settings for component key: 'krz_gitbay'
23:42:44.144 INFO Load project settings for component key: 'krz_gitbay' (done) | time=303ms
23:42:44.163 INFO Check ALM binding of project 'krz_gitbay'
23:42:44.297 INFO Detected project binding: NOT_BOUND
23:42:44.298 INFO Check ALM binding of project 'krz_gitbay' (done) | time=134ms
23:42:44.301 INFO Load branch configuration
23:42:44.302 INFO Load branch configuration (done) | time=1ms
23:42:44.304 INFO Create analysis
23:42:44.586 INFO Branch name: ci-rebase-diffbase-176, type: short
23:42:44.586 INFO Create analysis (done) | time=281ms
23:42:44.738 INFO Load quality profiles
23:42:45.140 INFO Load quality profiles (done) | time=401ms
23:42:45.253 INFO Load active rules
23:42:45.657 INFO Load active rules (done) | time=404ms
23:42:45.790 INFO Organization key: krz
23:42:45.807 INFO Preprocessing files...
23:42:46.100 WARN File '/var/lib/gitbay-runner/work/build-1062/.sonar/sonar-scanner-8.1.0.6389-linux-x64/jre/lib/modules' is bigger than 20MB and as consequence is removed from the analysis scope.
23:42:46.108 WARN File '/var/lib/gitbay-runner/work/build-1062/.sonar/sonar-scanner-8.1.0.6389-linux-x64/jre/lib/server/libjvm.so' is bigger than 20MB and as consequence is removed from the analysis scope.
23:42:46.192 INFO 5 languages detected in 711 preprocessed files (done) | time=385ms
23:42:46.192 INFO 831 files ignored because of inclusion/exclusion patterns
23:42:46.192 INFO 3 directories skipped because of exclusion patterns (content not counted)
23:42:46.192 INFO 28 files ignored because of scm ignore settings
23:42:46.206 INFO Loading plugins for detected languages
23:42:46.207 INFO Load/download plugins
23:42:46.291 INFO Load/download plugins (done) | time=83ms
23:42:46.489 INFO Load project repositories
23:42:46.745 INFO Load project repositories (done) | time=255ms
23:42:46.748 INFO SCM collecting changed files in the branch
23:42:46.757 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
23:42:46.757 INFO SCM collecting changed files in the branch (done) | time=9ms
23:42:46.776 INFO Indexing files...
23:42:46.776 INFO Project configuration:
23:42:46.776 INFO Excluded sources: dist/**, **/testdata/**, internal/web/static/fonts/**, internal/store/migrations/**, **/build-wrapper-dump.json, **/*_test.go
23:42:46.776 INFO Included tests: **/*_test.go
23:42:46.899 INFO 711 files indexed (done) | time=123ms
23:42:46.901 INFO Quality profile for css: Sonar way essentials
23:42:46.906 INFO Quality profile for go: Sonar way essentials
23:42:46.906 INFO Quality profile for shell: Sonar way essentials
23:42:46.907 INFO Quality profile for web: Sonar way essentials
23:42:46.907 INFO Quality profile for yaml: Sonar way essentials
23:42:46.907 INFO ------------- Run sensors on module gitbay
23:42:46.956 INFO Load metrics repository
23:42:47.075 INFO Load metrics repository (done) | time=118ms
23:42:47.082 INFO Sensor cache enabled
23:42:47.085 INFO Load sensor cache
23:42:49.370 INFO Load sensor cache (1 MB) | time=2281ms
23:42:49.729 INFO Reflections took 59 ms to scan 1 urls, producing 30 keys and 295 values
23:42:50.357 INFO Sensor IaC YAML File Type Classification Sensor [iac]
23:42:50.381 INFO Sensor IaC YAML File Type Classification Sensor [iac] (done) | time=23ms
23:42:50.382 INFO Sensor GoModuleSecuritySensor [securitygofrontend]
23:42:50.383 INFO Sensor GoModuleSecuritySensor [securitygofrontend] (done) | time=0ms
23:42:50.383 INFO Sensor HTML [web]
23:42:50.799 INFO Sensor HTML [web] (done) | time=416ms
23:42:50.800 INFO Sensor Code Quality and Security for Go [go]
23:42:50.875 INFO 27 folders (386 files) to be analyzed
23:42:58.982 INFO 27/27 folders (386 files) have been analyzed
23:42:58.984 INFO Sensor Code Quality and Security for Go [go] (done) | time=8182ms
23:42:58.985 INFO Sensor IaC CloudFormation Sensor [iac]
23:42:58.988 INFO There are no files to be analyzed for the CloudFormation language
23:42:58.988 INFO Sensor IaC CloudFormation Sensor [iac] (done) | time=0ms
23:42:58.989 INFO Sensor IaC cfn-lint report Sensor [iac]
23:42:58.989 INFO Sensor IaC cfn-lint report Sensor [iac] (done) | time=0ms
23:42:58.990 INFO Sensor IaC Kustomization Sensor [iac]
23:42:58.990 INFO Sensor IaC Kustomization Sensor [iac] (done) | time=0ms
23:42:58.991 INFO Sensor IaC hadolint report Sensor [iac]
23:42:58.992 INFO Sensor IaC hadolint report Sensor [iac] (done) | time=0ms
23:42:58.992 INFO Sensor Java Config Sensor [iac]
23:42:58.993 INFO There are no files to be analyzed for the Java language
23:42:58.994 INFO Sensor Java Config Sensor [iac] (done) | time=0ms
23:42:58.994 INFO Sensor IaC Docker Sensor [iac]
23:42:58.995 INFO There are no files to be analyzed for the Docker language
23:42:58.996 INFO Sensor IaC Docker Sensor [iac] (done) | time=4ms
23:42:58.996 INFO Sensor IaC Ansible Sensor [iac]
23:42:58.996 INFO There are no files to be analyzed for the Ansible language
23:42:58.997 INFO Sensor IaC Ansible Sensor [iac] (done) | time=0ms
23:42:58.998 INFO Sensor IaC ansible-lint report Sensor [iac]
23:42:58.998 INFO Sensor IaC ansible-lint report Sensor [iac] (done) | time=0ms
23:42:58.999 INFO Sensor IaC spectral report Sensor [iac]
23:42:58.999 INFO Sensor IaC spectral report Sensor [iac] (done) | time=1ms
23:42:58.999 INFO Sensor IaC GitHub Actions Sensor [iac]
23:42:59.000 INFO There are no files to be analyzed for the GitHub Actions language
23:42:59.000 INFO Sensor IaC GitHub Actions Sensor [iac] (done) | time=0ms
23:42:59.001 INFO Sensor IaC actionlint report Sensor [iac]
23:42:59.001 INFO Sensor IaC actionlint report Sensor [iac] (done) | time=0ms
23:42:59.002 INFO Sensor IaC Azure Pipelines Sensor [iac]
23:42:59.002 INFO There are no files to be analyzed for the Azure Pipelines language
23:42:59.002 INFO Sensor IaC Azure Pipelines Sensor [iac] (done) | time=0ms
23:42:59.002 INFO Sensor IaC Shell Sensor [iac]
23:42:59.008 INFO 5 source files to be analyzed
23:42:59.078 INFO 5/5 source files have been analyzed
23:42:59.080 INFO Sensor IaC Shell Sensor [iac] (done) | time=86ms
23:42:59.081 INFO Sensor IaC Kubernetes Sensor [iac]
23:42:59.162 INFO There are no files to be analyzed for the Kubernetes language
23:42:59.164 INFO Sensor IaC Kubernetes Sensor [iac] (done) | time=71ms
23:42:59.164 INFO Sensor IaC YAML Sensor [iac]
23:42:59.164 INFO Sensor for language "YAML" is disabled by a feature flag. You can enable it by setting "sonar.featureflag.cloud-security-enable-generic-yaml-and-json-analyzer" to true.
23:42:59.164 INFO Sensor IaC YAML Sensor [iac] (done) | time=0ms
23:42:59.164 INFO Sensor Serverless configuration file sensor [security]
23:42:59.164 INFO 0 Serverless function entries were found in the project
23:42:59.165 INFO 0 Serverless function handlers were kept as entrypoints
23:42:59.165 INFO Sensor Serverless configuration file sensor [security] (done) | time=2ms
23:42:59.168 INFO Sensor AWS SAM template file sensor [security]
23:42:59.168 INFO Sensor AWS SAM template file sensor [security] (done) | time=4ms
23:42:59.168 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise]
23:42:59.186 INFO Available processors: 4
23:42:59.187 INFO Using 4 threads for analysis.
23:42:59.496 INFO The following rules are activated in the quality profile but will not raise any issue, because they are being rolled out progressively: secrets:S8136. You can enable it by setting: sonar.featureflag.cloud-security-enable-secrets-S8136 to true.
23:42:59.559 INFO Start fetching files for the text and secrets analysis
23:42:59.567 INFO Using Git CLI to retrieve dirty files
23:42:59.592 INFO Retrieving language associated files and files included via "sonar.text.inclusions" that are tracked by git
23:42:59.593 INFO Starting the text and secrets analysis
23:42:59.595 INFO 446 source files to be analyzed for the text and secrets analysis
23:43:00.297 INFO 446/446 source files have been analyzed for the text and secrets analysis
23:43:00.299 INFO Start fetching files for the binary file analysis
23:43:00.299 INFO There are no files to be analyzed for the binary file analysis
23:43:00.304 INFO 253 files are ignored because they are untracked by git or has been modified
23:43:00.305 INFO Sensor EnterpriseTextAndSecretsSensor [textenterprise] (done) | time=1146ms
23:43:00.306 INFO Sensor GoSecuritySensor [security]
23:43:00.313 INFO 9 taint analysis rules enabled.
23:43:01.209 INFO Analyzing 2251 UCFGs to detect vulnerabilities.
23:43:02.249 INFO All rules entry points : 32
23:43:02.250 INFO Retained UCFGs : 130
23:43:02.297 INFO 0 / 130 UCFGs simulated, memory usage: 365 MB
23:43:02.560 INFO 130 / 130 UCFGs simulated, memory usage: 409 MB
23:43:02.566 WARN Failed to find InputFile for __unknown_file, check exclusions.
23:43:02.569 WARN Failed to find InputFile for __unknown_file, check exclusions.
23:43:02.585 INFO go security sensor: Begin: 2026-09-06T21:43:00.310484792Z, End: 2026-09-06T21:43:02.582591492Z, Duration: 00:00:02.272
Resolve files to analyze: Begin: 2026-09-06T21:43:00.314488114Z, End: 2026-09-06T21:43:00.315754238Z, Duration: 00:00:00.001
Load type hierarchy and UCFGs: Begin: 2026-09-06T21:43:00.316038727Z, End: 2026-09-06T21:43:01.207319246Z, Duration: 00:00:00.891
Load type hierarchy: Begin: 2026-09-06T21:43:00.316044886Z, End: 2026-09-06T21:43:00.322812195Z, Duration: 00:00:00.006
Load UCFGs: Begin: 2026-09-06T21:43:00.322910664Z, End: 2026-09-06T21:43:01.207199876Z, Duration: 00:00:00.884
Check cache: Begin: 2026-09-06T21:43:01.207443903Z, End: 2026-09-06T21:43:01.208010586Z, Duration: 00:00:00.000
Load cache: Begin: 2026-09-06T21:43:01.207802612Z, End: 2026-09-06T21:43:01.207820740Z, Duration: 00:00:00.000
Create runtime call graph: Begin: 2026-09-06T21:43:01.208036915Z, End: 2026-09-06T21:43:01.808146587Z, Duration: 00:00:00.600
Variable Type Analysis #1: Begin: 2026-09-06T21:43:01.208506852Z, End: 2026-09-06T21:43:01.533821829Z, Duration: 00:00:00.325
Create runtime type propagation graph: Begin: 2026-09-06T21:43:01.209162679Z, End: 2026-09-06T21:43:01.369916133Z, Duration: 00:00:00.160
Run SCC (Tarjan) on 47249 nodes: Begin: 2026-09-06T21:43:01.380561435Z, End: 2026-09-06T21:43:01.443946409Z, Duration: 00:00:00.063
Propagate runtime types to strongly connected components: Begin: 2026-09-06T21:43:01.444084126Z, End: 2026-09-06T21:43:01.533708588Z, Duration: 00:00:00.089
Variable Type Analysis #2: Begin: 2026-09-06T21:43:01.536239345Z, End: 2026-09-06T21:43:01.805835761Z, Duration: 00:00:00.269
Create runtime type propagation graph: Begin: 2026-09-06T21:43:01.536248318Z, End: 2026-09-06T21:43:01.686495019Z, Duration: 00:00:00.150
Run SCC (Tarjan) on 47249 nodes: Begin: 2026-09-06T21:43:01.686602540Z, End: 2026-09-06T21:43:01.736271522Z, Duration: 00:00:00.049
Propagate runtime types to strongly connected components: Begin: 2026-09-06T21:43:01.736396359Z, End: 2026-09-06T21:43:01.805720407Z, Duration: 00:00:00.069
Load config: Begin: 2026-09-06T21:43:01.808209882Z, End: 2026-09-06T21:43:02.090060500Z, Duration: 00:00:00.281
Compute entry points: Begin: 2026-09-06T21:43:02.090245077Z, End: 2026-09-06T21:43:02.248833525Z, Duration: 00:00:00.158
Slice call graph: Begin: 2026-09-06T21:43:02.249100917Z, End: 2026-09-06T21:43:02.252303676Z, Duration: 00:00:00.003
Live variable analysis: Begin: 2026-09-06T21:43:02.252370966Z, End: 2026-09-06T21:43:02.295320621Z, Duration: 00:00:00.042
Taint analysis for go: Begin: 2026-09-06T21:43:02.295543666Z, End: 2026-09-06T21:43:02.559740009Z, Duration: 00:00:00.264
Report issues: Begin: 2026-09-06T21:43:02.559797996Z, End: 2026-09-06T21:43:02.569158025Z, Duration: 00:00:00.009
Store cache: Begin: 2026-09-06T21:43:02.569848914Z, End: 2026-09-06T21:43:02.581893672Z, Duration: 00:00:00.012
23:43:02.585 INFO go security sensor peak memory (pre-GC, max allocation pressure): 927 MB
23:43:02.585 INFO go security sensor peak memory (post-GC, max live footprint): 329 MB
23:43:02.585 INFO Sensor GoSecuritySensor [security] (done) | time=2277ms
23:43:02.591 INFO ------------- Run sensors on project
23:43:02.786 INFO Sensor Deterministic Rule Engine for Go [dre]
23:43:02.817 INFO Extracting bridge from /bridge/bridge-linux-x64.xz
23:43:03.206 INFO Bridge extracted to /var/lib/gitbay-runner/work/build-1062/.scannerwork/.sonartmp/bridge-dre/bridge
23:43:03.731 INFO Sensor Deterministic Rule Engine for Go [dre] (done) | time=943ms
23:43:03.731 INFO Sensor Deterministic Rule Engine for Shell [dre]
23:43:03.737 INFO Sensor Deterministic Rule Engine for Shell [dre] (done) | time=7ms
23:43:03.741 INFO Sensor SQL Dialect Detection [dre]
23:43:03.741 INFO Sensor SQL Dialect Detection [dre] (done) | time=1ms
23:43:03.741 INFO Sensor DRE Project Telemetry [dre]
23:43:03.741 INFO Sensor DRE Project Telemetry [dre] (done) | time=0ms
23:43:03.741 INFO Sensor GoProjectSensor [go]
23:43:03.742 INFO Sensor GoProjectSensor [go] (done) | time=1ms
23:43:03.743 INFO Sensor Sonar Go A3S Context Collector [go]
23:43:03.743 INFO Sensor Sonar Go A3S Context Collector [go] (done) | time=0ms
23:43:03.744 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector]
23:43:03.744 INFO Sensor goSecurityContextCollectorSensor [securitya3scontextcollector] (done) | time=0ms
23:43:03.745 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript]
23:43:03.996 INFO Detected os: Linux arch: amd64 alpine: false. Platform: LINUX_X64
23:43:03.998 INFO Deploy location /var/lib/gitbay-runner/.sonar/js/node-runtime, tagetRuntime: /var/lib/gitbay-runner/.sonar/js/node-runtime/node, version: /var/lib/gitbay-runner/.sonar/js/node-runtime/version.txt
23:43:04.010 INFO Using embedded Node.js runtime.
23:43:04.010 INFO Using Node.js executable: '/var/lib/gitbay-runner/.sonar/js/node-runtime/node'.
23:43:06.308 INFO Memory configuration: OS (7945 MB), Node.js (2240 MB).
23:43:06.321 INFO gRPC analyze-project server listening on 127.0.0.1:35233
23:43:06.508 INFO Plugin version: [13.8.0.44569]
23:43:08.912 INFO Found 0 tsconfig.json file(s): []
23:43:08.998 WARN Failed to parse file [internal/web/templates/issues.html] at line 10: Unknown word {{index $.LabelColors .Value}}
23:43:09.131 WARN Failed to parse file [internal/web/templates/labels.html] at line 8: Unknown word {{index $.LabelColors .Name}}
23:43:09.136 WARN Failed to parse file [internal/web/templates/issue.html] at line 6: Unknown word {{index $.LabelColors .}}
23:43:09.150 INFO 39 source files to be analyzed
23:43:09.151 INFO 39/39 source files have been analyzed
23:43:09.173 INFO JasminAstConsumer done
23:43:09.173 INFO Hit the cache for 0 out of 38
23:43:09.173 INFO Miss the cache for 38 out of 38: ANALYSIS_MODE_INELIGIBLE [38/38]
23:43:09.173 INFO Sensor JavaScript/TypeScript/CSS analysis [javascript] (done) | time=5428ms
23:43:09.174 INFO Sensor IaC Project Sensor [iac]
23:43:09.176 INFO Sensor IaC Project Sensor [iac] (done) | time=1ms
23:43:09.176 INFO Sensor Zero Coverage Sensor
23:43:09.207 INFO Sensor Zero Coverage Sensor (done) | time=31ms
23:43:09.217 INFO ------------- Gather SCA dependencies on project
23:43:09.443 INFO Dependency analysis skipped
23:43:09.469 INFO CPD Executor 2 files had no CPD blocks
23:43:09.470 INFO CPD Executor Calculating CPD for 224 files
23:43:09.523 INFO CPD Executor CPD calculation finished (done) | time=53ms
23:43:09.526 INFO SCM Publisher SCM provider for this project is: git
23:43:09.526 INFO SCM Publisher 2 source files to be analyzed
23:43:09.665 INFO SCM Publisher 2/2 source files have been analyzed (done) | time=138ms
23:43:09.671 INFO SCM revision ID '8c791ac207071f20156df113c20a2df74596ef1b'
23:43:09.750 INFO SCM writing changed lines
23:43:09.752 WARN Could not find ref 'master' in refs/heads, refs/remotes, refs/remotes/upstream or refs/remotes/origin
23:43:09.752 INFO SCM writing changed lines (done) | time=2ms
23:43:09.833 INFO Analysis report generated in 157ms, dir size=640 KB
23:43:10.049 INFO Analysis report compressed in 215ms, zip size=332 KB
23:43:10.379 INFO Analysis report uploaded in 329ms
23:43:10.380 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=krz_gitbay&branch=ci-rebase-diffbase-176&resolved=false
23:43:10.381 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report
23:43:10.381 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AaB4rN7xBlKrDa6g_XhN
23:43:10.381 INFO ------------- Upload SCA dependency files
23:43:10.940 INFO Sensor cache published successfully
23:43:11.209 INFO Analysis total time: 30.204 s
23:43:11.237 INFO SonarScanner Engine completed successfully
23:43:11.587 INFO EXECUTION SUCCESS
23:43:11.588 INFO Total time: 43.980s