Skip to content
Snippets Groups Projects
This job is archived. Only the complete pipeline can be retried.
1Running with gitlab-runner 17.7.0~pre.103.g896916a8 (896916a8)
2 on green-6.private.runners-manager.gitlab.com/staging.gitlab.com BTQsmtCx8, system ID: s_44fde8db605e
3Resolving secrets
4 Preparing the "docker+machine" executor 00:52
5Using Docker executor with image registry.gitlab.com/security-products/semgrep:5 ...
6Pulling docker image registry.gitlab.com/security-products/semgrep:5 ...
7Using docker image sha256:5e3512e87805bee1f68125f681ec396ae0ab71efd7900562831a51300d79df3b for registry.gitlab.com/security-products/semgrep:5 with digest registry.gitlab.com/security-products/semgrep@sha256:5a13eba3579da6282d9ec433c1b35e794293b9e8ac7e57fa27901d67ad6b0f0e ...
8 Preparing environment 00:03
9Running on runner-btqsmtcx8-project-7091227-concurrent-0 via runner-btqsmtcx8-private-1738661972-9d4528f4...
10 Getting source from Git repository 00:02
11Fetching changes with git depth set to 20...
12Initialized empty Git repository in /builds/gitlab-com/gl-infra/common-ci-tasks/.git/
13Created fresh repository.
14Checking out 70a77653 as detached HEAD (ref is main)...
15Skipping Git submodules setup
16$ git remote set-url origin "${CI_REPOSITORY_URL}"
17 Executing "step_script" stage of the job script 00:11
18Using docker image sha256:5e3512e87805bee1f68125f681ec396ae0ab71efd7900562831a51300d79df3b for registry.gitlab.com/security-products/semgrep:5 with digest registry.gitlab.com/security-products/semgrep@sha256:5a13eba3579da6282d9ec433c1b35e794293b9e8ac7e57fa27901d67ad6b0f0e ...
19$ /analyzer run
20[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ GitLab Semgrep analyzer v5.26.1
21[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ Detecting project
22[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ Analyzer will attempt to analyze all projects in the repository
23[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ Loading ruleset for /builds/gitlab-com/gl-infra/common-ci-tasks
24[WARN] [Semgrep] [2025-02-04T09:40:29Z] ▶ /builds/gitlab-com/gl-infra/common-ci-tasks/.gitlab/sast-ruleset.toml not found, ruleset customization will be disabled.
25[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ Running analyzer
26[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ 19 active rule files detected with 587 active rules
27[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/bandit.yml': '1d5f1383c92f36acb1d037009fe18a1f2b23e018a4b4cf6d62f779876bf4954d'
28[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/eslint.yml': '9a0000468fb7788df7a1f0dcedab6b52f63f48bb20e23be1703d09df4f26a43d'
29[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/find_sec_bugs.yml': '4ffaf454577a0f2570a5923eb626c5ad5cc2acb61ba69f195133446bb13ce016'
30[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/find_sec_bugs_scala.yml': '511d1fcd1844c8c598ce2eecacf95ab876bfadb01c7740d474d007250f033a97'
31[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/flawfinder.yml': 'c03d70d0acaf5d6f42173b0141fd1ac40fb2a61b2d9e6867d6785b56f366bf90'
32[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/gitlab/gitlab_ee_java.yml': '4447e55e10167e94a8e720d2b4c0b468de341261c3416fd32ceb63ba15bff134'
33[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/gitlab/gitlab_ee_javascript.yml': '428c386226edb09210df0df08ca4c2464949e948a88045694b3cfaab8079b8dc'
34[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/gitlab_ce_python.yml': 'a1adf6cde5fa7e8ef530bd3ec122f6ac827e989f2c862aeae28a58a69c78ab6b'
35[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/gitlab_ce_scala.yml': 'ee3d5ba84846f6c94085a1a76d3d250e68ce9c7f7502003647f7125a8667e1a3'
36[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/gosec.yml': '2f8a4f954c8358ed4b5529be4f557190090209df1ac67bf55d24af2d755ffca0'
37[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl-cc/brakeman.yml': '27bfe7c3e464b2786c360004c50a8e487c46f9ea7ffe011b5190696224665301'
38[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl-cc/gitlab_lgpl_cc_java.yml': '17d681aba56265d68cbeb7e90681f2d69d8c0440714acb4940b57e9b5cb67bbb'
39[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl-cc/gitlab_lgpl_cc_javascript.yml': 'abf15ac30a8c820f2d192a812d48f3a76e805c1cd3bee91d3b19d7c09d482519'
40[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl-cc/gitlab_lgpl_cc_python.yml': '4fcb59e05b1bdb418ab3ce009b0af0c565fe16d255013f9f65e1981734fafbe8'
41[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl-cc/phpcs_security_audit.yml': '7f3448e2fdbca069c55c5f34971fc48382ec1af86a973ee24614ce320494d630'
42[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl/find_sec_bugs_kotlin.yml': '46cdf5ab58a11576cb48f87c42e587f21136e01b33b352d7444e8c74e5ae446f'
43[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl/mobsf.yml': '18c9f0273caf79503e75cfdff7efa38fdec4a9e5f3084ebb915fe492a3446f66'
44[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/lgpl/nodejs_scan.yml': 'f278351679f6874078ce4fd6a04b103936e944fd82936a919632d3cba2110ca8'
45[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ * rule file '/rules/security_code_scan.yml': 'a145b41abb93f352f70e9e7b7c335d09d0e1a95298f7fed85e35ef2fd3d7e4e8'
46[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ Combined rule checksum: '50cd48f2f6b045e313e5070f3e04df87c8aa93267e2f8a24321f7ba202745e1d'
47[INFO] [Semgrep] [2025-02-04T09:40:29Z] ▶ Using the GitLab SAST default ruleset
48[INFO] [Semgrep] [2025-02-04T09:40:30Z] ▶ METRICS: Using configs from the Registry (like --config=p/ci) reports pseudonymous rule metrics to semgrep.dev.
49[INFO] [Semgrep] [2025-02-04T09:40:30Z] ▶ To disable Registry rule metrics, use "--metrics=off".
50[INFO] [Semgrep] [2025-02-04T09:40:30Z] ▶ Using configs only from local files (like --config=xyz.yml) does not enable metrics.
51[INFO] [Semgrep] [2025-02-04T09:40:30Z] ▶
52[INFO] [Semgrep] [2025-02-04T09:40:30Z] ▶ More information: https://semgrep.dev/docs/metrics
53[INFO] [Semgrep] [2025-02-04T09:40:30Z] ▶
54[INFO] [Semgrep] [2025-02-04T09:40:38Z] ▶
55[INFO] [Semgrep] [2025-02-04T09:40:38Z] ▶
56[INFO] [Semgrep] [2025-02-04T09:40:38Z] ▶ ┌─────────────┐
57[INFO] [Semgrep] [2025-02-04T09:40:38Z] ▶ │ Scan Status │
58[INFO] [Semgrep] [2025-02-04T09:40:38Z] ▶ └─────────────┘
59[INFO] [Semgrep] [2025-02-04T09:40:38Z] ▶ Scanning 159 files with 587 Code rules:
60[INFO] [Semgrep] [2025-02-04T09:40:38Z] ▶ Scanning 1 file with 79 python rules.
61[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶
62[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶
63[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ ┌──────────────┐
64[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ │ Scan Summary │
65[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ └──────────────┘
66[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ Some files were skipped or only partially analyzed.
67[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ Scan skipped: 6 files matching --exclude patterns, 1 files matching .semgrepignore patterns
68[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ For a full list of skipped files, run semgrep with the --verbose flag.
69[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶
70[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ Ran 79 rules on 1 file: 0 findings.
71[INFO] [Semgrep] [2025-02-04T09:40:39Z] ▶ Creating report
72[INFO] [2025-02-04T09:40:40Z] ▶ /builds/gitlab-com/gl-infra/common-ci-tasks/gl-report-post.json written
73 Uploading artifacts for successful job 00:02
74Uploading artifacts...
75gl-sast-report.json: found 1 matching artifact files and directories
76WARNING: Upload request redirected location=https://staging.gitlab.com/api/v4/jobs/139814813/artifacts?artifact_format=raw&artifact_type=sast new-url=https://staging.gitlab.com
77WARNING: Retrying... context=artifacts-uploader error=request redirected
78Uploading artifacts as "sast" to coordinator... 201 Created id=139814813 responseStatus=201 Created token=glcbt-66
79 Cleaning up project directory and file based variables 00:01
80Job succeeded