semgrep-sast (#23743) · Jobs · CoTA / cota-backend

passed Job semgrep-sast triggered 2 months ago by
1Running with gitlab-runner 14.1.0 (8925d9a0)
2  on dockerized tp-gitlab Y6Tx6mff
 3 Resolving secrets  
  00:00
 
 5 Preparing the "docker" executor  
  00:03
 6Using Docker executor with image registry.gitlab.com/security-products/semgrep:3 ...
7Pulling docker image registry.gitlab.com/security-products/semgrep:3 ...
8Using docker image sha256:ba9ee6b6f770d81051bda6381f74246c730b618ea93eb54b215cbeb862aff0ee for registry.gitlab.com/security-products/semgrep:3 with digest registry.gitlab.com/security-products/semgrep@sha256:258ceebede48e14d7eb3759018537b4602950a93d146c1d7b9c240eebabf35e3 ...
 10 Preparing environment  
  00:00
 11Running on runner-y6tx6mff-project-632-concurrent-0 via 214e4bef7b22...
 13 Getting source from Git repository  
  00:01
 14Fetching changes with git depth set to 20...
15Reinitialized existing Git repository in /builds/gitlab/cota/cota-backend/.git/
16Checking out 49f19419 as amg-dev-volumes...
17Removing gl-sast-report.json
18Removing semgrep.sarif
19Removing vetstore/
20Skipping Git submodules setup
 22 Executing "step_script" stage of the job script  
  00:15
 23Using docker image sha256:ba9ee6b6f770d81051bda6381f74246c730b618ea93eb54b215cbeb862aff0ee for registry.gitlab.com/security-products/semgrep:3 with digest registry.gitlab.com/security-products/semgrep@sha256:258ceebede48e14d7eb3759018537b4602950a93d146c1d7b9c240eebabf35e3 ...
24$ /analyzer run
25[INFO] [Semgrep] [2025-01-14T10:09:28Z] ▶ GitLab Semgrep analyzer v3.14.8
26[INFO] [Semgrep] [2025-01-14T10:09:28Z] ▶ Detecting project
27[INFO] [Semgrep] [2025-01-14T10:09:28Z] ▶ Analyzer will attempt to analyze all projects in the repository
28[INFO] [Semgrep] [2025-01-14T10:09:28Z] ▶ Running analyzer
29[INFO] [Semgrep] [2025-01-14T10:09:41Z] ▶ Creating report
30[INFO] [2025-01-14T10:09:41Z] ▶ /builds/gitlab/cota/cota-backend/gl-sast-report-post.json written
31[INFO] [VET] [2025-01-14T10:09:41Z] ▶ GitLab VET analyzer v0.17.5
32████████████████████████████████████████████████
33███  ████  █████  ██  █    █      ██    ██    ██
34██    ██    ████  ██  █ ██████  ████ ████████ ██
35█            ███  ██  █    ███  ████ ███  ███ ██
36██          ████  ██  █ ██████  ████ ████████ ██
37████      ███████    ██    ███  ████    ██    ██
38██████  ████████████████████████████████████████
39████████████████████████████████████████████████
40[//vet import --src /builds/gitlab/cota/cota-backend --store /builds/gitlab/cota/cota-backend/vetstore --file-ext .go]
41[INFO] [VET] [2025-01-14T10:09:41Z] ▶ Vet Import Process Starting...
42[INFO] [VET] [2025-01-14T10:09:41Z] ▶ 
43Import time 0.062566 seconds
44[INFO] [VET] [2025-01-14T10:09:41Z] ▶ VET import complete
45████████████████████████████████████████████████
46███  ████  █████  ██  █    █      ██    ██    ██
47██    ██    ████  ██  █ ██████  ████ ████████ ██
48█            ███  ██  █    ███  ████ ███  ███ ██
49██          ████  ██  █ ██████  ████ ████████ ██
50████      ███████    ██    ███  ████    ██    ██
51██████  ████████████████████████████████████████
52████████████████████████████████████████████████
53[//vet verify --reportIn /builds/gitlab/cota/cota-backend/gl-sast-report.json --reportOut /builds/gitlab/cota/cota-backend/gl-sast-report-post.json --store /builds/gitlab/cota/cota-backend/vetstore --config /verify/semgrep.toml]
54[INFO] [VET] [2025-01-14T10:09:41Z] ▶ GitLab VET analyzer v0.17.5
55[INFO] [VET] [2025-01-14T10:09:41Z] ▶ Augment report
56[INFO] [VET] [2025-01-14T10:09:41Z] ▶ Report augmented within 0.005455 seconds
57[INFO] [VET] [2025-01-14T10:09:41Z] ▶ /builds/gitlab/cota/cota-backend/gl-sast-report-post.json written
 59 Uploading artifacts for successful job  
  00:01
 60Uploading artifacts...
61gl-sast-report.json: found 1 matching files and directories 
62Uploading artifacts as "sast" to coordinator... ok  id=23743 responseStatus=201 Created token=nzsSdGBz
 64 Cleaning up file based variables  
  00:01
 
66Job succeeded