Skip to content
Snippets Groups Projects

semgrep-sast

Passed Started by
Simon Knox
@psimyn
1Running with gitlab-runner 16.3.0~beta.108.g2b6048b4 (2b6048b4)
2 on blue-1.private.runners-manager.gitlab.com/gitlab.com/gitlab-org 1zzGUpzq, system ID: s_fc31da7ae46e
3 feature flags: FF_NETWORK_PER_BUILD:true, FF_USE_IMPROVED_URL_MASKING:true, FF_RESOLVE_FULL_TLS_CHAIN:false
4 Resolving secrets 00:00
5 Preparing the "docker+machine" executor 00:09
6Using Docker executor with image registry.gitlab.com/security-products/semgrep:4 ...
7Authenticating with credentials from job payload (GitLab Registry)
8Pulling docker image registry.gitlab.com/security-products/semgrep:4 ...
9Using docker image sha256:b8b8fa090a6b5b8271a62d804338a5dc30437be44c214e7c6c5df155c1784fbc for registry.gitlab.com/security-products/semgrep:4 with digest registry.gitlab.com/security-products/semgrep@sha256:72f93bb715c9fffe2c9a1bdaa4bd7d0d66425461f9ed66161863ffcb0f713232 ...
10 Preparing environment 00:03
11Running on runner-1zzgupzq-project-7071551-concurrent-0 via runner-1zzgupzq-private-1695279041-d46b2d18...
12 Getting source from Git repository 00:07
13Fetching changes...
14Initialized empty Git repository in /builds/gitlab-org/gitlab-ui/.git/
15Created fresh repository.
16Checking out 9e3cd1cc as detached HEAD (ref is refs/merge-requests/3612/train)...
17Skipping Git submodules setup
18$ git remote set-url origin "${CI_REPOSITORY_URL}"
19 Executing "step_script" stage of the job script 00:12
20Using docker image sha256:b8b8fa090a6b5b8271a62d804338a5dc30437be44c214e7c6c5df155c1784fbc for registry.gitlab.com/security-products/semgrep:4 with digest registry.gitlab.com/security-products/semgrep@sha256:72f93bb715c9fffe2c9a1bdaa4bd7d0d66425461f9ed66161863ffcb0f713232 ...
21$ /analyzer run
22[INFO] [Semgrep] [2023-09-21T06:51:55Z] ▶ GitLab Semgrep analyzer v4.4.12
23[INFO] [Semgrep] [2023-09-21T06:51:55Z] ▶ Detecting project
24[INFO] [Semgrep] [2023-09-21T06:51:55Z] ▶ Analyzer will attempt to analyze all projects in the repository
25[INFO] [Semgrep] [2023-09-21T06:51:55Z] ▶ Running analyzer
26[INFO] [Semgrep] [2023-09-21T06:52:05Z] ▶ Creating report
27[INFO] [2023-09-21T06:52:06Z] ▶ /builds/gitlab-org/gitlab-ui/gl-sast-report-post.json written
28[INFO] [VET] [2023-09-21T06:52:06Z] ▶ GitLab VET analyzer v0.18.3
29████████████████████████████████████████████████
30███ ████ █████ ██ █ █ ██ ██ ██
31██ ██ ████ ██ █ ██████ ████ ████████ ██
32█ ███ ██ █ ███ ████ ███ ███ ██
33██ ████ ██ █ ██████ ████ ████████ ██
34████ ███████ ██ ███ ████ ██ ██
35██████ ████████████████████████████████████████
36████████████████████████████████████████████████
37[//vet import --src /builds/gitlab-org/gitlab-ui --store /builds/gitlab-org/gitlab-ui/vetstore --file-ext .go]
38[INFO] [VET] [2023-09-21T06:52:06Z] ▶ Vet Import Process Starting...
39[INFO] [VET] [2023-09-21T06:52:06Z] ▶
40Import time 0.022568 seconds
41[INFO] [VET] [2023-09-21T06:52:06Z] ▶ VET import complete
42[INFO] [VET] [2023-09-21T06:52:06Z] ▶ GitLab VET analyzer v0.18.3
43████████████████████████████████████████████████
44███ ████ █████ ██ █ █ ██ ██ ██
45██ ██ ████ ██ █ ██████ ████ ████████ ██
46█ ███ ██ █ ███ ████ ███ ███ ██
47██ ████ ██ █ ██████ ████ ████████ ██
48████ ███████ ██ ███ ████ ██ ██
49██████ ████████████████████████████████████████
50████████████████████████████████████████████████
51[//vet verify --reportIn /builds/gitlab-org/gitlab-ui/gl-sast-report.json --reportOut /builds/gitlab-org/gitlab-ui/gl-sast-report-post.json --store /builds/gitlab-org/gitlab-ui/vetstore --config /verify/semgrep.toml]
52[INFO] [VET] [2023-09-21T06:52:06Z] ▶ Augment report
53[INFO] [VET] [2023-09-21T06:52:06Z] ▶ Report augmented within 0.001936 seconds
54[INFO] [VET] [2023-09-21T06:52:06Z] ▶ /builds/gitlab-org/gitlab-ui/gl-sast-report-post.json written
55 Uploading artifacts for successful job 00:02
56Uploading artifacts...
57gl-sast-report.json: found 1 matching artifact files and directories
58WARNING: Upload request redirected location=https://gitlab.com/api/v4/jobs/5135134460/artifacts?artifact_format=raw&artifact_type=sast new-url=https://gitlab.com
59WARNING: Retrying... context=artifacts-uploader error=request redirected
60Uploading artifacts as "sast" to coordinator... 201 Created id=5135134460 responseStatus=201 Created token=64_qHHie
61 Cleaning up project directory and file based variables 00:00
62Job succeeded