Skip to content
Snippets Groups Projects

secret_detection

Passed Started by
🤖 GitLab Bot 🤖
@gitlab-bot
1Running with gitlab-runner 14.3.0-rc1 (ed15bfbf)
2 on green-2.private.runners-manager.gitlab.com/gitlab.com/gitlab-org GaSD-S1F
3 feature flags: FF_USE_FASTZIP:true
4 Resolving secrets 00:00
5 Preparing the "docker+machine" executor 00:05
6Using Docker executor with image registry.gitlab.com/gitlab-org/security-products/analyzers/secrets:3 ...
7Authenticating with credentials from job payload (GitLab Registry)
8Pulling docker image registry.gitlab.com/gitlab-org/security-products/analyzers/secrets:3 ...
9Using docker image sha256:a0f33940861fed9d8527d7db602c6d8a3609cd19dd98fd86c1694fcbdb69e73c for registry.gitlab.com/gitlab-org/security-products/analyzers/secrets:3 with digest registry.gitlab.com/gitlab-org/security-products/analyzers/secrets@sha256:daa8598a778c00e71225e326b61ce7076cef0eb9e728c1a945a50a2236f1b0c2 ...
10 Preparing environment 00:01
11Running on runner-gasd-s1f-project-278964-concurrent-0 via runner-gasd-s1f-private-1632932215-8fd0a330...
12 Getting source from Git repository 00:33
13$ eval "$CI_PRE_CLONE_SCRIPT"
14Downloading archived master...
15Connecting to storage.googleapis.com (172.217.193.128:443)
16saving to '/tmp/gitlab.tar.gz'
17gitlab.tar.gz 2% | | 9.9M 0:00:33 ETA
18gitlab.tar.gz 82% |************************** | 284M 0:00:00 ETA
19gitlab.tar.gz 100% |********************************| 344M 0:00:00 ETA
20'/tmp/gitlab.tar.gz' saved
21Extracting tarball into /builds/gitlab-org/gitlab...
22Fetching changes with git depth set to 20...
23Reinitialized existing Git repository in /builds/gitlab-org/gitlab/.git/
24Created fresh repository.
25remote: Enumerating objects: 1860, done.
26remote: Counting objects: 100% (891/891), done.
27remote: Compressing objects: 100% (268/268), done.
28remote: Total 418 (delta 324), reused 196 (delta 141), pack-reused 0
29Receiving objects: 100% (418/418), 80.57 KiB | 3.66 MiB/s, done.
30Resolving deltas: 100% (324/324), completed with 189 local objects.
31From https://gitlab.com/gitlab-org/gitlab
32 * [new ref] c961d713ce276cf358ce20aea5119841cb99ecf3 -> refs/pipelines/379635956
33Checking out c961d713 as refs/merge-requests/71273/merge...
34Skipping Git submodules setup
35 Executing "step_script" stage of the job script 00:06
36Using docker image sha256:a0f33940861fed9d8527d7db602c6d8a3609cd19dd98fd86c1694fcbdb69e73c for registry.gitlab.com/gitlab-org/security-products/analyzers/secrets:3 with digest registry.gitlab.com/gitlab-org/security-products/analyzers/secrets@sha256:daa8598a778c00e71225e326b61ce7076cef0eb9e728c1a945a50a2236f1b0c2 ...
37$ if [ -n "$CI_COMMIT_TAG" ]; then echo "Skipping Secret Detection for tags. No code changes have occurred."; exit 0; fi
38$ if [ "$CI_COMMIT_BRANCH" = "$CI_DEFAULT_BRANCH" ]; then echo "Running Secret Detection on default branch."; /analyzer run; exit 0; fi
39$ git fetch origin $CI_DEFAULT_BRANCH $CI_COMMIT_REF_NAME
40From https://gitlab.com/gitlab-org/gitlab
41 * branch master -> FETCH_HEAD
42 * branch acunskis-slow-network-fix -> FETCH_HEAD
43 * [new branch] master -> origin/master
44 * [new branch] acunskis-slow-network-fix -> origin/acunskis-slow-network-fix
45$ git log --left-right --cherry-pick --pretty=format:"%H" refs/remotes/origin/$CI_DEFAULT_BRANCH...refs/remotes/origin/$CI_COMMIT_REF_NAME > "$CI_COMMIT_SHA"_commit_list.txt
46$ export SECRET_DETECTION_COMMITS_FILE="$CI_COMMIT_SHA"_commit_list.txt
47$ /analyzer run
48[INFO] [secrets] [2021-09-29T17:57:11Z] ▶ GitLab secrets analyzer v3.21.0
49[INFO] [secrets] [2021-09-29T17:57:11Z] ▶ Detecting project
50[INFO] [secrets] [2021-09-29T17:57:11Z] ▶ Found project in /builds/gitlab-org/gitlab
51[INFO] [secrets] [2021-09-29T17:57:11Z] ▶ Running analyzer
52[INFO] [secrets] [2021-09-29T17:57:14Z] ▶ Creating report
53$ rm "$CI_COMMIT_SHA"_commit_list.txt
54 Uploading artifacts for successful job 00:03
55Uploading artifacts...
56gl-secret-detection-report.json: found 1 matching files and directories
57Uploading artifacts as "archive" to coordinator... ok id=1634948800 responseStatus=201 Created token=3TbL_eHw
58Uploading artifacts...
59gl-secret-detection-report.json: found 1 matching files and directories
60Uploading artifacts as "secret_detection" to coordinator... ok id=1634948800 responseStatus=201 Created token=3TbL_eHw
61 Cleaning up project directory and file based variables 00:01
62Job succeeded