Job Analysis

1 14:27:24 Running with gitlab-runner 18.5.0 (bda84871)

2 14:27:24 on gitlab-runner-linux-1-86d76d468c-d4585 wRxjPbsJX, system ID: r_J8j67beySAjl

3 14:27:24 feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_TIMESTAMPS:true, FF_GIT_URLS_WITHOUT_TOKENS:true

4 14:27:24 Resolving secrets

5 14:27:24 section_start:1765290444:prepare_executor

6 14:27:24 +Preparing the "kubernetes" executor

7 14:27:24 Using Kubernetes namespace: gitlab-runner

8 14:27:24 Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:74a2a43dda32b2139d91201cdc8a6c45ee153060573ed00f11c0ef36942578b7 ...

9 14:27:24 Using attach strategy to execute scripts...

10 14:27:24 Using effective pull policy of [Always] for container build

11 14:27:24 Using effective pull policy of [Always] for container helper

12 14:27:24 Using effective pull policy of [Always] for container init-permissions

13 14:27:25 section_end:1765290445:prepare_executor

14 14:27:25 +section_start:1765290445:prepare_script

15 14:27:25 +Preparing environment

16 14:27:25 Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...

17 14:27:25 WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...

18 14:27:25 Subscribing to Kubernetes Pod events...

19 14:27:25 Type Reason Message

20 14:27:25 Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-4-9n9zz0wc to ip-10-0-18-218.eu-central-1.compute.internal

21 14:27:26 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.5.0" already present on machine

22 14:27:26 Normal Created Created container: init-permissions

23 14:27:26 Normal Started Started container init-permissions

24 14:27:26 Normal Pulled Container image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:74a2a43dda32b2139d91201cdc8a6c45ee153060573ed00f11c0ef36942578b7" already present on machine

25 14:27:26 Normal Created Created container: build

26 14:27:26 Normal Started Started container build

27 14:27:26 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.5.0" already present on machine

28 14:27:26 Normal Created Created container: helper

29 14:27:26 Normal Started Started container helper

30 14:27:29 Running on runner-wrxjpbsjx-project-621-concurrent-4-9n9zz0wc via gitlab-runner-linux-1-86d76d468c-d4585...

31 14:27:29

32 14:27:29 section_end:1765290449:prepare_script

33 14:27:29 +section_start:1765290449:get_sources

34 14:27:29 +Getting source from Git repository

35 14:27:30 Gitaly correlation ID: 01KC1R51Q48EEKY2XJ80N3Q8DD

36 14:27:30 Fetching changes with git depth set to 50...

37 14:27:30 Initialized empty Git repository in /build/internal/gitlab-templates/.git/

38 14:27:30 Created fresh repository.

39 14:27:31 Checking out 940006cc as detached HEAD (ref is refs/merge-requests/507/merge)...

40 14:27:31

41 14:27:31 Skipping Git submodules setup

42 14:27:31

43 14:27:31 section_end:1765290451:get_sources

44 14:27:31 +section_start:1765290451:step_script

45 14:27:31 +Executing "step_script" stage of the job script

46 14:27:31 section_start:1765290451:section_pre_build_script_0[hide_duration=true,collapsed=true] $ function cleanup {

47 14:27:31 rv=$?

48 14:27:31 if [ $rv -ne 0 ]; then

49 14:27:31 echo ""

50 14:27:31 echo " Failure Cause Analysis might help, please open this link:"

51 14:27:31 echo " https://failure-cause-analysis.zrh.int.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"

52 14:27:31 echo ""

53 14:27:31 fi

54 14:27:31 echo ""

55 14:27:31 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"

56 14:27:31 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"

57 14:27:31 echo ""

58 14:27:31 exit $rv

59 14:27:31 }

60 14:27:31 trap cleanup EXIT

61 14:27:31 echo "INFO: This is the CI job pre_build_script"

62 14:27:31 echo "INFO: It's defined in the backend/infra/aws repo."

63 14:27:31 echo "INFO: These additional Scandit variables are available to you:"

64 14:27:31 echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"

65 14:27:31 echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"

66 14:27:31 echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"

67 14:27:31 if command -v numfmt >/dev/null 2>&1; then

68 14:27:31 echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"

69 14:27:31 else

70 14:27:31 echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"

71 14:27:31 fi

72 14:27:31 __start_time=${EPOCHSECONDS}

73 14:27:31 echo ""

74 14:27:31 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"

75 14:27:31 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"

76 14:27:31 echo ""

77 14:27:31 echo "Setting up credentials for Gitlab Python registries"

78 14:27:31 mkdir -p ~

79 14:27:31 echo "machine gitlab.scandit.com" > ~/.netrc

80 14:27:31 echo "login gitlab-ci-token" >> ~/.netrc

81 14:27:31 echo "password ${CI_JOB_TOKEN}" >> ~/.netrc

82 14:27:31 chmod 600 ~/.netrc

83 14:27:31 if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then

84 14:27:31 git config --global --add safe.directory $CI_PROJECT_DIR

85 14:27:31 fi

86 14:27:31 # Sonarqube server is running on the same cluster. Use internal address

87 14:27:31 export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"

88 14:27:31 section_end:1765290451:section_pre_build_script_0

89 14:27:31 INFO: This is the CI job pre_build_script

90 14:27:31 INFO: It's defined in the backend/infra/aws repo.

91 14:27:31 INFO: These additional Scandit variables are available to you:

92 14:27:31 SC_K8S_NODE_NAME: ip-10-0-18-218.eu-central-1.compute.internal

93 14:27:31 SC_K8S_IMAGE_ID:

94 14:27:31 cpu (r/l): 1/4

95 14:27:31 memory (r/l): 1.0GB/16GB

96 14:27:31

97 14:27:31 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-18-218.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-4-9n9zz0wc&var-resolution=15&from=1765290451000&to=now

98 14:27:31 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-18-218.eu-central-1.compute.internal&var-resolution=15s&from=1765290451000&to=now

99 14:27:31

100 14:27:31 Setting up credentials for Gitlab Python registries

101 14:27:31 $ uv pip install --system -r requirements.txt

102 14:27:31 Using Python 3.12.12 environment at: /usr/local

103 14:27:32 Resolved 7 packages in 114ms

104 14:27:32 Downloading pygments (1.2MiB)

105 14:27:32 Downloaded pygments

106 14:27:32 Prepared 7 packages in 44ms

107 14:27:32 Installed 7 packages in 14ms

108 14:27:32 + coverage==7.13.0

109 14:27:32 + iniconfig==2.3.0

110 14:27:32 + packaging==25.0

111 14:27:32 + pluggy==1.6.0

112 14:27:32 + pygments==2.19.2

113 14:27:32 + pytest==9.0.1

114 14:27:32 + pytest-cov==7.0.0

115 14:27:32 section_start:1765290451:section_script_step_1[hide_duration=true,collapsed=true] $ set -e

116 14:27:32

117 14:27:32 function log_info() {

118 14:27:32 echo -e "[\e[1;94mINFO\e[0m] $*"

119 14:27:32 }

120 14:27:32

121 14:27:32 function log_warn() {

122 14:27:32 echo -e "[\e[1;93mWARN\e[0m] $*"

123 14:27:32 }

124 14:27:32

125 14:27:32 function log_error() {

126 14:27:32 echo -e "[\e[1;91mERROR\e[0m] $*"

127 14:27:32 }

128 14:27:32

129 14:27:32 function fail() {

130 14:27:32 log_error "$*"

131 14:27:32 exit 1

132 14:27:32 }

133 14:27:32

134 14:27:32 function assert_defined() {

135 14:27:32 if [[ -z "$1" ]]

136 14:27:32 then

137 14:27:32 log_error "$2"

138 14:27:32 exit 1

139 14:27:32 fi

140 14:27:32 }

141 14:27:32

142 14:27:32 function snyk_setup() {

143 14:27:32 # If SNYK_FILE is set, use it as a target, otherwise use --all-projects

144 14:27:32 if [[ -n "${SNYK_FILE}" ]]; then

145 14:27:32 SNYK_TARGET="--file=${SNYK_FILE}"

146 14:27:32 else

147 14:27:32 SNYK_TARGET="--all-projects"

148 14:27:32 fi

149 14:27:32

150 14:27:32 log_info "Targeting $SNYK_TARGET"

151 14:27:32

152 14:27:32 # Set log level based on SNYK_LOG_LEVEL

153 14:27:32 if [[ "$SNYK_LOG_LEVEL" == "info" ]]; then

154 14:27:32 SNYK_LOG_LEVEL=""

155 14:27:32 elif [[ "$SNYK_LOG_LEVEL" == "debug" ]]; then

156 14:27:32 SNYK_LOG_LEVEL="--debug"

157 14:27:32 elif [[ "$SNYK_LOG_LEVEL" == "trace" ]]; then

158 14:27:32 SNYK_LOG_LEVEL="--debug --log-level=trace"

159 14:27:32 fi

160 14:27:32 }

161 14:27:32 section_end:1765290451:section_script_step_1

162 14:27:32 $ assert_defined "$SNYK_TOKEN" "No SNYK_TOKEN defined. You have to provide a valid token for accessing Snyk."

163 14:27:32 $ snyk_setup

164 14:27:32 [INFO] Targeting --all-projects

165 14:27:32 $ set -x

166 14:27:32 ++ echo '$ snyk-test-delta.sh --snyk-delta-args "$SNYK_DELTA_ARGS" --snyk-test-args "$SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH --json ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS"'

167 14:27:32 $ snyk-test-delta.sh --snyk-delta-args "$SNYK_DELTA_ARGS" --snyk-test-args "$SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH --json ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS"

168 14:27:32 ++ snyk-test-delta.sh --snyk-delta-args '' --snyk-test-args '--all-projects --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json '

169 14:27:32 Running: snyk test --all-projects --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json

170 14:27:37 Processing output of: snyk test --all-projects --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json

171 14:27:38 Processing pip project gitlab-templates (dbdfd00c-1dff-430e-8c66-3099fa27c3a1): target file requirements.txt in /build/internal/gitlab-templates

172 14:27:38 No local policy file .snyk found

173 14:27:38 Running: snyk-delta

174 14:27:41 No new issues found !

175 14:27:41 Finished processing

176 14:27:41 Exit code: 0

177 14:27:41

178 14:27:41 Processing poetry project sc-poetry-example (null): target file sc-poetry-example/pyproject.toml in /build/internal/gitlab-templates

179 14:27:41 No local policy file .snyk found

180 14:27:41 Running: snyk-delta

181 14:27:48 Could not find a matching monitored Snyk project. Ensure --org is set correctly for 'snyk test'. Proceeding without a baseline.

182 14:27:48 'snyk-delta' will return exit code 1 if any vulnerabilities are found in the current project

183 14:27:48 No new issues found !

184 14:27:48 Finished processing

185 14:27:48 Exit code: 0

186 14:27:48

187 14:27:48 Overall exit code for snyk-test-delta.sh: 0

188 14:27:48 ++ echo '$ set +x'

189 14:27:48 $ set +x

190 14:27:48 ++ set +x

191 14:27:48

192 14:27:48 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-18-218.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-4-9n9zz0wc&var-resolution=15&from=1765290451000&to=1765290467000

193 14:27:48 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-18-218.eu-central-1.compute.internal&var-resolution=15s&from=1765290451000&to=1765290467000

194 14:27:48

195 14:27:48

196 14:27:48 section_end:1765290468:step_script

197 14:27:48 +section_start:1765290468:after_script

198 14:27:48 +Running after_script

199 14:27:48 Running after script...

200 14:27:48 section_start:1765290468:section_after_script_step_0[hide_duration=true,collapsed=true] $ cat <<-EOD

201 14:27:48 ----------------------------------------------------------

202 14:27:48 Need help? Documentation on the Snyk jobs can be found at:

203 14:27:48 https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md

204 14:27:48 EOD

205 14:27:48 section_end:1765290468:section_after_script_step_0

206 14:27:48 ----------------------------------------------------------

207 14:27:48 Need help? Documentation on the Snyk jobs can be found at:

208 14:27:48 https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md

209 14:27:48

210 14:27:48 section_end:1765290468:after_script

211 14:27:48 +section_start:1765290468:cleanup_file_variables

212 14:27:48 +Cleaning up project directory and file based variables

213 14:27:49

214 14:27:49 section_end:1765290469:cleanup_file_variables

215 14:27:49 +

216 14:27:49 Job succeeded

217

snyk-test-delta-all-projects ○ success

Job Execution Phases

Full Job Log