snyk-test-delta-inline ○ success
⏱
Duration: 35s
⏳
Queued: 6s
📁
Stage: test
🖥
Runner: linux-1
Average Duration
44s
This job: 35s
Failure Rate
5.2%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
234 lines
Match - of 0
1
23:36:16
Running with gitlab-runner 18.9.0 (07e534ba)
2
23:36:16
on gitlab-runner-linux-1-5b9cfd64ff-k5sg5 aP4tCsXyp, system ID: r_wQDtEh3nNZsL
3
23:36:16
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_ENABLE_JOB_CLEANUP:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
23:36:16
Resolving secrets
5
23:36:16
section_start:1777678576:prepare_executor
6
23:36:16
+Preparing the "kubernetes" executor
7
23:36:16
Using Kubernetes namespace: gitlab-runner
8
23:36:16
Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115 ...
9
23:36:16
Using attach strategy to execute scripts...
10
23:36:16
Using effective pull policy of [Always] for container build
11
23:36:16
Using effective pull policy of [Always] for container helper
12
23:36:16
Using effective pull policy of [Always] for container init-permissions
13
23:36:16
section_end:1777678576:prepare_executor
14
23:36:16
+section_start:1777678576:prepare_script
15
23:36:16
+Preparing environment
16
23:36:16
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17
23:36:16
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18
23:36:16
Subscribing to Kubernetes Pod events...
19
23:36:16
Type Reason Message
20
23:36:16
Normal Scheduled Successfully assigned gitlab-runner/runner-ap4tcsxyp-project-621-concurrent-14-k6754jki to decimus
21
23:36:17
Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
22
23:36:18
Normal Created Created container: init-permissions
23
23:36:18
Normal Started Started container init-permissions
24
23:36:19
Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
25
23:36:19
Normal Created Created container: helper
26
23:36:19
Normal Started Started container helper
27
23:36:19
Normal Pulling Pulling image "registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115"
28
23:36:36
Normal Pulled Successfully pulled image "registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115" in 17.784s (17.784s including waiting). Image size: 499829825 bytes.
29
23:36:36
Normal Created Created container: build
30
23:36:37
Normal Started Started container build
31
23:36:38
Running on runner-ap4tcsxyp-project-621-concurrent-14-k6754jki via gitlab-runner-linux-1-5b9cfd64ff-k5sg5...
32
23:36:38
33
23:36:38
section_end:1777678598:prepare_script
34
23:36:38
+section_start:1777678598:get_sources
35
23:36:38
+Getting source from Git repository
36
23:36:41
Gitaly correlation ID: 01KQJYCTA77GE7ECCDJ29Y8448
37
23:36:41
Fetching changes with git depth set to 50...
38
23:36:41
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
39
23:36:41
Created fresh repository.
40
23:36:42
Checking out 50468f6f as detached HEAD (ref is refs/merge-requests/636/merge)...
41
23:36:42
42
23:36:42
Skipping Git submodules setup
43
23:36:42
44
23:36:42
section_end:1777678602:get_sources
45
23:36:42
+section_start:1777678602:step_script
46
23:36:42
+Executing "step_script" stage of the job script
47
23:36:42
section_start:1777678602:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
48
23:36:42
rv=$?
49
23:36:42
if [ $rv -ne 0 ]; then
50
23:36:42
echo ""
51
23:36:42
echo " Failure Cause Analysis might help, please open this link:"
52
23:36:42
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
53
23:36:42
echo ""
54
23:36:42
fi
55
23:36:42
echo ""
56
23:36:42
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
57
23:36:42
echo ""
58
23:36:42
echo ""
59
23:36:42
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
60
23:36:42
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
61
23:36:42
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
62
23:36:42
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
63
23:36:42
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
64
23:36:42
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
65
23:36:42
echo ""
66
23:36:42
exit $rv
67
23:36:42
}
68
23:36:42
trap cleanup EXIT
69
23:36:42
echo "INFO: This is the CI job pre_build_script"
70
23:36:42
echo "INFO: It's defined in the backend/infra/onprem/k8s repo."
71
23:36:42
echo "INFO: These additional Scandit variables are available to you:"
72
23:36:42
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
73
23:36:42
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
74
23:36:42
echo " SC_K8S_KYVERNO_PATCHES: |"
75
23:36:42
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
76
23:36:42
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
77
23:36:42
if command -v numfmt >/dev/null 2>&1; then
78
23:36:42
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
79
23:36:42
else
80
23:36:42
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
81
23:36:42
fi
82
23:36:42
__start_time=${EPOCHSECONDS}
83
23:36:42
echo ""
84
23:36:42
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
85
23:36:42
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
86
23:36:42
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
87
23:36:42
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
88
23:36:42
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
89
23:36:42
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
90
23:36:42
echo ""
91
23:36:42
echo "Setting up credentials for Gitlab Python registries"
92
23:36:42
mkdir -p ~
93
23:36:42
echo "machine gitlab.scandit.com" > ~/.netrc
94
23:36:42
echo "login gitlab-ci-token" >> ~/.netrc
95
23:36:42
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
96
23:36:42
chmod 600 ~/.netrc
97
23:36:42
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
98
23:36:42
git config --global --add safe.directory $CI_PROJECT_DIR
99
23:36:42
fi
100
23:36:42
sleep infinity &
101
23:36:42
echo $! > ~/.bg_pid
102
23:36:42
section_end:1777678602:section_pre_build_script_0
103
23:36:42
INFO: This is the CI job pre_build_script
104
23:36:42
INFO: It's defined in the backend/infra/onprem/k8s repo.
105
23:36:42
INFO: These additional Scandit variables are available to you:
106
23:36:42
SC_K8S_NODE_NAME: decimus
107
23:36:42
SC_K8S_IMAGE_ID:
108
23:36:42
SC_K8S_KYVERNO_PATCHES: |
109
23:36:42
110
23:36:42
cpu (r/l): 1/8
111
23:36:42
memory (r/l): 1.0GB/16GB
112
23:36:42
113
23:36:42
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=decimus&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-14-k6754jki&var-resolution=15&from=1777678602000&to=now
114
23:36:42
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=decimus&var-resolution=15s&from=1777678602000&to=now
115
23:36:42
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1575288&var-filters=CI_JOB_ID%7C%3D%7C54243465&sortOrder=Ascending&from=1777678602000&to=now
116
23:36:42
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-24~2026-05-08&job_name=snyk-test-delta-inline&project=internal/gitlab-templates
117
23:36:42
118
23:36:42
Setting up credentials for Gitlab Python registries
119
23:36:42
$ uv pip install --system -r requirements.txt
120
23:36:42
Using Python 3.12.13 environment at: /usr/local
121
23:36:43
Resolved 7 packages in 443ms
122
23:36:43
Downloading pygments (1.2MiB)
123
23:36:43
Downloaded pygments
124
23:36:43
Prepared 7 packages in 118ms
125
23:36:43
Installed 7 packages in 14ms
126
23:36:43
+ coverage==7.13.5
127
23:36:43
+ iniconfig==2.3.0
128
23:36:43
+ packaging==26.2
129
23:36:43
+ pluggy==1.6.0
130
23:36:43
+ pygments==2.20.0
131
23:36:43
+ pytest==9.0.3
132
23:36:43
+ pytest-cov==7.1.0
133
23:36:43
section_start:1777678603:section_script_step_1[hide_duration=true,collapsed=true]
$ set -e
134
23:36:43
135
23:36:43
function log_info() {
136
23:36:43
echo -e "[\e[1;94mINFO\e[0m] $*"
137
23:36:43
}
138
23:36:43
139
23:36:43
function log_warn() {
140
23:36:43
echo -e "[\e[1;93mWARN\e[0m] $*"
141
23:36:43
}
142
23:36:43
143
23:36:43
function log_error() {
144
23:36:43
echo -e "[\e[1;91mERROR\e[0m] $*"
145
23:36:43
}
146
23:36:43
147
23:36:43
function fail() {
148
23:36:43
log_error "$*"
149
23:36:43
exit 1
150
23:36:43
}
151
23:36:43
152
23:36:43
function assert_defined() {
153
23:36:43
if [[ -z "$1" ]]
154
23:36:43
then
155
23:36:43
log_error "$2"
156
23:36:43
exit 1
157
23:36:43
fi
158
23:36:43
}
159
23:36:43
160
23:36:43
function snyk_setup() {
161
23:36:43
# If SNYK_FILE is set, use it as a target, otherwise use --all-projects
162
23:36:43
if [[ -n "${SNYK_FILE}" ]]; then
163
23:36:43
SNYK_TARGET="--file=${SNYK_FILE}"
164
23:36:43
else
165
23:36:43
SNYK_TARGET="--all-projects"
166
23:36:43
fi
167
23:36:43
168
23:36:43
log_info "Targeting $SNYK_TARGET"
169
23:36:43
170
23:36:43
# Set log level based on SNYK_LOG_LEVEL
171
23:36:43
if [[ "$SNYK_LOG_LEVEL" == "info" ]]; then
172
23:36:43
SNYK_LOG_LEVEL=""
173
23:36:43
elif [[ "$SNYK_LOG_LEVEL" == "debug" ]]; then
174
23:36:43
SNYK_LOG_LEVEL="--debug"
175
23:36:43
elif [[ "$SNYK_LOG_LEVEL" == "trace" ]]; then
176
23:36:43
SNYK_LOG_LEVEL="--debug --log-level=trace"
177
23:36:43
fi
178
23:36:43
}
179
23:36:43
section_end:1777678603:section_script_step_1
180
23:36:43
$ assert_defined "$SNYK_TOKEN" "No SNYK_TOKEN defined. You have to provide a valid token for accessing Snyk."
181
23:36:43
$ snyk_setup
182
23:36:43
[INFO] Targeting --file=requirements.txt
183
23:36:43
$ set -x
184
23:36:43
++ echo '$ snyk-test-delta.sh --snyk-delta-args "$SNYK_DELTA_ARGS" --snyk-test-args "$SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH --json ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS"'
185
23:36:43
$ snyk-test-delta.sh --snyk-delta-args "$SNYK_DELTA_ARGS" --snyk-test-args "$SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH --json ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS"
186
23:36:43
++ snyk-test-delta.sh --snyk-delta-args '' --snyk-test-args '--file=requirements.txt --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json '
187
23:36:43
Running: snyk test --file=requirements.txt --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json
188
23:36:48
Processing output of: snyk test --file=requirements.txt --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json
189
23:36:48
Processing pip project gitlab-templates (dbdfd00c-1dff-430e-8c66-3099fa27c3a1): target file requirements.txt in /build/internal/gitlab-templates
190
23:36:48
Filtering out ignored vulnerabilities from local policy file .snyk
191
23:36:48
Initial vulnerability count: 0
192
23:36:48
Removed 0 locally ignored vulnerabilities
193
23:36:48
Running: snyk-delta
194
23:36:49
No new issues found !
195
23:36:49
Finished processing
196
23:36:49
Exit code: 0
197
23:36:49
198
23:36:49
Overall exit code for snyk-test-delta.sh: 0
199
23:36:49
++ echo '$ set +x'
200
23:36:49
$ set +x
201
23:36:49
++ set +x
202
23:36:49
203
23:36:49
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54243465
204
23:36:49
205
23:36:49
206
23:36:49
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=decimus&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-14-k6754jki&var-resolution=15&from=1777678602000&to=1777678609000
207
23:36:49
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=decimus&var-resolution=15s&from=1777678602000&to=1777678609000
208
23:36:49
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1575288&var-filters=CI_JOB_ID%7C%3D%7C54243465&sortOrder=Ascending&from=1777678602000&to=1777678609000
209
23:36:49
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-24~2026-05-08&job_name=snyk-test-delta-inline&project=internal/gitlab-templates
210
23:36:49
211
23:36:49
212
23:36:49
section_end:1777678609:step_script
213
23:36:49
+section_start:1777678609:after_script
214
23:36:49
+Running after_script
215
23:36:50
Running after script...
216
23:36:50
section_start:1777678610:section_after_script_step_0[hide_duration=true,collapsed=true]
$ cat <<-EOD
217
23:36:50
----------------------------------------------------------
218
23:36:50
Need help? Documentation on the Snyk jobs can be found at:
219
23:36:50
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
220
23:36:50
EOD
221
23:36:50
section_end:1777678610:section_after_script_step_0
222
23:36:50
----------------------------------------------------------
223
23:36:50
Need help? Documentation on the Snyk jobs can be found at:
224
23:36:50
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
225
23:36:50
226
23:36:50
section_end:1777678610:after_script
227
23:36:50
+section_start:1777678610:cleanup_file_variables
228
23:36:50
+Cleaning up project directory and file based variables
229
23:36:50
HEAD is now at 50468f6 Merge branch 'renovate/martizih-kaniko-1.x' into 'master'
230
23:36:50
231
23:36:50
section_end:1777678610:cleanup_file_variables
232
23:36:50
+
233
23:36:50
Job succeeded
234