snyk-test ○ success
⏱
Duration: 32s
⏳
Queued: 0s
📁
Stage: test
🖥
Runner: linux-aws-1
Average Duration
39s
This job: 32s
Failure Rate
0.0%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
233 lines
Match - of 0
1
22:37:52
Running with gitlab-runner 18.9.0 (07e534ba)
2
22:37:52
on gitlab-runner-linux-1-746bdd58fd-4cqkw wRxjPbsJX, system ID: r_f0gJVPIyznax
3
22:37:52
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
22:37:52
Resolving secrets
5
22:37:52
section_start:1778020672:prepare_executor
6
22:37:52
+Preparing the "kubernetes" executor
7
22:37:52
Using Kubernetes namespace: gitlab-runner
8
22:37:52
Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115 ...
9
22:37:52
Using attach strategy to execute scripts...
10
22:37:52
Using effective pull policy of [Always] for container build
11
22:37:52
Using effective pull policy of [Always] for container helper
12
22:37:52
Using effective pull policy of [Always] for container init-permissions
13
22:37:52
section_end:1778020672:prepare_executor
14
22:37:52
+section_start:1778020672:prepare_script
15
22:37:52
+Preparing environment
16
22:37:52
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17
22:37:52
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18
22:37:53
Subscribing to Kubernetes Pod events...
19
22:37:53
Type Reason Message
20
22:37:53
Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-10-bpre2lhf to ip-10-0-20-43.eu-central-1.compute.internal
21
22:37:54
Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
22
22:37:55
Normal Created Created container: init-permissions
23
22:37:55
Normal Started Started container init-permissions
24
22:38:08
Normal Pulled Container image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115" already present on machine
25
22:38:08
Normal Created Created container: build
26
22:38:08
Normal Started Started container build
27
22:38:08
Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
28
22:38:08
Normal Created Created container: helper
29
22:38:08
Normal Started Started container helper
30
22:38:11
Running on runner-wrxjpbsjx-project-621-concurrent-10-bpre2lhf via gitlab-runner-linux-1-746bdd58fd-4cqkw...
31
22:38:11
32
22:38:11
section_end:1778020691:prepare_script
33
22:38:11
+section_start:1778020691:get_sources
34
22:38:11
+Getting source from Git repository
35
22:38:12
Gitaly correlation ID: 01KQX4MR9VD31SJ38KA9MBWXA0
36
22:38:12
Fetching changes with git depth set to 50...
37
22:38:12
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
38
22:38:12
Created fresh repository.
39
22:38:13
Checking out 22f5b5c3 as detached HEAD (ref is refs/merge-requests/639/merge)...
40
22:38:13
41
22:38:13
Skipping Git submodules setup
42
22:38:13
43
22:38:13
section_end:1778020693:get_sources
44
22:38:13
+section_start:1778020693:step_script
45
22:38:13
+Executing "step_script" stage of the job script
46
22:38:13
section_start:1778020693:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
47
22:38:13
rv=$?
48
22:38:13
if [ $rv -ne 0 ]; then
49
22:38:13
echo ""
50
22:38:13
echo " Failure Cause Analysis might help, please open this link:"
51
22:38:13
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
52
22:38:13
echo ""
53
22:38:13
fi
54
22:38:13
echo ""
55
22:38:13
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
56
22:38:13
echo ""
57
22:38:13
echo ""
58
22:38:13
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
59
22:38:13
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
60
22:38:13
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
61
22:38:13
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
62
22:38:13
echo ""
63
22:38:13
exit $rv
64
22:38:13
}
65
22:38:13
trap cleanup EXIT
66
22:38:13
echo "INFO: This is the CI job pre_build_script"
67
22:38:13
echo "INFO: It's defined in the backend/infra/aws repo."
68
22:38:13
echo "INFO: These additional Scandit variables are available to you:"
69
22:38:13
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
70
22:38:13
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
71
22:38:13
echo " SC_K8S_KYVERNO_PATCHES: |"
72
22:38:13
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
73
22:38:13
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
74
22:38:13
if command -v numfmt >/dev/null 2>&1; then
75
22:38:13
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
76
22:38:13
else
77
22:38:13
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
78
22:38:13
fi
79
22:38:13
__start_time=${EPOCHSECONDS}
80
22:38:13
echo ""
81
22:38:13
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
82
22:38:13
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
83
22:38:13
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
84
22:38:13
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
85
22:38:13
echo ""
86
22:38:13
echo "Setting up credentials for Gitlab Python registries"
87
22:38:13
mkdir -p ~
88
22:38:13
echo "machine gitlab.scandit.com" > ~/.netrc
89
22:38:13
echo "login gitlab-ci-token" >> ~/.netrc
90
22:38:13
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
91
22:38:13
chmod 600 ~/.netrc
92
22:38:13
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
93
22:38:13
git config --global --add safe.directory $CI_PROJECT_DIR
94
22:38:13
fi
95
22:38:13
# Sonarqube server is running on the same cluster. Use internal address
96
22:38:13
export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"
97
22:38:13
section_end:1778020693:section_pre_build_script_0
98
22:38:13
INFO: This is the CI job pre_build_script
99
22:38:13
INFO: It's defined in the backend/infra/aws repo.
100
22:38:13
INFO: These additional Scandit variables are available to you:
101
22:38:13
SC_K8S_NODE_NAME: ip-10-0-20-43.eu-central-1.compute.internal
102
22:38:13
SC_K8S_IMAGE_ID:
103
22:38:13
SC_K8S_KYVERNO_PATCHES: |
104
22:38:13
105
22:38:13
cpu (r/l): 1/4
106
22:38:13
memory (r/l): 1.0GB/16GB
107
22:38:13
108
22:38:13
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-20-43.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-10-bpre2lhf&var-resolution=15&from=1778020693000&to=now
109
22:38:13
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-20-43.eu-central-1.compute.internal&var-resolution=15s&from=1778020693000&to=now
110
22:38:13
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1580356&var-filters=CI_JOB_ID|=|54442892&sortOrder=Ascending&from=1778020693000&to=now
111
22:38:13
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-28~2026-05-12&job_name=snyk-test&project=internal/gitlab-templates
112
22:38:13
113
22:38:13
Setting up credentials for Gitlab Python registries
114
22:38:13
$ uv pip install --system -r requirements.txt
115
22:38:13
Using Python 3.12.13 environment at: /usr/local
116
22:38:14
Resolved 7 packages in 414ms
117
22:38:14
Downloading pygments (1.2MiB)
118
22:38:14
Downloaded pygments
119
22:38:14
Prepared 7 packages in 152ms
120
22:38:16
Installed 7 packages in 2.44s
121
22:38:16
+ coverage==7.13.5
122
22:38:16
+ iniconfig==2.3.0
123
22:38:16
+ packaging==26.2
124
22:38:16
+ pluggy==1.6.0
125
22:38:16
+ pygments==2.20.0
126
22:38:16
+ pytest==9.0.3
127
22:38:16
+ pytest-cov==7.1.0
128
22:38:16
section_start:1778020696:section_script_step_1[hide_duration=true,collapsed=true]
$ set -e
129
22:38:16
130
22:38:16
function log_info() {
131
22:38:16
echo -e "[\e[1;94mINFO\e[0m] $*"
132
22:38:16
}
133
22:38:16
134
22:38:16
function log_warn() {
135
22:38:16
echo -e "[\e[1;93mWARN\e[0m] $*"
136
22:38:16
}
137
22:38:16
138
22:38:16
function log_error() {
139
22:38:16
echo -e "[\e[1;91mERROR\e[0m] $*"
140
22:38:16
}
141
22:38:16
142
22:38:16
function fail() {
143
22:38:16
log_error "$*"
144
22:38:16
exit 1
145
22:38:16
}
146
22:38:16
147
22:38:16
function assert_defined() {
148
22:38:16
if [[ -z "$1" ]]
149
22:38:16
then
150
22:38:16
log_error "$2"
151
22:38:16
exit 1
152
22:38:16
fi
153
22:38:16
}
154
22:38:16
155
22:38:16
function snyk_setup() {
156
22:38:16
# If SNYK_FILE is set, use it as a target, otherwise use --all-projects
157
22:38:16
if [[ -n "${SNYK_FILE}" ]]; then
158
22:38:16
SNYK_TARGET="--file=${SNYK_FILE}"
159
22:38:16
else
160
22:38:16
SNYK_TARGET="--all-projects"
161
22:38:16
fi
162
22:38:16
163
22:38:16
log_info "Targeting $SNYK_TARGET"
164
22:38:16
165
22:38:16
# Set log level based on SNYK_LOG_LEVEL
166
22:38:16
if [[ "$SNYK_LOG_LEVEL" == "info" ]]; then
167
22:38:16
SNYK_LOG_LEVEL=""
168
22:38:16
elif [[ "$SNYK_LOG_LEVEL" == "debug" ]]; then
169
22:38:16
SNYK_LOG_LEVEL="--debug"
170
22:38:16
elif [[ "$SNYK_LOG_LEVEL" == "trace" ]]; then
171
22:38:16
SNYK_LOG_LEVEL="--debug --log-level=trace"
172
22:38:16
fi
173
22:38:16
}
174
22:38:16
section_end:1778020696:section_script_step_1
175
22:38:16
$ assert_defined "$SNYK_TOKEN" "No SNYK_TOKEN defined. You have to provide a valid token for accessing Snyk."
176
22:38:16
$ snyk_setup
177
22:38:16
[INFO] Targeting --file=requirements.txt
178
22:38:16
$ set -x
179
22:38:16
++ echo '$ snyk $SNYK_COMMAND $SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS'
180
22:38:16
$ snyk $SNYK_COMMAND $SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS
181
22:38:16
++ snyk test --file=requirements.txt --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk
182
22:38:22
183
22:38:22
Testing /build/internal/gitlab-templates...
184
22:38:22
185
22:38:22
Organization: scandit-internal
186
22:38:22
Package manager: pip
187
22:38:22
Target file: requirements.txt
188
22:38:22
Project name: gitlab-templates
189
22:38:22
Open source: no
190
22:38:22
Project path: /build/internal/gitlab-templates
191
22:38:22
Local Snyk policy: found
192
22:38:22
Licenses: enabled
193
22:38:22
194
22:38:22
✔ Tested 7 dependencies for known issues, no vulnerable paths found.
195
22:38:22
196
22:38:22
Tip: Detected multiple supported manifests (2), use --all-projects to scan all of them at once.
197
22:38:22
198
22:38:22
199
22:38:23
++ echo '$ set +x'
200
22:38:23
$ set +x
201
22:38:23
++ set +x
202
22:38:23
203
22:38:23
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54442892
204
22:38:23
205
22:38:23
206
22:38:23
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-20-43.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-10-bpre2lhf&var-resolution=15&from=1778020693000&to=1778020703000
207
22:38:23
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-20-43.eu-central-1.compute.internal&var-resolution=15s&from=1778020693000&to=1778020703000
208
22:38:23
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1580356&var-filters=CI_JOB_ID|=|54442892&sortOrder=Ascending&from=1778020693000&to=1778020703000
209
22:38:23
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-28~2026-05-12&job_name=snyk-test&project=internal/gitlab-templates
210
22:38:23
211
22:38:23
212
22:38:23
section_end:1778020703:step_script
213
22:38:23
+section_start:1778020703:after_script
214
22:38:23
+Running after_script
215
22:38:23
Running after script...
216
22:38:23
section_start:1778020703:section_after_script_step_0[hide_duration=true,collapsed=true]
$ cat <<-EOD
217
22:38:23
----------------------------------------------------------
218
22:38:23
Need help? Documentation on the Snyk jobs can be found at:
219
22:38:23
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
220
22:38:23
EOD
221
22:38:23
section_end:1778020703:section_after_script_step_0
222
22:38:23
----------------------------------------------------------
223
22:38:23
Need help? Documentation on the Snyk jobs can be found at:
224
22:38:23
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
225
22:38:23
226
22:38:23
section_end:1778020703:after_script
227
22:38:23
+section_start:1778020703:cleanup_file_variables
228
22:38:23
+Cleaning up project directory and file based variables
229
22:38:24
230
22:38:24
section_end:1778020704:cleanup_file_variables
231
22:38:24
+
232
22:38:24
Job succeeded
233