secret-detection ○ success
⏱
Duration: 13s
⏳
Queued: 0s
📁
Stage: test
🖥
Runner: linux-1
Average Duration
23s
This job: 13s
Failure Rate
1.4%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
162 lines
Match - of 0
1
22:42:40
Running with gitlab-runner 18.9.0 (07e534ba)
2
22:42:40
on gitlab-runner-linux-1-5b9cfd64ff-k5sg5 aP4tCsXyp, system ID: r_wQDtEh3nNZsL
3
22:42:40
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_ENABLE_JOB_CLEANUP:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
22:42:40
Resolving secrets
5
22:42:40
section_start:1778020960:prepare_executor
6
22:42:40
+Preparing the "kubernetes" executor
7
22:42:40
Using Kubernetes namespace: gitlab-runner
8
22:42:40
Using Kubernetes executor with image registry.scandit.com/dockerfiles/gitleaks:v8.29.0 ...
9
22:42:40
Using attach strategy to execute scripts...
10
22:42:40
Using effective pull policy of [Always] for container build
11
22:42:40
Using effective pull policy of [Always] for container helper
12
22:42:40
Using effective pull policy of [Always] for container init-permissions
13
22:42:40
section_end:1778020960:prepare_executor
14
22:42:40
+section_start:1778020960:prepare_script
15
22:42:40
+Preparing environment
16
22:42:40
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17
22:42:40
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18
22:42:41
Subscribing to Kubernetes Pod events...
19
22:42:41
Type Reason Message
20
22:42:41
Normal Scheduled Successfully assigned gitlab-runner/runner-ap4tcsxyp-project-621-concurrent-0-8jekqeke to decimus
21
22:42:42
Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
22
22:42:42
Normal Created Created container: init-permissions
23
22:42:43
Normal Started Started container init-permissions
24
22:42:47
Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
25
22:42:47
Normal Created Created container: helper
26
22:42:47
Normal Started Started container helper
27
22:42:47
Normal Pulling Pulling image "registry.scandit.com/dockerfiles/gitleaks:v8.29.0"
28
22:42:47
Normal Pulled Successfully pulled image "registry.scandit.com/dockerfiles/gitleaks:v8.29.0" in 171ms (171ms including waiting). Image size: 24433236 bytes.
29
22:42:47
Normal Created Created container: build
30
22:42:48
Normal Started Started container build
31
22:42:51
Running on runner-ap4tcsxyp-project-621-concurrent-0-8jekqeke via gitlab-runner-linux-1-5b9cfd64ff-k5sg5...
32
22:42:51
33
22:42:51
section_end:1778020971:prepare_script
34
22:42:51
+section_start:1778020971:get_sources
35
22:42:51
+Getting source from Git repository
36
22:42:51
Gitaly correlation ID: 01KQX4XJ27QB4V77AEXEYEW1AW
37
22:42:51
Fetching changes with git depth set to 1...
38
22:42:51
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
39
22:42:51
Created fresh repository.
40
22:42:52
Checking out cbfa818c as detached HEAD (ref is master)...
41
22:42:52
42
22:42:52
Skipping Git submodules setup
43
22:42:52
44
22:42:52
section_end:1778020972:get_sources
45
22:42:52
+section_start:1778020972:step_script
46
22:42:52
+Executing "step_script" stage of the job script
47
22:42:52
section_start:1778020972:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
48
22:42:52
rv=$?
49
22:42:52
if [ $rv -ne 0 ]; then
50
22:42:52
echo ""
51
22:42:52
echo " Failure Cause Analysis might help, please open this link:"
52
22:42:52
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
53
22:42:52
echo ""
54
22:42:52
fi
55
22:42:52
echo ""
56
22:42:52
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
57
22:42:52
echo ""
58
22:42:52
echo ""
59
22:42:52
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
60
22:42:52
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
61
22:42:52
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
62
22:42:52
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
63
22:42:52
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
64
22:42:52
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
65
22:42:52
echo ""
66
22:42:52
exit $rv
67
22:42:52
}
68
22:42:52
trap cleanup EXIT
69
22:42:52
echo "INFO: This is the CI job pre_build_script"
70
22:42:52
echo "INFO: It's defined in the backend/infra/onprem/k8s repo."
71
22:42:52
echo "INFO: These additional Scandit variables are available to you:"
72
22:42:52
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
73
22:42:52
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
74
22:42:52
echo " SC_K8S_KYVERNO_PATCHES: |"
75
22:42:52
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
76
22:42:52
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
77
22:42:52
if command -v numfmt >/dev/null 2>&1; then
78
22:42:52
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
79
22:42:52
else
80
22:42:52
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
81
22:42:52
fi
82
22:42:52
__start_time=${EPOCHSECONDS}
83
22:42:52
echo ""
84
22:42:52
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
85
22:42:52
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
86
22:42:52
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
87
22:42:52
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
88
22:42:52
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
89
22:42:52
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
90
22:42:52
echo ""
91
22:42:52
echo "Setting up credentials for Gitlab Python registries"
92
22:42:52
mkdir -p ~
93
22:42:52
echo "machine gitlab.scandit.com" > ~/.netrc
94
22:42:52
echo "login gitlab-ci-token" >> ~/.netrc
95
22:42:52
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
96
22:42:52
chmod 600 ~/.netrc
97
22:42:52
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
98
22:42:52
git config --global --add safe.directory $CI_PROJECT_DIR
99
22:42:52
fi
100
22:42:52
sleep infinity &
101
22:42:52
echo $! > ~/.bg_pid
102
22:42:52
section_end:1778020972:section_pre_build_script_0
103
22:42:52
INFO: This is the CI job pre_build_script
104
22:42:52
INFO: It's defined in the backend/infra/onprem/k8s repo.
105
22:42:52
INFO: These additional Scandit variables are available to you:
106
22:42:52
SC_K8S_NODE_NAME: decimus
107
22:42:52
SC_K8S_IMAGE_ID:
108
22:42:52
SC_K8S_KYVERNO_PATCHES: |
109
22:42:52
110
22:42:52
cpu (r/l): 1/8
111
22:42:52
memory (r/l): 1073741824/17179869184
112
22:42:52
113
22:42:52
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=decimus&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-0-8jekqeke&var-resolution=15&from=1778020972000&to=now
114
22:42:52
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=decimus&var-resolution=15s&from=1778020972000&to=now
115
22:42:52
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1580358&var-filters=CI_JOB_ID%7C%3D%7C54442935&sortOrder=Ascending&from=1778020972000&to=now
116
22:42:52
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-28~2026-05-12&job_name=secret-detection&project=internal/gitlab-templates
117
22:42:52
118
22:42:52
Setting up credentials for Gitlab Python registries
119
22:42:52
$ set -x
120
22:42:52
++ echo '$ gitleaks git ./ --platform gitlab ${SECRET_DETECTION_LOG_OPTIONS} --report-format json --report-path ${SECRET_DETECTION_OUTPUT_FILE} --log-level ${SECRET_DETECTION_LOG_LEVEL} --verbose --redact ${SECRET_DETECTION_EXTRA_FLAGS}'
121
22:42:52
$ gitleaks git ./ --platform gitlab ${SECRET_DETECTION_LOG_OPTIONS} --report-format json --report-path ${SECRET_DETECTION_OUTPUT_FILE} --log-level ${SECRET_DETECTION_LOG_LEVEL} --verbose --redact ${SECRET_DETECTION_EXTRA_FLAGS}
122
22:42:52
++ gitleaks git ./ --platform gitlab --report-format json --report-path gl-secret-detection-report.json --log-level info --verbose --redact
123
22:42:52
124
22:42:52
○
125
22:42:52
│╲
126
22:42:52
│ ○
127
22:42:52
○ ░
128
22:42:52
░ gitleaks
129
22:42:52
130
22:42:52
10:42PM INF 1 commits scanned.
131
22:42:52
10:42PM INF scanned ~216488 bytes (216.49 KB) in 92.4ms
132
22:42:52
10:42PM INF no leaks found
133
22:42:52
++ echo '$ set +x'
134
22:42:52
$ set +x
135
22:42:52
++ set +x
136
22:42:52
137
22:42:52
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54442935
138
22:42:52
139
22:42:52
140
22:42:52
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=decimus&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-0-8jekqeke&var-resolution=15&from=1778020972000&to=1778020972000
141
22:42:52
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=decimus&var-resolution=15s&from=1778020972000&to=1778020972000
142
22:42:52
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1580358&var-filters=CI_JOB_ID%7C%3D%7C54442935&sortOrder=Ascending&from=1778020972000&to=1778020972000
143
22:42:52
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-28~2026-05-12&job_name=secret-detection&project=internal/gitlab-templates
144
22:42:52
145
22:42:52
146
22:42:52
section_end:1778020972:step_script
147
22:42:52
+section_start:1778020972:upload_artifacts_on_success
148
22:42:52
+Uploading artifacts for successful job
149
22:42:53
Uploading artifacts...
150
22:42:53
gl-secret-detection-report.json: found 1 matching artifact files and directories
151
22:42:53
Uploading artifacts as "secret_detection" to coordinator... 201 Created correlation_id=01KQX4XY750N100X37AW4DXAAK id=54442935 responseStatus=201 Created token=64_Daz7X3
152
22:42:53
153
22:42:53
section_end:1778020973:upload_artifacts_on_success
154
22:42:53
+section_start:1778020973:cleanup_file_variables
155
22:42:53
+Cleaning up project directory and file based variables
156
22:42:53
Removing gl-secret-detection-report.json
157
22:42:53
HEAD is now at cbfa818 Merge branch 'renovate/docker-digests' into 'master'
158
22:42:53
159
22:42:53
section_end:1778020973:cleanup_file_variables
160
22:42:53
+
161
22:42:53
Job succeeded
162