snyk-monitor ○ success
⏱
Duration: 29s
⏳
Queued: 2s
📁
Stage: test
🖥
Runner: linux-aws-1
Average Duration
43s
This job: 29s
Failure Rate
0.0%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
226 lines
Match - of 0
1
11:09:36
Running with gitlab-runner 18.9.0 (07e534ba)
2
11:09:36
on gitlab-runner-linux-1-746bdd58fd-cqwdq wRxjPbsJX, system ID: r_BbsT8E7thlM4
3
11:09:36
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
11:09:36
Resolving secrets
5
11:09:36
section_start:1778065776:prepare_executor
6
11:09:36
+Preparing the "kubernetes" executor
7
11:09:36
Using Kubernetes namespace: gitlab-runner
8
11:09:36
Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115 ...
9
11:09:36
Using attach strategy to execute scripts...
10
11:09:36
Using effective pull policy of [Always] for container build
11
11:09:36
Using effective pull policy of [Always] for container helper
12
11:09:36
Using effective pull policy of [Always] for container init-permissions
13
11:09:36
section_end:1778065776:prepare_executor
14
11:09:36
+section_start:1778065776:prepare_script
15
11:09:36
+Preparing environment
16
11:09:36
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17
11:09:36
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18
11:09:37
Subscribing to Kubernetes Pod events...
19
11:09:37
Type Reason Message
20
11:09:37
Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-1-t8td60hg to ip-10-0-22-143.eu-central-1.compute.internal
21
11:09:38
Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
22
11:09:38
Normal Created Created container: init-permissions
23
11:09:38
Normal Started Started container init-permissions
24
11:09:39
Normal Pulling Pulling image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115"
25
11:09:48
Normal Pulled Successfully pulled image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:41b6de5ad9d99a10fc8502ac2f2f8629fc621fab19926700c2b14376ac7b2115" in 9.263s (9.263s including waiting). Image size: 499829825 bytes.
26
11:09:48
Normal Created Created container: build
27
11:09:48
Normal Started Started container build
28
11:09:48
Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
29
11:09:48
Normal Created Created container: helper
30
11:09:48
Normal Started Started container helper
31
11:09:53
Running on runner-wrxjpbsjx-project-621-concurrent-1-t8td60hg via gitlab-runner-linux-1-746bdd58fd-cqwdq...
32
11:09:53
33
11:09:53
section_end:1778065793:prepare_script
34
11:09:53
+section_start:1778065793:get_sources
35
11:09:53
+Getting source from Git repository
36
11:09:53
Gitaly correlation ID: 01KQYFN79H4R5A1Y9V5R7K08SX
37
11:09:53
Fetching changes with git depth set to 50...
38
11:09:53
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
39
11:09:53
Created fresh repository.
40
11:09:55
Checking out 19a8ce14 as detached HEAD (ref is master)...
41
11:09:55
42
11:09:55
Skipping Git submodules setup
43
11:09:55
44
11:09:55
section_end:1778065795:get_sources
45
11:09:55
+section_start:1778065795:step_script
46
11:09:55
+Executing "step_script" stage of the job script
47
11:09:55
section_start:1778065795:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
48
11:09:55
rv=$?
49
11:09:55
if [ $rv -ne 0 ]; then
50
11:09:55
echo ""
51
11:09:55
echo " Failure Cause Analysis might help, please open this link:"
52
11:09:55
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
53
11:09:55
echo ""
54
11:09:55
fi
55
11:09:55
echo ""
56
11:09:55
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
57
11:09:55
echo ""
58
11:09:55
echo ""
59
11:09:55
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
60
11:09:55
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
61
11:09:55
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
62
11:09:55
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
63
11:09:55
echo ""
64
11:09:55
exit $rv
65
11:09:55
}
66
11:09:55
trap cleanup EXIT
67
11:09:55
echo "INFO: This is the CI job pre_build_script"
68
11:09:55
echo "INFO: It's defined in the backend/infra/aws repo."
69
11:09:55
echo "INFO: These additional Scandit variables are available to you:"
70
11:09:55
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
71
11:09:55
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
72
11:09:55
echo " SC_K8S_KYVERNO_PATCHES: |"
73
11:09:55
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
74
11:09:55
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
75
11:09:55
if command -v numfmt >/dev/null 2>&1; then
76
11:09:55
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
77
11:09:55
else
78
11:09:55
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
79
11:09:55
fi
80
11:09:55
__start_time=${EPOCHSECONDS}
81
11:09:55
echo ""
82
11:09:55
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
83
11:09:55
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
84
11:09:55
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
85
11:09:55
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
86
11:09:55
echo ""
87
11:09:55
echo "Setting up credentials for Gitlab Python registries"
88
11:09:55
mkdir -p ~
89
11:09:55
echo "machine gitlab.scandit.com" > ~/.netrc
90
11:09:55
echo "login gitlab-ci-token" >> ~/.netrc
91
11:09:55
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
92
11:09:55
chmod 600 ~/.netrc
93
11:09:55
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
94
11:09:55
git config --global --add safe.directory $CI_PROJECT_DIR
95
11:09:55
fi
96
11:09:55
# Sonarqube server is running on the same cluster. Use internal address
97
11:09:55
export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"
98
11:09:55
section_end:1778065795:section_pre_build_script_0
99
11:09:55
INFO: This is the CI job pre_build_script
100
11:09:55
INFO: It's defined in the backend/infra/aws repo.
101
11:09:55
INFO: These additional Scandit variables are available to you:
102
11:09:55
SC_K8S_NODE_NAME: ip-10-0-22-143.eu-central-1.compute.internal
103
11:09:55
SC_K8S_IMAGE_ID:
104
11:09:55
SC_K8S_KYVERNO_PATCHES: |
105
11:09:55
106
11:09:55
cpu (r/l): 1/4
107
11:09:55
memory (r/l): 1.0GB/16GB
108
11:09:55
109
11:09:55
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-22-143.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-1-t8td60hg&var-resolution=15&from=1778065795000&to=now
110
11:09:55
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-22-143.eu-central-1.compute.internal&var-resolution=15s&from=1778065795000&to=now
111
11:09:55
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1581320&var-filters=CI_JOB_ID|=|54484712&sortOrder=Ascending&from=1778065795000&to=now
112
11:09:55
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-29~2026-05-13&job_name=snyk-monitor&project=internal/gitlab-templates
113
11:09:55
114
11:09:55
Setting up credentials for Gitlab Python registries
115
11:09:55
$ uv pip install --system -r requirements.txt
116
11:09:55
Using Python 3.12.13 environment at: /usr/local
117
11:09:56
Resolved 7 packages in 488ms
118
11:09:56
Downloading pygments (1.2MiB)
119
11:09:56
Downloaded pygments
120
11:09:56
Prepared 7 packages in 73ms
121
11:09:58
Installed 7 packages in 1.71s
122
11:09:58
+ coverage==7.13.5
123
11:09:58
+ iniconfig==2.3.0
124
11:09:58
+ packaging==26.2
125
11:09:58
+ pluggy==1.6.0
126
11:09:58
+ pygments==2.20.0
127
11:09:58
+ pytest==9.0.3
128
11:09:58
+ pytest-cov==7.1.0
129
11:09:58
section_start:1778065798:section_script_step_1[hide_duration=true,collapsed=true]
$ set -e
130
11:09:58
131
11:09:58
function log_info() {
132
11:09:58
echo -e "[\e[1;94mINFO\e[0m] $*"
133
11:09:58
}
134
11:09:58
135
11:09:58
function log_warn() {
136
11:09:58
echo -e "[\e[1;93mWARN\e[0m] $*"
137
11:09:58
}
138
11:09:58
139
11:09:58
function log_error() {
140
11:09:58
echo -e "[\e[1;91mERROR\e[0m] $*"
141
11:09:58
}
142
11:09:58
143
11:09:58
function fail() {
144
11:09:58
log_error "$*"
145
11:09:58
exit 1
146
11:09:58
}
147
11:09:58
148
11:09:58
function assert_defined() {
149
11:09:58
if [[ -z "$1" ]]
150
11:09:58
then
151
11:09:58
log_error "$2"
152
11:09:58
exit 1
153
11:09:58
fi
154
11:09:58
}
155
11:09:58
156
11:09:58
function snyk_setup() {
157
11:09:58
# If SNYK_FILE is set, use it as a target, otherwise use --all-projects
158
11:09:58
if [[ -n "${SNYK_FILE}" ]]; then
159
11:09:58
SNYK_TARGET="--file=${SNYK_FILE}"
160
11:09:58
else
161
11:09:58
SNYK_TARGET="--all-projects"
162
11:09:58
fi
163
11:09:58
164
11:09:58
log_info "Targeting $SNYK_TARGET"
165
11:09:58
166
11:09:58
# Set log level based on SNYK_LOG_LEVEL
167
11:09:58
if [[ "$SNYK_LOG_LEVEL" == "info" ]]; then
168
11:09:58
SNYK_LOG_LEVEL=""
169
11:09:58
elif [[ "$SNYK_LOG_LEVEL" == "debug" ]]; then
170
11:09:58
SNYK_LOG_LEVEL="--debug"
171
11:09:58
elif [[ "$SNYK_LOG_LEVEL" == "trace" ]]; then
172
11:09:58
SNYK_LOG_LEVEL="--debug --log-level=trace"
173
11:09:58
fi
174
11:09:58
}
175
11:09:58
section_end:1778065798:section_script_step_1
176
11:09:58
$ assert_defined "$SNYK_TOKEN" "No SNYK_TOKEN defined. You have to provide a valid token for accessing Snyk."
177
11:09:58
$ snyk_setup
178
11:09:58
[INFO] Targeting --file=requirements.txt
179
11:09:58
$ set -x
180
11:09:58
++ echo '$ snyk $SNYK_COMMAND $SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS'
181
11:09:58
$ snyk $SNYK_COMMAND $SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS
182
11:09:58
++ snyk monitor --file=requirements.txt --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk
183
11:10:04
184
11:10:04
Monitoring /build/internal/gitlab-templates (gitlab-templates)...
185
11:10:04
186
11:10:04
Explore this snapshot at https://app.snyk.io/org/scandit-internal/project/dbdfd00c-1dff-430e-8c66-3099fa27c3a1/history/52062526-53a2-4db6-905e-9d7e63d3c4a3
187
11:10:04
188
11:10:04
Tip: Detected multiple supported manifests (2), use --all-projects to scan all of them at once.
189
11:10:04
190
11:10:04
Notifications about newly disclosed issues related to these dependencies will be emailed to you.
191
11:10:04
192
11:10:04
++ echo '$ set +x'
193
11:10:04
$ set +x
194
11:10:04
++ set +x
195
11:10:04
196
11:10:04
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54484712
197
11:10:04
198
11:10:04
199
11:10:04
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-22-143.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-1-t8td60hg&var-resolution=15&from=1778065795000&to=1778065804000
200
11:10:04
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-22-143.eu-central-1.compute.internal&var-resolution=15s&from=1778065795000&to=1778065804000
201
11:10:04
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1581320&var-filters=CI_JOB_ID|=|54484712&sortOrder=Ascending&from=1778065795000&to=1778065804000
202
11:10:04
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-29~2026-05-13&job_name=snyk-monitor&project=internal/gitlab-templates
203
11:10:04
204
11:10:04
205
11:10:04
section_end:1778065804:step_script
206
11:10:04
+section_start:1778065804:after_script
207
11:10:04
+Running after_script
208
11:10:05
Running after script...
209
11:10:05
section_start:1778065804:section_after_script_step_0[hide_duration=true,collapsed=true]
$ cat <<-EOD
210
11:10:05
----------------------------------------------------------
211
11:10:05
Need help? Documentation on the Snyk jobs can be found at:
212
11:10:05
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
213
11:10:05
EOD
214
11:10:05
section_end:1778065804:section_after_script_step_0
215
11:10:05
----------------------------------------------------------
216
11:10:05
Need help? Documentation on the Snyk jobs can be found at:
217
11:10:05
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
218
11:10:05
219
11:10:05
section_end:1778065805:after_script
220
11:10:05
+section_start:1778065805:cleanup_file_variables
221
11:10:05
+Cleaning up project directory and file based variables
222
11:10:05
223
11:10:05
section_end:1778065805:cleanup_file_variables
224
11:10:05
+
225
11:10:05
Job succeeded
226