snyk-test-delta-all-projects ○ success

Duration: 35s
Queued: 9s
📁 Stage: test
🖥 Runner: linux-aws-1
Average Duration
54s
This job: 35s
Failure Rate
4.1%
last 30 days

Job Execution Phases

💡 Tip: Click on any phase bar to jump to that section in the log below

Job Analysis

Job Status: Passed

Status: Job passed successfully

Full Job Log

239 lines
Match - of 0
1 22:35:43 Running with gitlab-runner 18.9.0 (07e534ba)
2 22:35:43 on gitlab-runner-linux-1-746bdd58fd-hs4pj wRxjPbsJX, system ID: r_dNAq0sdgwNWv
3 22:35:43 feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4 22:35:43 Resolving secrets
5 22:35:43 section_start:1778106943:prepare_executor
6 22:35:43 +Preparing the "kubernetes" executor
7 22:35:43 Using Kubernetes namespace: gitlab-runner
8 22:35:43 Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:eee36c77812addee2f89331034691d9d1bcc8e76d01382e22b0d114c8950a3ff ...
9 22:35:43 Using attach strategy to execute scripts...
10 22:35:43 Using effective pull policy of [Always] for container init-permissions
11 22:35:43 Using effective pull policy of [Always] for container build
12 22:35:43 Using effective pull policy of [Always] for container helper
13 22:35:43 section_end:1778106943:prepare_executor
14 22:35:43 +section_start:1778106943:prepare_script
15 22:35:43 +Preparing environment
16 22:35:43 Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17 22:35:43 WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18 22:35:44 Subscribing to Kubernetes Pod events...
19 22:35:44 Type Reason Message
20 22:35:44 Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-2-7kpxyr6d to ip-10-0-28-213.eu-central-1.compute.internal
21 22:35:45 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
22 22:35:45 Normal Created Created container: init-permissions
23 22:35:45 Normal Started Started container init-permissions
24 22:35:59 Normal Pulled Container image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/snyk@sha256:eee36c77812addee2f89331034691d9d1bcc8e76d01382e22b0d114c8950a3ff" already present on machine
25 22:35:59 Normal Created Created container: build
26 22:35:59 Normal Started Started container build
27 22:35:59 Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
28 22:35:59 Normal Created Created container: helper
29 22:35:59 Normal Started Started container helper
30 22:36:03 Running on runner-wrxjpbsjx-project-621-concurrent-2-7kpxyr6d via gitlab-runner-linux-1-746bdd58fd-hs4pj...
31 22:36:03
32 22:36:03 section_end:1778106963:prepare_script
33 22:36:03 +section_start:1778106963:get_sources
34 22:36:03 +Getting source from Git repository
35 22:36:03 Gitaly correlation ID: 01KQZPXHGC99NCA43QN85TPX2Z
36 22:36:03 Fetching changes with git depth set to 50...
37 22:36:03 Initialized empty Git repository in /build/internal/gitlab-templates/.git/
38 22:36:03 Created fresh repository.
39 22:36:05 Checking out 7f6b32cc as detached HEAD (ref is refs/merge-requests/640/merge)...
40 22:36:05
41 22:36:05 Skipping Git submodules setup
42 22:36:05
43 22:36:05 section_end:1778106965:get_sources
44 22:36:05 +section_start:1778106965:step_script
45 22:36:05 +Executing "step_script" stage of the job script
46 22:36:05 section_start:1778106965:section_pre_build_script_0[hide_duration=true,collapsed=true] $ function cleanup {
47 22:36:05 rv=$?
48 22:36:05 if [ $rv -ne 0 ]; then
49 22:36:05 echo ""
50 22:36:05 echo " Failure Cause Analysis might help, please open this link:"
51 22:36:05 echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
52 22:36:05 echo ""
53 22:36:05 fi
54 22:36:05 echo ""
55 22:36:05 echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
56 22:36:05 echo ""
57 22:36:05 echo ""
58 22:36:05 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
59 22:36:05 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
60 22:36:05 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
61 22:36:05 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
62 22:36:05 echo ""
63 22:36:05 exit $rv
64 22:36:05 }
65 22:36:05 trap cleanup EXIT
66 22:36:05 echo "INFO: This is the CI job pre_build_script"
67 22:36:05 echo "INFO: It's defined in the backend/infra/aws repo."
68 22:36:05 echo "INFO: These additional Scandit variables are available to you:"
69 22:36:05 echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
70 22:36:05 echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
71 22:36:05 echo " SC_K8S_KYVERNO_PATCHES: |"
72 22:36:05 echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
73 22:36:05 echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
74 22:36:05 if command -v numfmt >/dev/null 2>&1; then
75 22:36:05 echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
76 22:36:05 else
77 22:36:05 echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
78 22:36:05 fi
79 22:36:05 __start_time=${EPOCHSECONDS}
80 22:36:05 echo ""
81 22:36:05 echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
82 22:36:05 echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
83 22:36:05 echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
84 22:36:05 echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
85 22:36:05 echo ""
86 22:36:05 echo "Setting up credentials for Gitlab Python registries"
87 22:36:05 mkdir -p ~
88 22:36:05 echo "machine gitlab.scandit.com" > ~/.netrc
89 22:36:05 echo "login gitlab-ci-token" >> ~/.netrc
90 22:36:05 echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
91 22:36:05 chmod 600 ~/.netrc
92 22:36:05 if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
93 22:36:05 git config --global --add safe.directory $CI_PROJECT_DIR
94 22:36:05 fi
95 22:36:05 # Sonarqube server is running on the same cluster. Use internal address
96 22:36:05 export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"
97 22:36:05 section_end:1778106965:section_pre_build_script_0
98 22:36:05 INFO: This is the CI job pre_build_script
99 22:36:05 INFO: It's defined in the backend/infra/aws repo.
100 22:36:05 INFO: These additional Scandit variables are available to you:
101 22:36:05 SC_K8S_NODE_NAME: ip-10-0-28-213.eu-central-1.compute.internal
102 22:36:05 SC_K8S_IMAGE_ID:
103 22:36:05 SC_K8S_KYVERNO_PATCHES: |
104 22:36:05
105 22:36:05 cpu (r/l): 1/4
106 22:36:05 memory (r/l): 1.0GB/16GB
107 22:36:05
108 22:36:05 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-28-213.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-2-7kpxyr6d&var-resolution=15&from=1778106965000&to=now
109 22:36:05 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-28-213.eu-central-1.compute.internal&var-resolution=15s&from=1778106965000&to=now
110 22:36:05 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1582483&var-filters=CI_JOB_ID|=|54539161&sortOrder=Ascending&from=1778106965000&to=now
111 22:36:05 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-29~2026-05-13&job_name=snyk-test-delta-all-projects&project=internal/gitlab-templates
112 22:36:05
113 22:36:05 Setting up credentials for Gitlab Python registries
114 22:36:05 $ uv pip install --system -r requirements.txt
115 22:36:06 Using Python 3.12.13 environment at: /usr/local
116 22:36:06 Resolved 7 packages in 510ms
117 22:36:06 Downloading pygments (1.2MiB)
118 22:36:06 Downloaded pygments
119 22:36:06 Prepared 7 packages in 64ms
120 22:36:07 Installed 7 packages in 684ms
121 22:36:07 + coverage==7.13.5
122 22:36:07 + iniconfig==2.3.0
123 22:36:07 + packaging==26.2
124 22:36:07 + pluggy==1.6.0
125 22:36:07 + pygments==2.20.0
126 22:36:07 + pytest==9.0.3
127 22:36:07 + pytest-cov==7.1.0
128 22:36:07 section_start:1778106966:section_script_step_1[hide_duration=true,collapsed=true] $ set -e
129 22:36:07
130 22:36:07 function log_info() {
131 22:36:07 echo -e "[\e[1;94mINFO\e[0m] $*"
132 22:36:07 }
133 22:36:07
134 22:36:07 function log_warn() {
135 22:36:07 echo -e "[\e[1;93mWARN\e[0m] $*"
136 22:36:07 }
137 22:36:07
138 22:36:07 function log_error() {
139 22:36:07 echo -e "[\e[1;91mERROR\e[0m] $*"
140 22:36:07 }
141 22:36:07
142 22:36:07 function fail() {
143 22:36:07 log_error "$*"
144 22:36:07 exit 1
145 22:36:07 }
146 22:36:07
147 22:36:07 function assert_defined() {
148 22:36:07 if [[ -z "$1" ]]
149 22:36:07 then
150 22:36:07 log_error "$2"
151 22:36:07 exit 1
152 22:36:07 fi
153 22:36:07 }
154 22:36:07
155 22:36:07 function snyk_setup() {
156 22:36:07 # If SNYK_FILE is set, use it as a target, otherwise use --all-projects
157 22:36:07 if [[ -n "${SNYK_FILE}" ]]; then
158 22:36:07 SNYK_TARGET="--file=${SNYK_FILE}"
159 22:36:07 else
160 22:36:07 SNYK_TARGET="--all-projects"
161 22:36:07 fi
162 22:36:07
163 22:36:07 log_info "Targeting $SNYK_TARGET"
164 22:36:07
165 22:36:07 # Set log level based on SNYK_LOG_LEVEL
166 22:36:07 if [[ "$SNYK_LOG_LEVEL" == "info" ]]; then
167 22:36:07 SNYK_LOG_LEVEL=""
168 22:36:07 elif [[ "$SNYK_LOG_LEVEL" == "debug" ]]; then
169 22:36:07 SNYK_LOG_LEVEL="--debug"
170 22:36:07 elif [[ "$SNYK_LOG_LEVEL" == "trace" ]]; then
171 22:36:07 SNYK_LOG_LEVEL="--debug --log-level=trace"
172 22:36:07 fi
173 22:36:07 }
174 22:36:07 section_end:1778106966:section_script_step_1
175 22:36:07 $ assert_defined "$SNYK_TOKEN" "No SNYK_TOKEN defined. You have to provide a valid token for accessing Snyk."
176 22:36:07 $ snyk_setup
177 22:36:07 [INFO] Targeting --all-projects
178 22:36:07 $ set -x
179 22:36:07 ++ echo '$ snyk-test-delta.sh --snyk-delta-args "$SNYK_DELTA_ARGS" --snyk-test-args "$SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH --json ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS"'
180 22:36:07 $ snyk-test-delta.sh --snyk-delta-args "$SNYK_DELTA_ARGS" --snyk-test-args "$SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH --json ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS"
181 22:36:07 ++ snyk-test-delta.sh --snyk-delta-args '' --snyk-test-args '--all-projects --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json '
182 22:36:07 Running: snyk test --all-projects --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json
183 22:36:12 Processing output of: snyk test --all-projects --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk --json
184 22:36:12 Processing pip project gitlab-templates (dbdfd00c-1dff-430e-8c66-3099fa27c3a1): target file requirements.txt in /build/internal/gitlab-templates
185 22:36:12 Filtering out ignored vulnerabilities from local policy file .snyk
186 22:36:12 Initial vulnerability count: 0
187 22:36:12 Removed 0 locally ignored vulnerabilities
188 22:36:12 Running: snyk-delta
189 22:36:13 No new issues found !
190 22:36:13 Finished processing
191 22:36:13 Exit code: 0
192 22:36:13
193 22:36:13 Processing poetry project sc-poetry-example (null): target file sc-poetry-example/pyproject.toml in /build/internal/gitlab-templates
194 22:36:13 Filtering out ignored vulnerabilities from local policy file .snyk
195 22:36:13 Initial vulnerability count: 0
196 22:36:13 Removed 0 locally ignored vulnerabilities
197 22:36:13 Running: snyk-delta
198 22:36:17 Could not find a matching monitored Snyk project. Ensure --org is set correctly for 'snyk test'. Proceeding without a baseline.
199 22:36:17 'snyk-delta' will return exit code 1 if any vulnerabilities are found in the current project
200 22:36:17 No new issues found !
201 22:36:17 Finished processing
202 22:36:17 Exit code: 0
203 22:36:17
204 22:36:17 Overall exit code for snyk-test-delta.sh: 0
205 22:36:17 ++ echo '$ set +x'
206 22:36:17 $ set +x
207 22:36:17 ++ set +x
208 22:36:17
209 22:36:17 Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54539161
210 22:36:17
211 22:36:17
212 22:36:17 Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-28-213.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-2-7kpxyr6d&var-resolution=15&from=1778106965000&to=1778106977000
213 22:36:17 Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-28-213.eu-central-1.compute.internal&var-resolution=15s&from=1778106965000&to=1778106977000
214 22:36:17 Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1582483&var-filters=CI_JOB_ID|=|54539161&sortOrder=Ascending&from=1778106965000&to=1778106977000
215 22:36:17 Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-04-29~2026-05-13&job_name=snyk-test-delta-all-projects&project=internal/gitlab-templates
216 22:36:17
217 22:36:17
218 22:36:17 section_end:1778106977:step_script
219 22:36:17 +section_start:1778106977:after_script
220 22:36:17 +Running after_script
221 22:36:18 Running after script...
222 22:36:18 section_start:1778106977:section_after_script_step_0[hide_duration=true,collapsed=true] $ cat <<-EOD
223 22:36:18 ----------------------------------------------------------
224 22:36:18 Need help? Documentation on the Snyk jobs can be found at:
225 22:36:18 https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
226 22:36:18 EOD
227 22:36:18 section_end:1778106977:section_after_script_step_0
228 22:36:18 ----------------------------------------------------------
229 22:36:18 Need help? Documentation on the Snyk jobs can be found at:
230 22:36:18 https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
231 22:36:18
232 22:36:18 section_end:1778106978:after_script
233 22:36:18 +section_start:1778106978:cleanup_file_variables
234 22:36:18 +Cleaning up project directory and file based variables
235 22:36:18
236 22:36:18 section_end:1778106978:cleanup_file_variables
237 22:36:18 +
238 22:36:18 Job succeeded
239