secret-detection ○ success
⏱
Duration: 14s
⏳
Queued: 1s
📁
Stage: test
🖥
Runner: linux-aws-1
Average Duration
23s
This job: 14s
Failure Rate
1.4%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
159 lines
Match - of 0
1
10:48:00
Running with gitlab-runner 18.9.0 (07e534ba)
2
10:48:00
on gitlab-runner-linux-1-746bdd58fd-nmzv5 wRxjPbsJX, system ID: r_32gpkwQMMrQU
3
10:48:00
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
10:48:00
Resolving secrets
5
10:48:00
section_start:1778237280:prepare_executor
6
10:48:00
+Preparing the "kubernetes" executor
7
10:48:00
Using Kubernetes namespace: gitlab-runner
8
10:48:00
Using Kubernetes executor with image registry.scandit.com/dockerfiles/gitleaks:v8.29.0 ...
9
10:48:00
Using attach strategy to execute scripts...
10
10:48:00
Using effective pull policy of [Always] for container build
11
10:48:00
Using effective pull policy of [Always] for container helper
12
10:48:00
Using effective pull policy of [Always] for container init-permissions
13
10:48:00
section_end:1778237280:prepare_executor
14
10:48:00
+section_start:1778237280:prepare_script
15
10:48:00
+Preparing environment
16
10:48:00
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17
10:48:00
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18
10:48:01
Subscribing to Kubernetes Pod events...
19
10:48:01
Type Reason Message
20
10:48:01
Normal Scheduled Successfully assigned gitlab-runner/runner-wrxjpbsjx-project-621-concurrent-3-5bw24oc4 to ip-10-0-17-81.eu-central-1.compute.internal
21
10:48:03
Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
22
10:48:03
Normal Created Created container: init-permissions
23
10:48:03
Normal Started Started container init-permissions
24
10:48:06
Normal Pulled Container image "498954711405.dkr.ecr.eu-central-1.amazonaws.com/dockerfiles/gitleaks@sha256:ff83fa5c807770ceb2174672e2bc2fc0ddf3a50f3089ca4106925d9013743b09" already present on machine
25
10:48:06
Normal Created Created container: build
26
10:48:06
Normal Started Started container build
27
10:48:06
Normal Pulled Container image "gitlab/gitlab-runner-helper:x86_64-v18.8.0" already present on machine
28
10:48:06
Normal Created Created container: helper
29
10:48:06
Normal Started Started container helper
30
10:48:08
Running on runner-wrxjpbsjx-project-621-concurrent-3-5bw24oc4 via gitlab-runner-linux-1-746bdd58fd-nmzv5...
31
10:48:08
32
10:48:08
section_end:1778237288:prepare_script
33
10:48:08
+section_start:1778237288:get_sources
34
10:48:08
+Getting source from Git repository
35
10:48:09
Gitaly correlation ID: 01KR3K72JPWS3ZHHV4KYGW9DV3
36
10:48:09
Fetching changes...
37
10:48:09
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
38
10:48:09
Created fresh repository.
39
10:48:10
Checking out 6e76a6a0 as detached HEAD (ref is refs/merge-requests/641/merge)...
40
10:48:10
41
10:48:10
Skipping Git submodules setup
42
10:48:10
43
10:48:10
section_end:1778237290:get_sources
44
10:48:10
+section_start:1778237290:step_script
45
10:48:10
+Executing "step_script" stage of the job script
46
10:48:11
section_start:1778237291:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
47
10:48:11
rv=$?
48
10:48:11
if [ $rv -ne 0 ]; then
49
10:48:11
echo ""
50
10:48:11
echo " Failure Cause Analysis might help, please open this link:"
51
10:48:11
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
52
10:48:11
echo ""
53
10:48:11
fi
54
10:48:11
echo ""
55
10:48:11
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
56
10:48:11
echo ""
57
10:48:11
echo ""
58
10:48:11
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
59
10:48:11
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
60
10:48:11
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
61
10:48:11
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
62
10:48:11
echo ""
63
10:48:11
exit $rv
64
10:48:11
}
65
10:48:11
trap cleanup EXIT
66
10:48:11
echo "INFO: This is the CI job pre_build_script"
67
10:48:11
echo "INFO: It's defined in the backend/infra/aws repo."
68
10:48:11
echo "INFO: These additional Scandit variables are available to you:"
69
10:48:11
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
70
10:48:11
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
71
10:48:11
echo " SC_K8S_KYVERNO_PATCHES: |"
72
10:48:11
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
73
10:48:11
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
74
10:48:11
if command -v numfmt >/dev/null 2>&1; then
75
10:48:11
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
76
10:48:11
else
77
10:48:11
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
78
10:48:11
fi
79
10:48:11
__start_time=${EPOCHSECONDS}
80
10:48:11
echo ""
81
10:48:11
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
82
10:48:11
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
83
10:48:11
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group|=|gitlab-runner&var-filters=source|=|${LOKI_LOGSOURCE}&var-filters=namespace|=|${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID|=|${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID|=|${CI_PIPELINE_ID}&var-filters=CI_JOB_ID|=|${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
84
10:48:11
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=$(date -d '-7 days' +%Y-%m-%d)~$(date -d '+7 days' +%Y-%m-%d)&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
85
10:48:11
echo ""
86
10:48:11
echo "Setting up credentials for Gitlab Python registries"
87
10:48:11
mkdir -p ~
88
10:48:11
echo "machine gitlab.scandit.com" > ~/.netrc
89
10:48:11
echo "login gitlab-ci-token" >> ~/.netrc
90
10:48:11
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
91
10:48:11
chmod 600 ~/.netrc
92
10:48:11
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
93
10:48:11
git config --global --add safe.directory $CI_PROJECT_DIR
94
10:48:11
fi
95
10:48:11
# Sonarqube server is running on the same cluster. Use internal address
96
10:48:11
export SONAR_HOST_URL="http://sonarqube.sonarqube.svc.cluster.local:9000"
97
10:48:11
section_end:1778237291:section_pre_build_script_0
98
10:48:11
INFO: This is the CI job pre_build_script
99
10:48:11
INFO: It's defined in the backend/infra/aws repo.
100
10:48:11
INFO: These additional Scandit variables are available to you:
101
10:48:11
SC_K8S_NODE_NAME: ip-10-0-17-81.eu-central-1.compute.internal
102
10:48:11
SC_K8S_IMAGE_ID:
103
10:48:11
SC_K8S_KYVERNO_PATCHES: |
104
10:48:11
105
10:48:11
cpu (r/l): 1/4
106
10:48:11
memory (r/l): 1073741824/17179869184
107
10:48:11
108
10:48:11
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-17-81.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-3-5bw24oc4&var-resolution=15&from=1778237291000&to=now
109
10:48:11
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-17-81.eu-central-1.compute.internal&var-resolution=15s&from=1778237291000&to=now
110
10:48:11
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1585539&var-filters=CI_JOB_ID|=|54677907&sortOrder=Ascending&from=1778237291000&to=now
111
10:48:11
date: invalid date '-7 days'
112
10:48:11
date: invalid date '+7 days'
113
10:48:11
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=~&job_name=secret-detection&project=internal/gitlab-templates
114
10:48:11
115
10:48:11
Setting up credentials for Gitlab Python registries
116
10:48:11
$ set -x
117
10:48:11
++ echo '$ gitleaks git ./ --platform gitlab ${SECRET_DETECTION_LOG_OPTIONS} --report-format json --report-path ${SECRET_DETECTION_OUTPUT_FILE} --log-level ${SECRET_DETECTION_LOG_LEVEL} --verbose --redact ${SECRET_DETECTION_EXTRA_FLAGS}'
118
10:48:11
$ gitleaks git ./ --platform gitlab ${SECRET_DETECTION_LOG_OPTIONS} --report-format json --report-path ${SECRET_DETECTION_OUTPUT_FILE} --log-level ${SECRET_DETECTION_LOG_LEVEL} --verbose --redact ${SECRET_DETECTION_EXTRA_FLAGS}
119
10:48:11
++ gitleaks git ./ --platform gitlab --log-opts b527f65394afd88252445570c85d4e7b02266e1b..6e76a6a0c66ea57870d5fd9b25d54de105102fe9 --report-format json --report-path gl-secret-detection-report.json --log-level info --verbose --redact
120
10:48:11
121
10:48:11
○
122
10:48:11
│╲
123
10:48:11
│ ○
124
10:48:11
○ ░
125
10:48:11
░ gitleaks
126
10:48:11
127
10:48:11
10:48AM INF 1 commits scanned.
128
10:48:11
10:48AM INF scanned ~4979 bytes (4.98 KB) in 40.7ms
129
10:48:11
10:48AM INF no leaks found
130
10:48:11
++ echo '$ set +x'
131
10:48:11
$ set +x
132
10:48:11
++ set +x
133
10:48:11
134
10:48:11
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54677907
135
10:48:11
136
10:48:11
137
10:48:11
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-host=ip-10-0-17-81.eu-central-1.compute.internal&var-namespace=gitlab-runner&var-pod=runner-wrxjpbsjx-project-621-concurrent-3-5bw24oc4&var-resolution=15&from=1778237291000&to=1778237291000
138
10:48:11
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=lu1rmx27z&var-node=ip-10-0-17-81.eu-central-1.compute.internal&var-resolution=15s&from=1778237291000&to=1778237291000
139
10:48:11
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group|=|gitlab-runner&var-filters=source|=|k8s-ci.aws.scandit.io&var-filters=namespace|=|gitlab-runner&var-filters=CI_PROJECT_ID|=|621&var-filters=CI_PIPELINE_ID|=|1585539&var-filters=CI_JOB_ID|=|54677907&sortOrder=Ascending&from=1778237291000&to=1778237291000
140
10:48:11
date: invalid date '-7 days'
141
10:48:11
date: invalid date '+7 days'
142
10:48:11
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=~&job_name=secret-detection&project=internal/gitlab-templates
143
10:48:11
144
10:48:11
145
10:48:11
section_end:1778237291:step_script
146
10:48:11
+section_start:1778237291:upload_artifacts_on_success
147
10:48:11
+Uploading artifacts for successful job
148
10:48:11
Uploading artifacts...
149
10:48:11
gl-secret-detection-report.json: found 1 matching artifact files and directories
150
10:48:12
Uploading artifacts as "secret_detection" to coordinator... 201 Created correlation_id=01KR3K7F6ZGQ9KYNM2WY978ASG id=54677907 responseStatus=201 Created token=64_YmAjrw
151
10:48:12
152
10:48:12
section_end:1778237292:upload_artifacts_on_success
153
10:48:12
+section_start:1778237292:cleanup_file_variables
154
10:48:12
+Cleaning up project directory and file based variables
155
10:48:12
156
10:48:12
section_end:1778237292:cleanup_file_variables
157
10:48:12
+
158
10:48:12
Job succeeded
159