snyk-monitor ○ success
⏱
Duration: 38s
⏳
Queued: 1s
📁
Stage: test
🖥
Runner: linux-1
Average Duration
43s
This job: 38s
Failure Rate
0.0%
last 30 days
External Links
▶
Job Execution Phases
💡 Tip: Click on any phase bar to jump to that section in the log below
▶
Job Analysis
Job Status: Passed
Status: Job passed successfully
▶
Full Job Log
232 lines
Match - of 0
1
22:33:03
Running with gitlab-runner 18.9.0 (07e534ba)
2
22:33:03
on gitlab-runner-linux-1-5b9cfd64ff-k5sg5 aP4tCsXyp, system ID: r_wQDtEh3nNZsL
3
22:33:03
feature flags: FF_USE_FASTZIP:true, FF_USE_NEW_BASH_EVAL_STRATEGY:true, FF_USE_DYNAMIC_TRACE_FORCE_SEND_INTERVAL:true, FF_SCRIPT_SECTIONS:true, FF_ENABLE_JOB_CLEANUP:true, FF_USE_ADVANCED_POD_SPEC_CONFIGURATION:true, FF_PRINT_POD_EVENTS:true, FF_USE_DUMB_INIT_WITH_KUBERNETES_EXECUTOR:true, FF_LOG_IMAGES_CONFIGURED_FOR_JOB:true, FF_CLEAN_UP_FAILED_CACHE_EXTRACT:true, FF_GIT_URLS_WITHOUT_TOKENS:true, FF_WAIT_FOR_POD_TO_BE_REACHABLE:true, FF_USE_FLEETING_ACQUIRE_HEARTBEATS:true, FF_USE_JOB_ROUTER:true
4
22:33:03
Resolving secrets
5
22:33:03
section_start:1778279583:prepare_executor
6
22:33:03
+Preparing the "kubernetes" executor
7
22:33:03
Using Kubernetes namespace: gitlab-runner
8
22:33:03
Using Kubernetes executor with image registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:2d3ac69a546de877e560310a1afe3cdeea0d4664a411ad15384c3975ea064dda ...
9
22:33:03
Using attach strategy to execute scripts...
10
22:33:03
Using effective pull policy of [Always] for container build
11
22:33:03
Using effective pull policy of [Always] for container helper
12
22:33:03
Using effective pull policy of [Always] for container init-permissions
13
22:33:03
section_end:1778279583:prepare_executor
14
22:33:03
+section_start:1778279583:prepare_script
15
22:33:03
+Preparing environment
16
22:33:03
Using FF_USE_POD_ACTIVE_DEADLINE_SECONDS, the Pod activeDeadlineSeconds will be set to the job timeout: 1h0m0s...
17
22:33:03
WARNING: Advanced Pod Spec configuration enabled, merging the provided PodSpec to the generated one. This is a beta feature and is subject to change. Feedback is collected in this issue: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/29659 ...
18
22:33:03
Subscribing to Kubernetes Pod events...
19
22:33:03
Type Reason Message
20
22:33:03
Normal Scheduled Successfully assigned gitlab-runner/runner-ap4tcsxyp-project-621-concurrent-5-akqzarwy to gaius
21
22:33:04
Normal Pulling Pulling image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0"
22
22:33:05
Normal Pulled Successfully pulled image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" in 1.514s (1.514s including waiting). Image size: 37521464 bytes.
23
22:33:05
Normal Created Created container: init-permissions
24
22:33:05
Normal Started Started container init-permissions
25
22:33:07
Normal Pulled Container image "registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-v18.9.0" already present on machine
26
22:33:07
Normal Created Created container: helper
27
22:33:07
Normal Started Started container helper
28
22:33:07
Normal Pulling Pulling image "registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:2d3ac69a546de877e560310a1afe3cdeea0d4664a411ad15384c3975ea064dda"
29
22:33:23
Normal Pulled Successfully pulled image "registry.scandit.com/dockerfiles/snyk:python-3.12@sha256:2d3ac69a546de877e560310a1afe3cdeea0d4664a411ad15384c3975ea064dda" in 16.186s (16.186s including waiting). Image size: 508781547 bytes.
30
22:33:23
Normal Created Created container: build
31
22:33:23
Normal Started Started container build
32
22:33:25
Running on runner-ap4tcsxyp-project-621-concurrent-5-akqzarwy via gitlab-runner-linux-1-5b9cfd64ff-k5sg5...
33
22:33:25
34
22:33:25
section_end:1778279605:prepare_script
35
22:33:25
+section_start:1778279605:get_sources
36
22:33:25
+Getting source from Git repository
37
22:33:25
Gitaly correlation ID: 01KR4VJ32EKFM0H9XJGGMGGTZ8
38
22:33:25
Fetching changes with git depth set to 50...
39
22:33:25
Initialized empty Git repository in /build/internal/gitlab-templates/.git/
40
22:33:25
Created fresh repository.
41
22:33:26
Checking out a6e804dd as detached HEAD (ref is master)...
42
22:33:26
43
22:33:26
Skipping Git submodules setup
44
22:33:26
45
22:33:26
section_end:1778279606:get_sources
46
22:33:26
+section_start:1778279606:step_script
47
22:33:26
+Executing "step_script" stage of the job script
48
22:33:27
section_start:1778279606:section_pre_build_script_0[hide_duration=true,collapsed=true]
$ function cleanup {
49
22:33:27
rv=$?
50
22:33:27
if [ $rv -ne 0 ]; then
51
22:33:27
echo ""
52
22:33:27
echo " Failure Cause Analysis might help, please open this link:"
53
22:33:27
echo " https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
54
22:33:27
echo ""
55
22:33:27
fi
56
22:33:27
echo ""
57
22:33:27
echo "Scout Analysis: https://scout.scandit.io/analysis/projects/${CI_PROJECT_ID}/jobs/${CI_JOB_ID}"
58
22:33:27
echo ""
59
22:33:27
echo ""
60
22:33:27
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=${EPOCHSECONDS}000"
61
22:33:27
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=${EPOCHSECONDS}000"
62
22:33:27
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=${EPOCHSECONDS}000"
63
22:33:27
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
64
22:33:27
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
65
22:33:27
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
66
22:33:27
echo ""
67
22:33:27
exit $rv
68
22:33:27
}
69
22:33:27
trap cleanup EXIT
70
22:33:27
echo "INFO: This is the CI job pre_build_script"
71
22:33:27
echo "INFO: It's defined in the backend/infra/onprem/k8s repo."
72
22:33:27
echo "INFO: These additional Scandit variables are available to you:"
73
22:33:27
echo " SC_K8S_NODE_NAME: $SC_K8S_NODE_NAME"
74
22:33:27
echo " SC_K8S_IMAGE_ID: $SC_K8S_IMAGE_ID"
75
22:33:27
echo " SC_K8S_KYVERNO_PATCHES: |"
76
22:33:27
echo "$SC_K8S_KYVERNO_PATCHES" | sed 's/^/ /'
77
22:33:27
echo "cpu (r/l): ${SC_K8S_REQUESTS_CPU}/${SC_K8S_LIMITS_CPU}"
78
22:33:27
if command -v numfmt >/dev/null 2>&1; then
79
22:33:27
echo "memory (r/l): $(numfmt --to=iec --suffix=B $SC_K8S_REQUESTS_MEMORY)/$(numfmt --to=iec --suffix=B $SC_K8S_LIMITS_MEMORY)"
80
22:33:27
else
81
22:33:27
echo "memory (r/l): ${SC_K8S_REQUESTS_MEMORY}/${SC_K8S_LIMITS_MEMORY}"
82
22:33:27
fi
83
22:33:27
__start_time=${EPOCHSECONDS}
84
22:33:27
echo ""
85
22:33:27
echo "Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-host=${SC_K8S_NODE_NAME}&var-namespace=${SC_K8S_NAMESPACE}&var-pod=${HOSTNAME}&var-resolution=15&from=${__start_time}000&to=now"
86
22:33:27
echo "Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=${GRAFANA_DATASOURCE}&var-node=${SC_K8S_NODE_NAME}&var-resolution=15s&from=${__start_time}000&to=now"
87
22:33:27
echo "Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=${LOKI_DATASOURCE}&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7C${LOKI_LOGSOURCE}&var-filters=namespace%7C%3D%7C${SC_K8S_NAMESPACE}&var-filters=CI_PROJECT_ID%7C%3D%7C${CI_PROJECT_ID}&var-filters=CI_PIPELINE_ID%7C%3D%7C${CI_PIPELINE_ID}&var-filters=CI_JOB_ID%7C%3D%7C${CI_JOB_ID}&sortOrder=Ascending&from=${__start_time}000&to=now"
88
22:33:27
__date_from=$(date -d "@$(( EPOCHSECONDS - 604800 ))" +%Y-%m-%d)
89
22:33:27
__date_to=$(date -d "@$(( EPOCHSECONDS + 604800 ))" +%Y-%m-%d)
90
22:33:27
echo "Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=${__date_from}~${__date_to}&job_name=${CI_JOB_NAME}&project=${CI_PROJECT_PATH}"
91
22:33:27
echo ""
92
22:33:27
echo "Setting up credentials for Gitlab Python registries"
93
22:33:27
mkdir -p ~
94
22:33:27
echo "machine gitlab.scandit.com" > ~/.netrc
95
22:33:27
echo "login gitlab-ci-token" >> ~/.netrc
96
22:33:27
echo "password ${CI_JOB_TOKEN}" >> ~/.netrc
97
22:33:27
chmod 600 ~/.netrc
98
22:33:27
if command -v git &> /dev/null && [ "$(id -u)" -ne 0 ]; then
99
22:33:27
git config --global --add safe.directory $CI_PROJECT_DIR
100
22:33:27
fi
101
22:33:27
sleep infinity &
102
22:33:27
echo $! > ~/.bg_pid
103
22:33:27
section_end:1778279606:section_pre_build_script_0
104
22:33:27
INFO: This is the CI job pre_build_script
105
22:33:27
INFO: It's defined in the backend/infra/onprem/k8s repo.
106
22:33:27
INFO: These additional Scandit variables are available to you:
107
22:33:27
SC_K8S_NODE_NAME: gaius
108
22:33:27
SC_K8S_IMAGE_ID:
109
22:33:27
SC_K8S_KYVERNO_PATCHES: |
110
22:33:27
111
22:33:27
cpu (r/l): 1/8
112
22:33:27
memory (r/l): 1.0GB/16GB
113
22:33:27
114
22:33:27
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=gaius&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-5-akqzarwy&var-resolution=15&from=1778279606000&to=now
115
22:33:27
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=gaius&var-resolution=15s&from=1778279606000&to=now
116
22:33:27
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C%3D%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1586755&var-filters=CI_JOB_ID%7C%3D%7C54740927&sortOrder=Ascending&from=1778279606000&to=now
117
22:33:27
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-05-01~2026-05-15&job_name=snyk-monitor&project=internal/gitlab-templates
118
22:33:27
119
22:33:27
Setting up credentials for Gitlab Python registries
120
22:33:27
$ uv pip install --system -r requirements.txt
121
22:33:27
Using Python 3.12.13 environment at: /usr/local
122
22:33:27
Resolved 7 packages in 470ms
123
22:33:27
Downloading pygments (1.2MiB)
124
22:33:27
Downloaded pygments
125
22:33:27
Prepared 7 packages in 119ms
126
22:33:27
Installed 7 packages in 19ms
127
22:33:27
+ coverage==7.13.5
128
22:33:27
+ iniconfig==2.3.0
129
22:33:27
+ packaging==26.2
130
22:33:27
+ pluggy==1.6.0
131
22:33:27
+ pygments==2.20.0
132
22:33:27
+ pytest==9.0.3
133
22:33:27
+ pytest-cov==7.1.0
134
22:33:27
section_start:1778279607:section_script_step_1[hide_duration=true,collapsed=true]
$ set -e
135
22:33:27
136
22:33:27
function log_info() {
137
22:33:27
echo -e "[\e[1;94mINFO\e[0m] $*"
138
22:33:27
}
139
22:33:27
140
22:33:27
function log_warn() {
141
22:33:27
echo -e "[\e[1;93mWARN\e[0m] $*"
142
22:33:27
}
143
22:33:27
144
22:33:27
function log_error() {
145
22:33:27
echo -e "[\e[1;91mERROR\e[0m] $*"
146
22:33:27
}
147
22:33:27
148
22:33:27
function fail() {
149
22:33:27
log_error "$*"
150
22:33:27
exit 1
151
22:33:27
}
152
22:33:27
153
22:33:27
function assert_defined() {
154
22:33:27
if [[ -z "$1" ]]
155
22:33:27
then
156
22:33:27
log_error "$2"
157
22:33:27
exit 1
158
22:33:27
fi
159
22:33:27
}
160
22:33:27
161
22:33:27
function snyk_setup() {
162
22:33:27
# If SNYK_FILE is set, use it as a target, otherwise use --all-projects
163
22:33:27
if [[ -n "${SNYK_FILE}" ]]; then
164
22:33:27
SNYK_TARGET="--file=${SNYK_FILE}"
165
22:33:27
else
166
22:33:27
SNYK_TARGET="--all-projects"
167
22:33:27
fi
168
22:33:27
169
22:33:27
log_info "Targeting $SNYK_TARGET"
170
22:33:27
171
22:33:27
# Set log level based on SNYK_LOG_LEVEL
172
22:33:27
if [[ "$SNYK_LOG_LEVEL" == "info" ]]; then
173
22:33:27
SNYK_LOG_LEVEL=""
174
22:33:27
elif [[ "$SNYK_LOG_LEVEL" == "debug" ]]; then
175
22:33:27
SNYK_LOG_LEVEL="--debug"
176
22:33:27
elif [[ "$SNYK_LOG_LEVEL" == "trace" ]]; then
177
22:33:27
SNYK_LOG_LEVEL="--debug --log-level=trace"
178
22:33:27
fi
179
22:33:27
}
180
22:33:27
section_end:1778279607:section_script_step_1
181
22:33:27
$ assert_defined "$SNYK_TOKEN" "No SNYK_TOKEN defined. You have to provide a valid token for accessing Snyk."
182
22:33:27
$ snyk_setup
183
22:33:27
[INFO] Targeting --file=requirements.txt
184
22:33:27
$ set -x
185
22:33:27
++ echo '$ snyk $SNYK_COMMAND $SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS'
186
22:33:27
$ snyk $SNYK_COMMAND $SNYK_TARGET --org=$SNYK_ORG --remote-repo-url=$SNYK_REMOTE_REPO_URL --policy-path=$SNYK_POLICY_PATH ${SNYK_EXCLUDE:+--exclude=$SNYK_EXCLUDE} ${SNYK_TARGET_REFERENCE:+--target-reference=$SNYK_TARGET_REFERENCE} ${SNYK_PROJECT_ENVIRONMENT:+--project-environment=$SNYK_PROJECT_ENVIRONMENT} ${SNYK_PROJECT_LIFECYCLE:+--project-lifecycle=$SNYK_PROJECT_LIFECYCLE} ${SNYK_PROJECT_TAGS:+--project-tags=$SNYK_PROJECT_TAGS} $SNYK_LOG_LEVEL $SNYK_EXTRA_PARAMETERS
187
22:33:27
++ snyk monitor --file=requirements.txt --org=d688d452-cf04-4620-84f0-3431ce4d741a --remote-repo-url=internal/gitlab-templates --policy-path=/build/internal/gitlab-templates/.snyk
188
22:33:37
189
22:33:37
Monitoring /build/internal/gitlab-templates (gitlab-templates)...
190
22:33:37
191
22:33:37
Explore this snapshot at https://app.snyk.io/org/scandit-internal/project/dbdfd00c-1dff-430e-8c66-3099fa27c3a1/history/259b138f-34b7-4076-8c73-95037140426d
192
22:33:37
193
22:33:37
Tip: Detected multiple supported manifests (2), use --all-projects to scan all of them at once.
194
22:33:37
195
22:33:37
Notifications about newly disclosed issues related to these dependencies will be emailed to you.
196
22:33:37
197
22:33:40
++ echo '$ set +x'
198
22:33:40
$ set +x
199
22:33:40
++ set +x
200
22:33:40
201
22:33:40
Scout Analysis: https://scout.scandit.io/analysis/projects/621/jobs/54740927
202
22:33:40
203
22:33:40
204
22:33:40
Grafana Pod-View: https://grafana.scandit.com/d/k8s_views_pods/kubernetes-views-pods?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-host=gaius&var-namespace=gitlab-runner&var-pod=runner-ap4tcsxyp-project-621-concurrent-5-akqzarwy&var-resolution=15&from=1778279606000&to=1778279619000
205
22:33:40
Grafana Node-View: https://grafana.scandit.com/d/k8s_views_nodes/kubernetes-views-nodes?orgId=1&refresh=1m&var-datasource=KpIiby5Vz&var-node=gaius&var-resolution=15s&from=1778279606000&to=1778279619000
206
22:33:40
Loki Logs: https://grafana.scandit.com/a/grafana-lokiexplore-app/explore/log_group/gitlab-runner/logs?var-ds=nVsAo7UVk&var-filters=log_group%7C=%7Cgitlab-runner&var-filters=source%7C%3D%7Czrh.int.scandit.io&var-filters=namespace%7C%3D%7Cgitlab-runner&var-filters=CI_PROJECT_ID%7C%3D%7C621&var-filters=CI_PIPELINE_ID%7C%3D%7C1586755&var-filters=CI_JOB_ID%7C%3D%7C54740927&sortOrder=Ascending&from=1778279606000&to=1778279619000
207
22:33:40
Lilibet Statistics: https://lilibet.scandit.io/dashboard/204-job-drill-down?date_range=2026-05-01~2026-05-15&job_name=snyk-monitor&project=internal/gitlab-templates
208
22:33:40
209
22:33:40
210
22:33:40
section_end:1778279620:step_script
211
22:33:40
+section_start:1778279620:after_script
212
22:33:40
+Running after_script
213
22:33:40
Running after script...
214
22:33:40
section_start:1778279620:section_after_script_step_0[hide_duration=true,collapsed=true]
$ cat <<-EOD
215
22:33:40
----------------------------------------------------------
216
22:33:40
Need help? Documentation on the Snyk jobs can be found at:
217
22:33:40
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
218
22:33:40
EOD
219
22:33:40
section_end:1778279620:section_after_script_step_0
220
22:33:40
----------------------------------------------------------
221
22:33:40
Need help? Documentation on the Snyk jobs can be found at:
222
22:33:40
https://gitlab.scandit.com/internal/gitlab-templates/-/blob/master/.gitlab/snyk.md
223
22:33:40
224
22:33:40
section_end:1778279620:after_script
225
22:33:40
+section_start:1778279620:cleanup_file_variables
226
22:33:40
+Cleaning up project directory and file based variables
227
22:33:41
HEAD is now at a6e804d Merge branch 'renovate/docker-digests' into 'master'
228
22:33:41
229
22:33:41
section_end:1778279621:cleanup_file_variables
230
22:33:41
+
231
22:33:41
Job succeeded
232