SonarCloud Code Analysis Expected — Waiting for status to be reported

john_doer123 · September 20, 2024, 2:23pm

Sonarcloud-github-action stuck on PR

Please help, this PR is just stuck in pending state. It’s been a recurring issue across projects and previous topics do not explain the issue. Sonarcloud UI shows 100% coverage for code changes. Multiple attempts were made to open/close the PR, submit a new PR, retrigger the pipeline. The step is in a neverending waiting state. The gate is configured at org-level, there’s no repo-specific gate.

ALM used: GitHub
CI system used: GitHub Actions
Scanner command used when applicable

Run sonarsource/sonarcloud-github-action@master
  with:
    projectBaseDir: code
    args: -Dsonar.organization=*** -Dsonar.projectKey=***

Python, reports generated with tox
Error observed: GitHub PR is stuck on SonarCloud Code Analysis step, waiting for status to be reported
Steps to reproduce: Running tox tests for python project with github actions (hard to share / private repository) and sonarcloud action
Potential workaround: No viable workarounds

Logs

/usr/local/bin/docker run --name c38535b56291387fdc4197891d0b703f594e92_82a01e --label c38535 --workdir /github/workspace --rm -e "REGISTRY" -e "NEXUS_URL" -e "builtVersionFileName" -e "GITHUB_TOKEN" -e "SONAR_TOKEN" -e "INPUT_PROJECTBASEDIR" -e "INPUT_ARGS" -e "HOME" -e "GITHUB_JOB" -e "GITHUB_REF" -e "GITHUB_SHA" -e "GITHUB_REPOSITORY" -e "GITHUB_REPOSITORY_OWNER" -e "GITHUB_REPOSITORY_OWNER_ID" -e "GITHUB_RUN_ID" -e "GITHUB_RUN_NUMBER" -e "GITHUB_RETENTION_DAYS" -e "GITHUB_RUN_ATTEMPT" -e "GITHUB_REPOSITORY_ID" -e "GITHUB_ACTOR_ID" -e "GITHUB_ACTOR" -e "GITHUB_TRIGGERING_ACTOR" -e "GITHUB_WORKFLOW" -e "GITHUB_HEAD_REF" -e "GITHUB_BASE_REF" -e "GITHUB_EVENT_NAME" -e "GITHUB_SERVER_URL" -e "GITHUB_API_URL" -e "GITHUB_GRAPHQL_URL" -e "GITHUB_REF_NAME" -e "GITHUB_REF_PROTECTED" -e "GITHUB_REF_TYPE" -e "GITHUB_WORKFLOW_REF" -e "GITHUB_WORKFLOW_SHA" -e "GITHUB_WORKSPACE" -e "GITHUB_EVENT_PATH" -e "GITHUB_PATH" -e "GITHUB_ENV" -e "GITHUB_STEP_SUMMARY" -e "GITHUB_STATE" -e "GITHUB_OUTPUT" -e "GITHUB_ACTION" -e "GITHUB_ACTION_REPOSITORY" -e "GITHUB_ACTION_REF" -e "RUNNER_OS" -e "RUNNER_ARCH" -e "RUNNER_NAME" -e "RUNNER_ENVIRONMENT" -e "RUNNER_TOOL_CACHE" -e "RUNNER_TEMP" -e "RUNNER_WORKSPACE" -e "ACTIONS_RUNTIME_URL" -e "ACTIONS_RUNTIME_TOKEN" -e "ACTIONS_CACHE_URL" -e "ACTIONS_RESULTS_URL" -e GITHUB_ACTIONS=true -e CI=true --entrypoint "/entrypoint.sh" -v "/var/run/docker.sock":"/var/run/docker.sock" -v "/runner/_work/_temp/_github_home":"/github/home" -v "/runner/_work/_temp/_github_workflow":"/github/workflow" -v "/runner/_work/_temp/_runner_file_commands":"/github/file_commands" -v "/runner/_work/******/******":"/github/workspace" c38535:b56291387fdc4197891d0b703f594e92 -Dsonar.organization=*** -Dsonar.projectKey=***_******

[13](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:14)13:52:28.305 INFO Scanner configuration file: /opt/sonar-scanner/conf/sonar-scanner.properties

[14](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:15)13:52:28.309 INFO Project root configuration file: /github/workspace/code/sonar-project.properties

[15](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:16)13:52:28.326 INFO SonarScanner CLI 6.1.0.4477

[16](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:17)13:52:28.328 INFO Java 17.0.11 Eclipse Adoptium (64-bit)

[17](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:18)13:52:28.330 INFO Linux 5.15.0-1068-azure amd64

[18](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:19)13:52:28.365 INFO User cache: /opt/sonar-scanner/.sonar/cache

[19](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:20)13:52:29.477 INFO JRE provisioning: os[linux], arch[x86_64]

[20](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:21)13:52:32.897 INFO Communicating with SonarCloud

[21](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:22)13:52:33.280 INFO Starting SonarScanner Engine...

[22](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:23)13:52:33.282 INFO Java 17.0.11 Eclipse Adoptium (64-bit)

[23](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:24)13:52:34.486 INFO Load global settings

[24](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:25)13:52:34.900 INFO Load global settings (done) | time=418ms

[25](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:26)13:52:34.911 INFO Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu

[26](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:27)13:52:35.208 INFO Loading required plugins

[27](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:28)13:52:35.209 INFO Load plugins index

[28](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:29)13:52:35.302 INFO Load plugins index (done) | time=94ms

[29](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:30)13:52:35.305 INFO Load/download plugins

[30](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:31)13:52:36.305 INFO Load/download plugins (done) | time=1001ms

[31](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:32)13:52:36.652 INFO Found an active CI vendor: 'Github Actions'

[32](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:33)13:52:36.660 INFO Load project settings for component key: '***_******'

[33](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:34)13:52:36.758 INFO Load project settings for component key: '***_******' (done) | time=97ms

[34](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:35)13:52:36.765 INFO Process project properties

[35](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:36)13:52:36.777 INFO Project key: ***_******

[36](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:37)13:52:36.781 INFO Base dir: /github/workspace/code

[37](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:38)13:52:36.782 INFO Working dir: /github/workspace/code/.scannerwork

[38](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:39)13:52:36.787 INFO Load project branches

[39](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:40)13:52:36.911 INFO Load project branches (done) | time=123ms

[40](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:41)13:52:36.924 INFO Check ALM binding of project '***_******'

[41](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:42)13:52:37.010 INFO Detected project binding: BOUND

[42](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:43)13:52:37.012 INFO Check ALM binding of project '***_******' (done) | time=86ms

[43](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:44)13:52:37.013 INFO Load project pull requests

[44](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:45)13:52:37.132 INFO Load project pull requests (done) | time=118ms

[45](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:46)13:52:37.137 INFO Load branch configuration

[46](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:47)13:52:37.139 INFO Github event: pull_request

[47](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:48)13:52:37.150 INFO Auto-configuring pull request 21

[48](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:49)13:52:37.893 INFO Load branch configuration (done) | time=757ms

[49](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:50)13:52:37.902 INFO Load quality profiles

[50](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:51)13:52:38.105 INFO Load quality profiles (done) | time=203ms

[51](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:52)13:52:38.111 INFO Load active rules

[52](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:53)13:52:43.795 INFO Load active rules (done) | time=5683ms

[53](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:54)13:52:43.902 INFO Organization key: ***

[54](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:55)13:52:43.904 INFO Pull request 21 for merge into master from graphql-server-upgrade-2

[55](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:56)13:52:43.921 INFO Preprocessing files...

[56](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:57)13:52:44.047 INFO 1 language detected in 15 preprocessed files

[57](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:58)13:52:44.049 INFO 0 files ignored because of inclusion/exclusion patterns

[58](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:59)13:52:44.050 INFO 14 files ignored because of scm ignore settings

[59](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:60)13:52:44.077 INFO Loading plugins for detected languages

[60](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:61)13:52:44.079 INFO Load/download plugins

[61](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:62)13:52:44.641 INFO Load/download plugins (done) | time=563ms

[62](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:63)13:52:44.809 INFO Load project repositories

[63](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:64)13:52:44.927 INFO Load project repositories (done) | time=118ms

[64](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:65)13:52:44.939 INFO SCM collecting changed files in the branch

[65](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:66)13:52:45.108 INFO SCM collecting changed files in the branch (done) | time=174ms

[66](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:67)13:52:45.114 INFO Indexing files...

[67](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:68)13:52:45.115 INFO Project configuration:

[68](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:69)13:52:45.115 INFO Excluded sources: **/build-wrapper-dump.json

[69](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:70)13:52:45.117 INFO Excluded sources for coverage: **/test_*, **/requirements/*, setup.py, **/repositories/*, **/interfaces/*

[70](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:71)13:52:45.129 INFO 15 files indexed

[71](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:72)13:52:45.136 INFO Quality profile for py: Sonar way

[72](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:73)13:52:45.136 INFO ------------- Run sensors on module ***_******

[73](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:74)13:52:45.193 INFO Load metrics repository

[74](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:75)13:52:45.279 INFO Load metrics repository (done) | time=85ms

[75](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:76)13:52:45.285 INFO Sensor cache enabled

[76](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:77)13:52:45.625 INFO Load sensor cache

[77](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:78)13:52:46.472 INFO Load sensor cache (404) | time=847ms

[78](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:79)13:52:47.250 INFO Sensor Python Sensor [python]

[79](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:80)13:52:47.453 INFO Starting global symbols computation

[80](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:81)13:52:47.469 INFO 5 source files to be analyzed

[81](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:82)13:52:47.923 INFO 5/5 source files have been analyzed

[82](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:83)13:52:47.950 INFO Starting rules execution

[83](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:84)13:52:47.968 INFO 5 source files to be analyzed

[84](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:85)13:52:49.759 INFO 5/5 source files have been analyzed

[85](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:86)13:52:49.760 INFO The Python analyzer was able to leverage cached data from previous analyses for 0 out of 5 files. These files were not parsed.

[86](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:87)13:52:49.760 INFO Sensor Python Sensor [python] (done) | time=2510ms

[87](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:88)13:52:49.761 INFO Sensor Cobertura Sensor for Python coverage [python]

[88](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:89)13:52:49.871 INFO Python test coverage

[89](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:90)13:52:49.873 INFO Parsing report '/github/workspace/code/coverage-reports/coverage.xml'

[90](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:91)13:52:49.919 WARN Invalid directory path in 'source' element: /workspace

[91](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:92)13:52:49.927 INFO Sensor Cobertura Sensor for Python coverage [python] (done) | time=166ms

[92](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:93)13:52:49.928 INFO Sensor PythonXUnitSensor [python]

[93](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:94)13:52:50.017 INFO Sensor PythonXUnitSensor [python] (done) | time=88ms

[94](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:95)13:52:50.018 INFO Sensor Python HTML templates processing [securitypythonfrontend]

[95](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:96)13:52:50.027 INFO HTML files are not indexed : you may want to add them in the scanned files of this project to detect Python XSS vulnerabilities

[96](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:97)13:52:50.028 INFO Sensor Python HTML templates processing [securitypythonfrontend] (done) | time=10ms

[97](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:98)13:52:50.030 INFO Sensor JaCoCo XML Report Importer [jacoco]

[98](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:99)13:52:50.032 INFO 'sonar.coverage.jacoco.xmlReportPaths' is not defined. Using default locations: target/site/jacoco/jacoco.xml,target/site/jacoco-it/jacoco.xml,build/reports/jacoco/test/jacocoTestReport.xml

[99](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:100)13:52:50.034 INFO No report imported, no coverage information will be imported by JaCoCo XML Report Importer

[100](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:101)13:52:50.035 INFO Sensor JaCoCo XML Report Importer [jacoco] (done) | time=4ms

[101](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:102)13:52:50.035 INFO Sensor Java Config Sensor [iac]

[102](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:103)13:52:50.051 INFO 0 source files to be analyzed

[103](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:104)13:52:50.052 INFO 0/0 source files have been analyzed

[104](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:105)13:52:50.055 INFO Sensor Java Config Sensor [iac] (done) | time=18ms

[105](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:106)13:52:50.056 INFO Sensor IaC Docker Sensor [iac]

[106](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:107)13:52:50.056 INFO Sensor IaC Docker Sensor is restricted to changed files only

[107](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:108)13:52:50.132 INFO 0 source files to be analyzed

[108](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:109)13:52:50.132 INFO 0/0 source files have been analyzed

[109](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:110)13:52:50.139 INFO Sensor IaC Docker Sensor [iac] (done) | time=79ms

[110](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:111)13:52:50.140 INFO Sensor Serverless configuration file sensor [security]

[111](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:112)13:52:50.140 INFO 0 Serverless function entries were found in the project

[112](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:113)13:52:50.140 INFO 0 Serverless function handlers were kept as entrypoints

[113](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:114)13:52:50.141 INFO Sensor Serverless configuration file sensor [security] (done) | time=3ms

[114](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:115)13:52:50.142 INFO Sensor AWS SAM template file sensor [security]

[115](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:116)13:52:50.142 INFO Sensor AWS SAM template file sensor [security] (done) | time=1ms

[116](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:117)13:52:50.143 INFO Sensor AWS SAM Inline template file sensor [security]

[117](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:118)13:52:50.143 INFO Sensor AWS SAM Inline template file sensor [security] (done) | time=0ms

[118](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:119)13:52:50.144 INFO Sensor javabugs [dbd]

[119](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:120)13:52:50.145 INFO Reading IR files from: /github/workspace/code/.scannerwork/ir/java

[120](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:121)13:52:50.146 INFO No IR files have been included for analysis.

[121](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:122)13:52:50.146 INFO Sensor javabugs [dbd] (done) | time=3ms

[122](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:123)13:52:50.146 INFO Sensor pythonbugs [dbd]

[123](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:124)13:52:50.174 INFO Reading IR files from: /github/workspace/code/.scannerwork/ir/python

[124](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:125)13:52:50.177 INFO Analyzing 16 functions to detect bugs.

[125](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:126)13:52:50.503 INFO Sensor pythonbugs [dbd] (done) | time=361ms

[126](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:127)13:52:50.504 INFO Sensor TextAndSecretsSensor [text]

[127](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:128)13:52:50.504 INFO Sensor TextAndSecretsSensor is restricted to changed files only

[128](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:129)13:52:50.505 INFO Available processors: 2

[129](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:130)13:52:50.505 INFO Using 2 threads for analysis.

[130](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:131)13:52:51.019 INFO The property "sonar.tests" is not set. To improve the analysis accuracy, we categorize a file as a test file if any of the following is true:

[131](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:132) * The filename starts with "test"

[132](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:133) * The filename contains "test." or "tests."

[133](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:134) * Any directory in the file path is named: "doc", "docs", "test" or "tests"

[134](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:135) * Any directory in the file path has a name ending in "test" or "tests"

[135](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:136)

[136](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:137)13:52:51.045 INFO Using git CLI to retrieve untracked files

[137](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:138)13:52:51.051 WARN Analyzing only language associated files, make sure to run the analysis inside a git repository to make use of inclusions specified via "sonar.text.inclusions"

[138](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:139)13:52:51.075 INFO 2 source files to be analyzed

[139](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:140)13:52:51.193 INFO 2/2 source files have been analyzed

[140](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:141)13:52:51.199 INFO Sensor TextAndSecretsSensor [text] (done) | time=691ms

[141](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:142)13:52:51.200 INFO Sensor JavaSecuritySensor [security]

[142](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:143)13:52:51.200 INFO Enabled taint analysis rules: S2076, S2078, S2083, S2091, S2631, S3649, S5131, S5135, S5144, S5145, S5146, S5147, S5334, S5496, S5883, S6096, S6173, S6287, S6350, S6384, S6390, S6398, S6399, S6547, S6549

[143](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:144)13:52:51.201 INFO Load type hierarchy and UCFGs: Starting

[144](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:145)13:52:51.201 INFO Load type hierarchy: Starting

[145](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:146)13:52:51.202 INFO Reading type hierarchy from: /github/workspace/code/.scannerwork/ucfg2/java

[146](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:147)13:52:51.204 INFO Read 0 type definitions

[147](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:148)13:52:51.206 INFO Load type hierarchy: Time spent was 00:00:00.006

[148](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:149)13:52:51.206 INFO Load UCFGs: Starting

[149](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:150)13:52:51.207 INFO Load UCFGs: Time spent was 00:00:00.000

[150](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:151)13:52:51.209 INFO Load type hierarchy and UCFGs: Time spent was 00:00:00.010

[151](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:152)13:52:51.210 INFO No UCFGs have been included for analysis.

[152](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:153)13:52:51.221 INFO java security sensor: Time spent was 00:00:00.023

[153](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:154)13:52:51.222 INFO java security sensor: Begin: 2024-09-20T13:52:51.196782763Z, End: 2024-09-20T13:52:51.220683809Z, Duration: 00:00:00.023

[154](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:155) Load type hierarchy and UCFGs: Begin: 2024-09-20T13:52:51.198445355Z, End: 2024-09-20T13:52:51.208729037Z, Duration: 00:00:00.010

[155](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:156) Load type hierarchy: Begin: 2024-09-20T13:52:51.198507420Z, End: 2024-09-20T13:52:51.205386900Z, Duration: 00:00:00.006

[156](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:157) Load UCFGs: Begin: 2024-09-20T13:52:51.206390215Z, End: 2024-09-20T13:52:51.207018857Z, Duration: 00:00:00.000

[157](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:158)13:52:51.223 INFO java security sensor peak memory: 192 MB

[158](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:159)13:52:51.225 INFO Sensor JavaSecuritySensor [security] (done) | time=30ms

[159](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:160)13:52:51.226 INFO Sensor CSharpSecuritySensor [security]

[160](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:161)13:52:51.226 INFO Enabled taint analysis rules: S2076, S2078, S2083, S2091, S2631, S3649, S5131, S5135, S5144, S5145, S5146, S5334, S5883, S6096, S6173, S6287, S6350, S6399, S6639, S6641

[161](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:162)13:52:51.226 INFO Load type hierarchy and UCFGs: Starting

[162](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:163)13:52:51.227 INFO Load type hierarchy: Starting

[163](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:164)13:52:51.227 INFO Reading type hierarchy from: /github/workspace/code/ucfg2/cs

[164](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:165)13:52:51.227 INFO Read 0 type definitions

[165](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:166)13:52:51.228 INFO Load type hierarchy: Time spent was 00:00:00.000

[166](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:167)13:52:51.228 INFO Load UCFGs: Starting

[167](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:168)13:52:51.229 INFO Load UCFGs: Time spent was 00:00:00.000

[168](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:169)13:52:51.230 INFO Load type hierarchy and UCFGs: Time spent was 00:00:00.002

[169](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:170)13:52:51.230 INFO No UCFGs have been included for analysis.

[170](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:171)13:52:51.231 INFO csharp security sensor: Time spent was 00:00:00.004

[171](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:172)13:52:51.231 INFO csharp security sensor: Begin: 2024-09-20T13:52:51.226421257Z, End: 2024-09-20T13:52:51.230629952Z, Duration: 00:00:00.004

[172](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:173) Load type hierarchy and UCFGs: Begin: 2024-09-20T13:52:51.226813140Z, End: 2024-09-20T13:52:51.229762324Z, Duration: 00:00:00.002

[173](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:174) Load type hierarchy: Begin: 2024-09-20T13:52:51.226995769Z, End: 2024-09-20T13:52:51.227886022Z, Duration: 00:00:00.000

[174](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:175) Load UCFGs: Begin: 2024-09-20T13:52:51.228523270Z, End: 2024-09-20T13:52:51.229321556Z, Duration: 00:00:00.000

[175](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:176)13:52:51.232 INFO csharp security sensor peak memory: 192 MB

[176](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:177)13:52:51.234 INFO Sensor CSharpSecuritySensor [security] (done) | time=8ms

[177](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:178)13:52:51.235 INFO Sensor PhpSecuritySensor [security]

[178](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:179)13:52:51.235 INFO Enabled taint analysis rules: S2076, S2078, S2083, S2091, S2631, S3649, S5131, S5135, S5144, S5145, S5146, S5334, S5335, S5883, S6173, S6287, S6350

[179](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:180)13:52:51.235 INFO Load type hierarchy and UCFGs: Starting

[180](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:181)13:52:51.236 INFO Load type hierarchy: Starting

[181](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:182)13:52:51.236 INFO Reading type hierarchy from: /github/workspace/code/.scannerwork/ucfg2/php

[182](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:183)13:52:51.237 INFO Read 0 type definitions

[183](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:184)13:52:51.237 INFO Load type hierarchy: Time spent was 00:00:00.001

[184](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:185)13:52:51.238 INFO Load UCFGs: Starting

[185](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:186)13:52:51.238 INFO Load UCFGs: Time spent was 00:00:00.000

[186](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:187)13:52:51.238 INFO Load type hierarchy and UCFGs: Time spent was 00:00:00.002

[187](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:188)13:52:51.239 INFO No UCFGs have been included for analysis.

[188](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:189)13:52:51.239 INFO php security sensor: Time spent was 00:00:00.003

[189](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:190)13:52:51.240 INFO php security sensor: Begin: 2024-09-20T13:52:51.235366342Z, End: 2024-09-20T13:52:51.239346225Z, Duration: 00:00:00.003

[190](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:191) Load type hierarchy and UCFGs: Begin: 2024-09-20T13:52:51.235742839Z, End: 2024-09-20T13:52:51.238564241Z, Duration: 00:00:00.002

[191](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:192) Load type hierarchy: Begin: 2024-09-20T13:52:51.236340915Z, End: 2024-09-20T13:52:51.237624524Z, Duration: 00:00:00.001

[192](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:193) Load UCFGs: Begin: 2024-09-20T13:52:51.237979050Z, End: 2024-09-20T13:52:51.238238386Z, Duration: 00:00:00.000

[193](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:194)13:52:51.241 INFO php security sensor peak memory: 192 MB

[194](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:195)13:52:51.241 INFO Sensor PhpSecuritySensor [security] (done) | time=6ms

[195](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:196)13:52:51.241 INFO Sensor PythonSecuritySensor [security]

[196](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:197)13:52:51.242 INFO Enabled taint analysis rules: S2076, S2078, S2083, S2091, S2631, S3649, S5131, S5135, S5144, S5145, S5146, S5147, S5334, S5496, S6287, S6350, S6639, S6680, S6776, S6839

[197](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:198)13:52:51.242 INFO Load type hierarchy and UCFGs: Starting

[198](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:199)13:52:51.242 INFO Load type hierarchy: Starting

[199](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:200)13:52:51.243 INFO Reading type hierarchy from: /github/workspace/code/.scannerwork/ucfg2/python

[200](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:201)13:52:51.302 INFO Read 270 type definitions

[201](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:202)13:52:51.307 INFO Load type hierarchy: Time spent was 00:00:00.063

[202](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:203)13:52:51.309 INFO Load UCFGs: Starting

[203](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:204)13:52:51.309 INFO Reading UCFGs from: /github/workspace/code/.scannerwork/ucfg2/python

[204](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:205)13:52:51.664 INFO Load UCFGs: Time spent was 00:00:00.356

[205](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:206)13:52:51.665 INFO Load type hierarchy and UCFGs: Time spent was 00:00:00.421

[206](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:207)13:52:51.665 INFO Analyzing 1371 UCFGs to detect vulnerabilities.

[207](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:208)13:52:51.665 INFO Check cache: Starting

[208](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:209)13:52:51.666 INFO Load cache: Starting

[209](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:210)13:52:51.666 INFO Load cache: Time spent was 00:00:00.000

[210](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:211)13:52:51.669 INFO Check cache: Time spent was 00:00:00.000

[211](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:212)13:52:51.669 INFO Create runtime call graph: Starting

[212](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:213)13:52:51.670 INFO Variable Type Analysis #1: Starting

[213](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:214)13:52:51.675 INFO Create runtime type propagation graph: Starting

[214](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:215)13:52:51.730 INFO Create runtime type propagation graph: Time spent was 00:00:00.054

[215](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:216)13:52:51.731 INFO Run SCC (Tarjan) on 3157 nodes: Starting

[216](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:217)13:52:51.752 INFO Run SCC (Tarjan) on 3157 nodes: Time spent was 00:00:00.020

[217](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:218)13:52:51.754 INFO Tarjan found 3154 strongly connected components

[218](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:219)13:52:51.754 INFO Propagate runtime types to strongly connected components: Starting

[219](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:220)13:52:51.773 INFO Propagate runtime types to strongly connected components: Time spent was 00:00:00.018

[220](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:221)13:52:51.774 INFO Variable Type Analysis #1: Time spent was 00:00:00.104

[221](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:222)13:52:51.775 INFO Variable Type Analysis #2: Starting

[222](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:223)13:52:51.776 INFO Create runtime type propagation graph: Starting

[223](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:224)13:52:51.787 INFO Create runtime type propagation graph: Time spent was 00:00:00.011

[224](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:225)13:52:51.789 INFO Run SCC (Tarjan) on 3125 nodes: Starting

[225](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:226)13:52:51.791 INFO Run SCC (Tarjan) on 3125 nodes: Time spent was 00:00:00.004

[226](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:227)13:52:51.792 INFO Tarjan found 3122 strongly connected components

[227](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:228)13:52:51.792 INFO Propagate runtime types to strongly connected components: Starting

[228](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:229)13:52:51.803 INFO Propagate runtime types to strongly connected components: Time spent was 00:00:00.011

[229](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:230)13:52:51.804 INFO Variable Type Analysis #2: Time spent was 00:00:00.028

[230](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:231)13:52:51.805 INFO Create runtime call graph: Time spent was 00:00:00.137

[231](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:232)13:52:51.806 INFO Load config: Starting

[232](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:233)13:52:51.995 INFO Load config: Time spent was 00:00:00.189

[233](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:234)13:52:51.996 INFO Compute entry points: Starting

[234](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:235)13:52:52.092 INFO Compute entry points: Time spent was 00:00:00.097

[235](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:236)13:52:52.094 INFO No entry points found.

[236](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:237)13:52:52.095 INFO python security sensor: Time spent was 00:00:00.853

[237](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:238)13:52:52.098 INFO python security sensor: Begin: 2024-09-20T13:52:51.242022061Z, End: 2024-09-20T13:52:52.095369193Z, Duration: 00:00:00.853

[238](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:239) Load type hierarchy and UCFGs: Begin: 2024-09-20T13:52:51.242434374Z, End: 2024-09-20T13:52:51.664239412Z, Duration: 00:00:00.421

[239](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:240) Load type hierarchy: Begin: 2024-09-20T13:52:51.242654925Z, End: 2024-09-20T13:52:51.306479039Z, Duration: 00:00:00.063

[240](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:241) Load UCFGs: Begin: 2024-09-20T13:52:51.307258121Z, End: 2024-09-20T13:52:51.664028168Z, Duration: 00:00:00.356

[241](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:242) Check cache: Begin: 2024-09-20T13:52:51.664363214Z, End: 2024-09-20T13:52:51.664816871Z, Duration: 00:00:00.000

[242](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:243) Load cache: Begin: 2024-09-20T13:52:51.664387024Z, End: 2024-09-20T13:52:51.664477406Z, Duration: 00:00:00.000

[243](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:244) Create runtime call graph: Begin: 2024-09-20T13:52:51.668080577Z, End: 2024-09-20T13:52:51.805671588Z, Duration: 00:00:00.137

[244](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:245) Variable Type Analysis #1: Begin: 2024-09-20T13:52:51.668655266Z, End: 2024-09-20T13:52:51.772844326Z, Duration: 00:00:00.104

[245](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:246) Create runtime type propagation graph: Begin: 2024-09-20T13:52:51.675340883Z, End: 2024-09-20T13:52:51.729870791Z, Duration: 00:00:00.054

[246](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:247) Run SCC (Tarjan) on 3157 nodes: Begin: 2024-09-20T13:52:51.731473527Z, End: 2024-09-20T13:52:51.752376271Z, Duration: 00:00:00.020

[247](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:248) Propagate runtime types to strongly connected components: Begin: 2024-09-20T13:52:51.754542238Z, End: 2024-09-20T13:52:51.772591073Z, Duration: 00:00:00.018

[248](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:249) Variable Type Analysis #2: Begin: 2024-09-20T13:52:51.775283583Z, End: 2024-09-20T13:52:51.803570550Z, Duration: 00:00:00.028

[249](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:250) Create runtime type propagation graph: Begin: 2024-09-20T13:52:51.775349496Z, End: 2024-09-20T13:52:51.787148197Z, Duration: 00:00:00.011

[250](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:251) Run SCC (Tarjan) on 3125 nodes: Begin: 2024-09-20T13:52:51.787361423Z, End: 2024-09-20T13:52:51.791440710Z, Duration: 00:00:00.004

[251](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:252) Propagate runtime types to strongly connected components: Begin: 2024-09-20T13:52:51.791662332Z, End: 2024-09-20T13:52:51.803371573Z, Duration: 00:00:00.011

[252](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:253) Load config: Begin: 2024-09-20T13:52:51.805832813Z, End: 2024-09-20T13:52:51.994989670Z, Duration: 00:00:00.189

[253](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:254) Compute entry points: Begin: 2024-09-20T13:52:51.995216070Z, End: 2024-09-20T13:52:52.092309459Z, Duration: 00:00:00.097

[254](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:255)13:52:52.105 INFO python security sensor peak memory: 199 MB

[255](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:256)13:52:52.105 INFO Sensor PythonSecuritySensor [security] (done) | time=864ms

[256](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:257)13:52:52.106 INFO Sensor JsSecuritySensor [security]

[257](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:258)13:52:52.106 INFO Enabled taint analysis rules: S6350, S5144, S3649, S6096, S5883, S2631, S5131, S5147, S6287, S5696, S2076, S6105, S5334, S2083, S5146

[258](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:259)13:52:52.107 INFO Load type hierarchy and UCFGs: Starting

[259](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:260)13:52:52.107 INFO Load type hierarchy: Starting

[260](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:261)13:52:52.107 INFO Reading type hierarchy from: /github/workspace/code/.scannerwork/ucfg2/js

[261](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:262)13:52:52.107 INFO Read 0 type definitions

[262](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:263)13:52:52.108 INFO Load type hierarchy: Time spent was 00:00:00.000

[263](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:264)13:52:52.108 INFO Load UCFGs: Starting

[264](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:265)13:52:52.111 INFO Load UCFGs: Time spent was 00:00:00.002

[265](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:266)13:52:52.112 INFO Load type hierarchy and UCFGs: Time spent was 00:00:00.004

[266](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:267)13:52:52.112 INFO No UCFGs have been included for analysis.

[267](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:268)13:52:52.112 INFO js security sensor: Time spent was 00:00:00.006

[268](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:269)13:52:52.114 INFO js security sensor: Begin: 2024-09-20T13:52:52.106531217Z, End: 2024-09-20T13:52:52.112631255Z, Duration: 00:00:00.006

[269](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:270) Load type hierarchy and UCFGs: Begin: 2024-09-20T13:52:52.106956674Z, End: 2024-09-20T13:52:52.111851246Z, Duration: 00:00:00.004

[270](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:271) Load type hierarchy: Begin: 2024-09-20T13:52:52.107192547Z, End: 2024-09-20T13:52:52.107995924Z, Duration: 00:00:00.000

[271](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:272) Load UCFGs: Begin: 2024-09-20T13:52:52.108645414Z, End: 2024-09-20T13:52:52.111494125Z, Duration: 00:00:00.002

[272](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:273)13:52:52.114 INFO js security sensor peak memory: 199 MB

[273](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:274)13:52:52.114 INFO Sensor JsSecuritySensor [security] (done) | time=8ms

[274](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:275)13:52:52.117 INFO ------------- Run sensors on project

[275](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:276)13:52:52.239 INFO Sensor Zero Coverage Sensor

[276](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:277)13:52:52.243 INFO Sensor Zero Coverage Sensor (done) | time=4ms

[277](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:278)13:52:52.246 INFO SCM Publisher SCM provider for this project is: git

[278](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:279)13:52:52.247 INFO SCM Publisher 2 source files to be analyzed

[279](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:280)13:52:52.363 INFO SCM Publisher 2/2 source files have been analyzed (done) | time=114ms

[280](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:281)13:52:52.368 INFO CPD Executor 1 file had no CPD blocks

[281](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:282)13:52:52.369 INFO CPD Executor Calculating CPD for 4 files

[282](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:283)13:52:52.376 INFO CPD Executor CPD calculation finished (done) | time=6ms

[283](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:284)13:52:52.505 INFO SCM writing changed lines

[284](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:285)13:52:52.566 INFO SCM writing changed lines (done) | time=61ms

[285](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:286)13:52:52.645 INFO Analysis report generated in 267ms, dir size=294 KB

[286](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:287)13:52:52.668 INFO Analysis report compressed in 21ms, zip size=62 KB

[287](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:288)13:52:53.021 INFO Analysis report uploaded in 351ms

[288](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:289)13:52:53.025 INFO ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=***_******&pullRequest=21

[289](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:290)13:52:53.025 INFO Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report

[290](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:291)13:52:53.025 INFO More about the report processing at https://sonarcloud.io/api/ce/task?id=AZIPtP6CTW5KhCmSM1es

[291](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:292)13:52:53.034 INFO Analysis total time: 16.622 s

[292](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:293)13:52:53.036 INFO SonarScanner Engine completed successfully

[293](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:294)13:52:53.363 INFO EXECUTION SUCCESS

[294](https://github.com/*****/******/actions/runs/10960505600/job/30435275442#step:11:295)13:52:53.364 INFO Total time: 25.062s

dbsanfte · September 20, 2024, 3:19pm

A note on the above (I’m the Devops lead).

The check is successful for some repos in the org, but for others it isn’t.

The analysis succeeds, and the analysis report appears in Sonar. It is bound to the correct GitHub repo. All looks ok from the Sonarcloud side. But the check never appears on the PR.

Logs can be provided if necessary, please let us know.

ganncamp · September 23, 2024, 2:08pm

Hi,

Welcome to the community!

Our previous investigations into this area have indicated that - unless there are alarms going off on our side (and there aren’t) - it’s instability on the GitHub side. Unfortunately, there’s not much we can do here.

Ann

john_doer123 · September 24, 2024, 9:58am

If it was instability on the GitHub side, I would expect that if I close a PR, delete the remote branch, re-create the remote branch and re-open the PR, and do this enough times that it would eventually work.

However, this step hangs 100% of the time and only in certain repositories and then it hangs on any PR (changing the PR name doesn’t help).

The reliable reproducibility of this suggests that something isn’t working quite right… it doesn’t seem to be network related.

shane.findley · October 11, 2024, 9:38am

@john_doer123 & @dbsanfte thank you for the initial information here. Are you still experiencing this problem?

You mentioned that you have associated logs which could be helpful, would you want to send this information privately? If so I can contact you directly to share the information.