SonarQube Developer Edition: java.security.ProviderException: update() failed

dws_guy · February 9, 2024, 4:50pm

SonarQube Developer edition 9.9.3, sonar-scanner-cli:5.0

New error after upgrade from SonarQube 9.9.3 Community edition to Developer Edition. Symbolic analysis failure with above error.

$ sonar-scanner -X -Dsonar.qualitygate.wait=true -Dsonar.projectKey=${PROJ_KEY} -Dsonar.exclusions=${EXCLUDE} -Dsonar.python.coverage.reportPaths=${PYTHON_COVERAGE_REPORT} -Dsonar.report.export.path=sonarqube-report2.json 2>&1 | tee sonaroutput.txt || exit_code=$?
16:29:33.087 INFO: Scanner configuration file: /opt/sonar-scanner/conf/sonar-scanner.properties
16:29:33.099 INFO: Project root configuration file: /builds/x/helloworld-pythondemo/sonar-project.properties
16:29:33.115 INFO: SonarScanner 5.0.1.3006
16:29:33.115 INFO: Java 17.0.10 Red Hat, Inc. (64-bit)
16:29:33.115 INFO: Linux 4.18.0-513.11.1.el8_9.x86_64 amd64
16:29:33.600 DEBUG: keyStore is : 
16:29:33.600 DEBUG: keyStore type is : pkcs12
16:29:33.600 DEBUG: keyStore provider is : 
16:29:33.600 DEBUG: init keystore
16:29:33.601 DEBUG: init keymanager of type SunX509
16:29:33.709 DEBUG: Create: /builds/x/helloworld-pythondemo/.sonar/cache
16:29:33.710 INFO: User cache: /builds/x/helloworld-pythondemo/.sonar/cache
16:29:33.710 DEBUG: Create: /builds/x/helloworld-pythondemo/.sonar/cache/_tmp
16:29:33.768 DEBUG: Extract sonar-scanner-api-batch in temp...
16:29:33.770 DEBUG: Get bootstrap index...
16:29:33.770 DEBUG: Download: https://sonarqube.url.com/batch/index
16:29:34.015 DEBUG: Get bootstrap completed
16:29:34.017 DEBUG: Download https://sonarqube.url.com/batch/file?name=scanner-developer-9.9.3.79811-all.jar to /builds/x/helloworld-pythondemo/.sonar/cache/_tmp/fileCache15280904649864446280.tmp
16:29:34.529 DEBUG: Create isolated classloader...
16:29:34.536 DEBUG: Start temp cleaning...
16:29:34.538 DEBUG: Temp cleaning done
16:29:34.538 DEBUG: Execution getVersion
16:29:34.545 INFO: Analyzing on SonarQube server 9.9.3.79811
16:29:34.546 INFO: Default locale: "en", source code encoding: "UTF-8"
16:29:34.546 DEBUG: Work directory: /builds/x/helloworld-pythondemo/.scannerwork
16:29:34.547 DEBUG: Execution execute
16:29:34.924 DEBUG: Developer 9.9.3.79811
16:29:35.227 INFO: Load global settings
16:29:35.439 DEBUG: GET 200 https://sonarqube.url.com/api/settings/values.protobuf | time=211ms
16:29:35.493 INFO: Load global settings (done) | time=266ms
16:29:35.496 INFO: Server id: redacted
16:29:35.500 DEBUG: Create : /builds/x/helloworld-pythondemo/.sonar/_tmp
16:29:35.501 INFO: User cache: /builds/x/helloworld-pythondemo/.sonar/cache
16:29:35.504 INFO: Load/download plugins
16:29:35.504 INFO: Load plugins index
16:29:35.514 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/installed | time=10ms
16:29:35.535 INFO: Load plugins index (done) | time=31ms
16:29:35.536 DEBUG: Download plugin 'abap' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache10571090371997873502.tmp'
16:29:35.544 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=abap | time=8ms
16:29:35.608 DEBUG: Download plugin 'csharp' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache3671633105374431047.tmp'
16:29:35.622 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=csharp | time=14ms
16:29:35.776 DEBUG: Download plugin 'cpp' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache10040033468572541611.tmp'
16:29:35.785 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=cpp | time=9ms
16:29:36.609 DEBUG: Download plugin 'config' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache5523484668934272850.tmp'
16:29:36.616 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=config | time=7ms
16:29:36.618 DEBUG: Download plugin 'dbd' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache7829464699431240412.tmp'
16:29:36.625 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=dbd | time=7ms
16:29:36.640 DEBUG: Download plugin 'dbdjavafrontend' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache13840212194916114327.tmp'
16:29:36.647 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=dbdjavafrontend | time=7ms
16:29:36.675 DEBUG: Download plugin 'dbdpythonfrontend' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache2542422187895280143.tmp'
16:29:36.681 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=dbdpythonfrontend | time=6ms
16:29:36.692 DEBUG: Download plugin 'flex' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache13761106099338288502.tmp'
16:29:36.699 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=flex | time=5ms
16:29:36.706 DEBUG: Download plugin 'go' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache12550315787298534091.tmp'
16:29:36.712 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=go | time=6ms
16:29:36.797 DEBUG: Download plugin 'web' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache13810329104297383460.tmp'
16:29:36.827 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=web | time=30ms
16:29:36.831 DEBUG: Download plugin 'iac' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache15799758710983701810.tmp'
16:29:36.841 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=iac | time=10ms
16:29:36.875 DEBUG: Download plugin 'jacoco' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache2405747036219491758.tmp'
16:29:36.882 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=jacoco | time=6ms
16:29:36.883 DEBUG: Download plugin 'java' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache13884187282012242652.tmp'
16:29:36.889 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=java | time=6ms
16:29:37.115 DEBUG: Download plugin 'javascript' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache7609867352206464794.tmp'
16:29:37.123 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=javascript | time=8ms
16:29:37.429 DEBUG: Download plugin 'kotlin' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache18427798229235857395.tmp'
16:29:37.437 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=kotlin | time=8ms
16:29:37.973 DEBUG: Download plugin 'php' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache17060872127084395780.tmp'
16:29:37.981 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=php | time=8ms
16:29:38.016 DEBUG: Download plugin 'plsql' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache1256860484503420259.tmp'
16:29:38.023 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=plsql | time=7ms
16:29:38.093 DEBUG: Download plugin 'python' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache8733925384876272380.tmp'
16:29:38.101 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=python | time=8ms
16:29:38.196 DEBUG: Download plugin 'ruby' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache748605655793193721.tmp'
16:29:38.204 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=ruby | time=8ms
16:29:38.324 DEBUG: Download plugin 'sonarscala' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache9981168024760851377.tmp'
16:29:38.344 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=sonarscala | time=20ms
16:29:38.509 DEBUG: Download plugin 'swift' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache17276705751599066178.tmp'
16:29:38.518 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=swift | time=9ms
16:29:38.549 DEBUG: Download plugin 'tsql' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache17728101147878096069.tmp'
16:29:38.556 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=tsql | time=6ms
16:29:38.569 DEBUG: Download plugin 'text' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache11472238604144375425.tmp'
16:29:38.576 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=text | time=7ms
16:29:38.577 DEBUG: Download plugin 'vbnet' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache5157788195866988162.tmp'
16:29:38.584 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=vbnet | time=7ms
16:29:38.652 DEBUG: Download plugin 'security' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache16162141214818372249.tmp'
16:29:38.660 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=security | time=7ms
16:29:38.799 DEBUG: Download plugin 'securitycsharpfrontend' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache4483254396414698282.tmp'
16:29:38.815 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=securitycsharpfrontend | time=16ms
16:29:38.820 DEBUG: Download plugin 'securityjsfrontend' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache10065102896582349240.tmp'
16:29:38.826 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=securityjsfrontend | time=6ms
16:29:38.830 DEBUG: Download plugin 'securityjavafrontend' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache9215723376653877917.tmp'
16:29:38.835 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=securityjavafrontend | time=5ms
16:29:38.961 DEBUG: Download plugin 'securityphpfrontend' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache14398142330925041840.tmp'
16:29:38.967 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=securityphpfrontend | time=6ms
16:29:38.985 DEBUG: Download plugin 'securitypythonfrontend' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache15140763335286028487.tmp'
16:29:38.992 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=securitypythonfrontend | time=7ms
16:29:39.008 DEBUG: Download plugin 'xml' to '/builds/x/helloworld-pythondemo/.sonar/_tmp/fileCache10906348874009244155.tmp'
16:29:39.014 DEBUG: GET 200 https://sonarqube.url.com/api/plugins/download?plugin=xml | time=6ms
16:29:39.055 INFO: Load/download plugins (done) | time=3551ms
16:29:39.322 DEBUG: Plugins:
16:29:39.322 DEBUG:   * IaC Code Quality and Security 1.11.0.2847 (iac)
16:29:39.322 DEBUG:   * PL/SQL Code Quality and Security 3.8.0.4948 (plsql)
16:29:39.322 DEBUG:   * Scala Code Quality and Security 1.11.0.3905 (sonarscala)
16:29:39.322 DEBUG:   * C# Code Quality and Security 8.51.0.59060 (csharp)
16:29:39.322 DEBUG:   * Vulnerability Analysis 9.9.2.22117 (security)
16:29:39.322 DEBUG:   * Java Code Quality and Security 7.16.0.30901 (java)
16:29:39.322 DEBUG:   * HTML Code Quality and Security 3.7.1.3306 (web)
16:29:39.322 DEBUG:   * Flex Code Quality and Security 2.8.0.3166 (flex)
16:29:39.322 DEBUG:   * XML Code Quality and Security 2.7.0.3820 (xml)
16:29:39.322 DEBUG:   * Text Code Quality and Security 2.0.2.1090 (text)
16:29:39.322 DEBUG:   * VB.NET Code Quality and Security 8.51.0.59060 (vbnet)
16:29:39.322 DEBUG:   * Swift Code Quality and Security 4.8.0.5759 (swift)
16:29:39.322 DEBUG:   * CFamily Code Quality and Security 6.41.1.62265 (cpp)
16:29:39.322 DEBUG:   * Python Code Quality and Security 3.24.1.11916 (python)
16:29:39.322 DEBUG:   * Dataflow Bug Detection Rules for Python 1.10.0.3046 (dbdpythonfrontend)
16:29:39.323 DEBUG:   * Dataflow Bug Detection 1.10.0.3046 (dbd)
16:29:39.323 DEBUG:   * Go Code Quality and Security 1.11.0.3905 (go)
16:29:39.323 DEBUG:   * JaCoCo 1.3.0.1538 (jacoco)
16:29:39.323 DEBUG:   * Kotlin Code Quality and Security 2.12.0.1956 (kotlin)
16:29:39.323 DEBUG:   * Dataflow Bug Detection Rules for Java 1.10.0.3046 (dbdjavafrontend)
16:29:39.323 DEBUG:   * T-SQL Code Quality and Security 1.7.0.5449 (tsql)
16:29:39.323 DEBUG:   * JavaScript/TypeScript/CSS Code Quality and Security 9.13.0.20537 (javascript)
16:29:39.323 DEBUG:   * Ruby Code Quality and Security 1.11.0.3905 (ruby)
16:29:39.323 DEBUG:   * Vulnerability Rules for C# 9.9.2.22117 (securitycsharpfrontend)
16:29:39.323 DEBUG:   * Vulnerability Rules for Java 9.9.2.22117 (securityjavafrontend)
16:29:39.323 DEBUG:   * Vulnerability Rules for JS 9.9.2.22117 (securityjsfrontend)
16:29:39.323 DEBUG:   * Vulnerability Rules for Python 9.9.2.22117 (securitypythonfrontend)
16:29:39.323 DEBUG:   * PHP Code Quality and Security 3.27.1.9352 (php)
16:29:39.323 DEBUG:   * ABAP Code Quality and Security 3.11.0.4030 (abap)
16:29:39.323 DEBUG:   * Configuration detection fot Code Quality and Security 1.2.0.267 (config)
16:29:39.323 DEBUG:   * Vulnerability Rules for PHP 9.9.2.22117 (securityphpfrontend)
16:29:39.396 INFO: Loaded core extensions: developer-scanner
16:29:39.407 DEBUG: Installed core extension: developer-scanner
16:29:40.167 INFO: Process project properties
16:29:40.174 INFO: Process project properties (done) | time=7ms
16:29:40.176 INFO: Execute project builders
16:29:40.176 DEBUG: Execute project builder: org.sonar.plugins.csharp.CSharpGlobalProtobufFileProcessor
16:29:40.177 DEBUG: Execute project builder: org.sonar.plugins.vbnet.VbNetGlobalProtobufFileProcessor
16:29:40.177 INFO: Execute project builders (done) | time=1ms
16:29:40.179 INFO: Project key: x-helloworld-PYTHONdemo
16:29:40.179 INFO: Base dir: /builds/x/helloworld-pythondemo
16:29:40.179 INFO: Working dir: /builds/x/helloworld-pythondemo/.scannerwork
16:29:40.179 DEBUG: Project global encoding: UTF-8, default locale: en
16:29:40.186 INFO: Load project settings for component key: 'x-helloworld-PYTHONdemo'
16:29:40.206 DEBUG: GET 200 https://sonarqube.url.com/api/settings/values.protobuf?component=x-helloworld-PYTHONdemo | time=20ms
16:29:40.208 INFO: Load project settings for component key: 'x-helloworld-PYTHONdemo' (done) | time=22ms
16:29:40.371 INFO: Load project branches
16:29:40.385 DEBUG: GET 200 https://sonarqube.url.com/api/project_branches/list?project=x-helloworld-PYTHONdemo | time=14ms
16:29:40.394 INFO: Load project branches (done) | time=23ms
16:29:40.395 INFO: Load branch configuration
16:29:40.397 INFO: Detected branch/PR in 'GitLab'
16:29:40.397 INFO: Auto-configuring branch 'main'
16:29:40.398 INFO: Load branch configuration (done) | time=3ms
16:29:40.404 DEBUG: Creating module hierarchy
16:29:40.404 DEBUG:   Init module 'x-helloworld-PYTHONdemo'
16:29:40.405 DEBUG:     Base dir: /builds/x/helloworld-pythondemo
16:29:40.405 DEBUG:     Working dir: /builds/x/helloworld-pythondemo/.scannerwork
16:29:40.405 DEBUG:     Module global encoding: UTF-8, default locale: en
16:29:40.473 DEBUG: Available languages:
16:29:40.474 DEBUG:   * Terraform => "terraform"
16:29:40.474 DEBUG:   * CloudFormation => "cloudformation"
16:29:40.474 DEBUG:   * Kubernetes => "kubernetes"
16:29:40.474 DEBUG:   * Docker => "docker"
16:29:40.474 DEBUG:   * PL/SQL => "plsql"
16:29:40.474 DEBUG:   * Scala => "scala"
16:29:40.474 DEBUG:   * C# => "cs"
16:29:40.474 DEBUG:   * Java => "java"
16:29:40.474 DEBUG:   * HTML => "web"
16:29:40.474 DEBUG:   * JSP => "jsp"
16:29:40.474 DEBUG:   * Flex => "flex"
16:29:40.474 DEBUG:   * XML => "xml"
16:29:40.474 DEBUG:   * Text => "text"
16:29:40.474 DEBUG:   * Secrets => "secrets"
16:29:40.474 DEBUG:   * VB.NET => "vbnet"
16:29:40.474 DEBUG:   * Swift => "swift"
16:29:40.474 DEBUG:   * C => "c"
16:29:40.474 DEBUG:   * C++ => "cpp"
16:29:40.474 DEBUG:   * Objective-C => "objc"
16:29:40.474 DEBUG:   * Python => "py"
16:29:40.474 DEBUG:   * Go => "go"
16:29:40.474 DEBUG:   * Kotlin => "kotlin"
16:29:40.475 DEBUG:   * T-SQL => "tsql"
16:29:40.475 DEBUG:   * JavaScript => "js"
16:29:40.475 DEBUG:   * TypeScript => "ts"
16:29:40.475 DEBUG:   * CSS => "css"
16:29:40.475 DEBUG:   * Ruby => "ruby"
16:29:40.475 DEBUG:   * PHP => "php"
16:29:40.475 DEBUG:   * ABAP => "abap"
16:29:40.475 DEBUG:   * YAML => "yaml"
16:29:40.475 DEBUG:   * JSON => "json"
16:29:40.568 INFO: Auto-configuring with CI 'Gitlab CI'
16:29:40.570 INFO: Load quality profiles
16:29:40.603 DEBUG: GET 200 https://sonarqube.url.com/api/qualityprofiles/search.protobuf?project=x-helloworld-PYTHONdemo | time=32ms
16:29:40.616 INFO: Load quality profiles (done) | time=46ms
16:29:40.620 INFO: Load active rules
16:29:42.289 INFO: Load active rules (done) | time=1669ms
16:29:42.294 INFO: Load analysis cache
16:29:42.304 DEBUG: GET 200 https://sonarqube.url.com/api/analysis_cache/get?project=x-helloworld-PYTHONdemo&branch=main | time=10ms
16:29:42.312 INFO: Load analysis cache (1.4 kB) | time=18ms
16:29:42.381 INFO: Branch name: main
16:29:42.397 INFO: Load project repositories
16:29:42.412 DEBUG: GET 200 https://sonarqube.url.com/batch/project.protobuf?key=x-helloworld-PYTHONdemo&branch=main | time=15ms
16:29:42.469 INFO: Load project repositories (done) | time=72ms
16:29:42.485 DEBUG: Will ignore generated code
16:29:42.486 DEBUG: Will ignore generated code
16:29:42.491 INFO: Indexing files...
16:29:42.491 INFO: Project configuration:
16:29:42.491 INFO:   Excluded sources: src/test/*.py, src/test/__init__.py, src/test/test_helloworld.py
16:29:42.492 INFO:   Included tests: src/test/__init__.py, src/test/test_helloworld.py
16:29:42.500 DEBUG: loading config FileBasedConfig[/tmp/jgit/config]
16:29:42.501 DEBUG: readpipe [/usr/bin/git, --version],/usr/bin
16:29:42.572 DEBUG: readpipe may return 'git version 2.39.3'
16:29:42.572 DEBUG: remaining output:
16:29:42.572 DEBUG: readpipe [/usr/bin/git, config, --system, --show-origin, --list, -z],/usr/bin
16:29:42.585 DEBUG: readpipe may return 'null'
16:29:42.585 DEBUG: remaining output:
16:29:42.594 DEBUG: readpipe rc=128
16:29:42.594 DEBUG: Exception caught during execution of command '[/usr/bin/git, config, --system, --show-origin, --list, -z]' in '/usr/bin', return code '128', error message 'fatal: unable to read config file '/etc/gitconfig': No such file or directory
'
16:29:42.595 DEBUG: loading config FileBasedConfig[/home/scanner-cli/.gitconfig]
16:29:42.702 DEBUG: 100 non excluded files in this Git repository
16:29:42.819 DEBUG: 'src/__init__.py' indexed with language 'py'
16:29:42.822 DEBUG: 'src/helloworld.py' indexed with language 'py'
16:29:42.823 DEBUG: 'src/test/__init__.py' indexed as test with language 'py'
16:29:42.824 DEBUG: 'src/test/test_helloworld.py' indexed as test with language 'py'
16:29:42.825 INFO: 4 files indexed
16:29:42.826 INFO: 2 files ignored because of inclusion/exclusion patterns
16:29:42.826 INFO: 0 files ignored because of scm ignore settings
16:29:42.826 INFO: Quality profile for py: Sonar way
16:29:42.827 INFO: ------------- Run sensors on module x-helloworld-PYTHONdemo
16:29:43.001 INFO: Load metrics repository
16:29:43.015 DEBUG: GET 200 https://sonarqube.url.com/api/metrics/search?ps=500&p=1 | time=13ms
16:29:43.071 INFO: Load metrics repository (done) | time=70ms
16:29:46.204 DEBUG: 'Generic Test Executions Report' skipped because one of the required properties is missing
16:29:46.204 DEBUG: 'CFamily' skipped because there is no related file in current project
16:29:46.204 DEBUG: Sensors : C# Project Type Information -> C# Analysis Log -> C# Properties -> HTML -> TextAndSecretsSensor -> VB.NET Project Type Information -> VB.NET Analysis Log -> VB.NET Properties -> Python Sensor -> Cobertura Sensor for Python coverage -> PythonXUnitSensor -> JaCoCo XML Report Importer -> CSS Rules -> ThymeLeaf template sensor -> Python HTML templates processing -> IaC Docker Sensor -> Serverless configuration file sensor -> AWS SAM template file sensor -> AWS SAM Inline template file sensor -> javabugs -> pythonbugs -> JavaSecuritySensor -> CSharpSecuritySensor -> PhpSecuritySensor -> PythonSecuritySensor -> JsSecuritySensor
16:29:46.205 INFO: Sensor C# Project Type Information [csharp]
16:29:46.205 INFO: Sensor C# Project Type Information [csharp] (done) | time=0ms
16:29:46.205 INFO: Sensor C# Analysis Log [csharp]
16:29:46.213 INFO: Sensor C# Analysis Log [csharp] (done) | time=8ms
16:29:46.213 INFO: Sensor C# Properties [csharp]
16:29:46.213 DEBUG: Project 'x-helloworld-PYTHONdemo': No Roslyn issues reports have been found.
16:29:46.213 INFO: Sensor C# Properties [csharp] (done) | time=0ms
16:29:46.213 INFO: Sensor HTML [web]
16:29:46.215 INFO: Sensor HTML [web] (done) | time=1ms
16:29:46.215 INFO: Sensor TextAndSecretsSensor [text]
16:29:46.273 INFO: 4 source files to be analyzed
16:29:46.275 DEBUG: 'src/test/__init__.py' generated metadata as test  with charset 'UTF-8'
16:29:46.276 DEBUG: 'src/__init__.py' generated metadata with charset 'UTF-8'
16:29:46.277 DEBUG: 'src/helloworld.py' generated metadata with charset 'UTF-8'
16:29:46.279 DEBUG: 'src/test/test_helloworld.py' generated metadata as test  with charset 'UTF-8'
16:29:46.283 INFO: 4/4 source files have been analyzed
16:29:46.283 INFO: Sensor TextAndSecretsSensor [text] (done) | time=68ms
16:29:46.283 INFO: Sensor VB.NET Project Type Information [vbnet]
16:29:46.284 INFO: Sensor VB.NET Project Type Information [vbnet] (done) | time=1ms
16:29:46.284 INFO: Sensor VB.NET Analysis Log [vbnet]
16:29:46.291 INFO: Sensor VB.NET Analysis Log [vbnet] (done) | time=7ms
16:29:46.291 INFO: Sensor VB.NET Properties [vbnet]
16:29:46.291 DEBUG: Project 'x-helloworld-PYTHONdemo': No Roslyn issues reports have been found.
16:29:46.291 INFO: Sensor VB.NET Properties [vbnet] (done) | time=0ms
16:29:46.291 INFO: Sensor Python Sensor [python]
16:29:46.305 DEBUG: Input files for indexing: [src/__init__.py, src/helloworld.py]
16:29:46.305 INFO: Starting global symbols computation
16:29:46.306 INFO: 2 source files to be analyzed
16:29:46.691 INFO: 2/2 source files have been analyzed
16:29:46.706 INFO: Starting rules execution
16:29:46.706 INFO: 4 source files to be analyzed
16:29:46.799 DEBUG: Not enough content in 'src/__init__.py' to have CPD blocks, it will not be part of the duplication detection
16:29:47.380 DEBUG: Not enough content in 'src/helloworld.py' to have CPD blocks, it will not be part of the duplication detection
16:29:47.390 DEBUG: Expression NameImpl has been translated to unknown-expression function call.
16:29:47.402 DEBUG: Ignoring call expression at line 8 because it has either unpacking expression or keyword arguments.
16:29:47.402 DEBUG: Expression CallExpressionImpl has been translated to unknown function call.
16:29:47.669 DEBUG: Could not write DBD Java frontend version to cache (key 'pythonbugs:dataVersion', value '1.10.0.3046')
16:29:47.669 DEBUG: Could not write DBD Java frontend version to cache (key 'pythonbugs:dataVersion', value '1.10.0.3046')
16:29:47.669 DEBUG: Could not write DBD Java frontend version to cache (key 'pythonbugs:dataVersion', value '1.10.0.3046')
16:29:47.669 DEBUG: Could not write DBD Java frontend version to cache (key 'pythonbugs:dataVersion', value '1.10.0.3046')
16:29:47.669 DEBUG: Could not write DBD Java frontend version to cache (key 'pythonbugs:dataVersion', value '1.10.0.3046')
16:29:47.669 DEBUG: Could not write DBD Java frontend version to cache (key 'pythonbugs:dataVersion', value '1.10.0.3046')
16:29:47.669 DEBUG: Could not write DBD Java frontend version to cache (key 'pythonbugs:dataVersion', value '1.10.0.3046')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 DEBUG: Could not write Security Python frontend version to cache (key 'pythonsecurity:dataVersion', value '9.9.2.22117')
16:29:47.670 INFO: 4/4 source files have been analyzed
16:29:47.671 INFO: The Python analyzer was able to leverage cached data from previous analyses for 0 out of 4 files. These files were not parsed.
16:29:47.671 INFO: Sensor Python Sensor [python] (done) | time=1380ms
16:29:47.671 INFO: Sensor Cobertura Sensor for Python coverage [python]
16:29:47.671 DEBUG: Using pattern './coverage.xml' to find reports
16:29:47.683 INFO: Python test coverage
16:29:47.684 INFO: Parsing report '/builds/x/helloworld-pythondemo/./coverage.xml'
16:29:47.771 DEBUG: Saving coverage measures for file 'src/test/__init__.py'
16:29:47.772 DEBUG: Saving coverage measures for file 'src/__init__.py'
16:29:47.773 DEBUG: Saving coverage measures for file 'src/helloworld.py'
16:29:47.774 DEBUG: Saving coverage measures for file 'src/test/test_helloworld.py'
16:29:47.774 INFO: Sensor Cobertura Sensor for Python coverage [python] (done) | time=103ms
16:29:48.294 INFO: Analyzing 490 ucfgs to detect vulnerabilities.
16:29:48.387 ERROR: Symbolic analysis was interrupted because of an unexpected error.
java.security.ProviderException: update() failed
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11Cipher.implUpdate(P11Cipher.java:668)
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11Cipher.engineUpdate(P11Cipher.java:553)
	at java.base/javax.crypto.Cipher.update(Cipher.java:1985)
	at java.base/javax.crypto.CipherInputStream.getMoreData(CipherInputStream.java:158)
	at java.base/javax.crypto.CipherInputStream.read(CipherInputStream.java:261)
	at java.base/sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:270)
	at java.base/sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:313)
	at java.base/sun.nio.cs.StreamDecoder.read(StreamDecoder.java:188)
	at java.base/java.io.InputStreamReader.read(InputStreamReader.java:177)
	at com.sonar.security.config.D.B(na:687)
	at com.sonar.security.config.D.A(na:2346)
	at com.sonar.security.config.A.E.A(na:2438)
	at com.sonar.security.config.A.E.A(na:2297)
	at com.sonar.security.config.B.A(na:2373)
	at com.sonar.security.config.B.E(na:1965)
	at com.sonar.security.config.B.A(na:2919)
	at com.sonar.security.E.executeChecks(na:3418)
	at com.sonar.security.E.executeChecks(na:2924)
	at com.sonar.security.E.execute(na:2031)
	at org.sonar.scanner.sensor.AbstractSensorWrapper.analyse(AbstractSensorWrapper.java:64)
	at org.sonar.scanner.sensor.ModuleSensorsExecutor.execute(ModuleSensorsExecutor.java:88)
	at org.sonar.scanner.sensor.ModuleSensorsExecutor.execute(ModuleSensorsExecutor.java:64)
	at org.sonar.scanner.scan.SpringModuleScanContainer.doAfterStart(SpringModuleScanContainer.java:82)
	at org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:188)
	at org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:167)
	at org.sonar.scanner.scan.SpringProjectScanContainer.scan(SpringProjectScanContainer.java:403)
	at org.sonar.scanner.scan.SpringProjectScanContainer.scanRecursively(SpringProjectScanContainer.java:399)
	at org.sonar.scanner.scan.SpringProjectScanContainer.doAfterStart(SpringProjectScanContainer.java:368)
	at org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:188)
	at org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:167)
	at org.sonar.scanner.bootstrap.SpringGlobalContainer.doAfterStart(SpringGlobalContainer.java:137)
	at org.sonar.core.platform.SpringComponentContainer.startComponents(SpringComponentContainer.java:188)
	at org.sonar.core.platform.SpringComponentContainer.execute(SpringComponentContainer.java:167)
	at org.sonar.batch.bootstrapper.Batch.doExecute(Batch.java:72)
	at org.sonar.batch.bootstrapper.Batch.execute(Batch.java:66)
	at org.sonarsource.scanner.api.internal.batch.BatchIsolatedLauncher.execute(BatchIsolatedLauncher.java:46)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:77)
	at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.base/java.lang.reflect.Method.invoke(Method.java:568)
	at org.sonarsource.scanner.api.internal.IsolatedLauncherProxy.invoke(IsolatedLauncherProxy.java:60)
	at jdk.proxy1/jdk.proxy1.$Proxy0.execute(Unknown Source)
	at org.sonarsource.scanner.api.EmbeddedScanner.doExecute(EmbeddedScanner.java:189)
	at org.sonarsource.scanner.api.EmbeddedScanner.execute(EmbeddedScanner.java:138)
	at org.sonarsource.scanner.cli.Main.execute(Main.java:126)
	at org.sonarsource.scanner.cli.Main.execute(Main.java:81)
	at org.sonarsource.scanner.cli.Main.main(Main.java:62)
Caused by: sun.security.pkcs11.wrapper.PKCS11Exception: CKR_ENCRYPTED_DATA_LEN_RANGE
	at jdk.crypto.cryptoki/sun.security.pkcs11.wrapper.PKCS11.C_DecryptUpdate(Native Method)
	at jdk.crypto.cryptoki/sun.security.pkcs11.P11Cipher.implUpdate(P11Cipher.java:648)
	... 46 common frames omitted
16:29:48.387 INFO: Sensor PythonSecuritySensor [security] (done) | time=399ms
16:29:48.387 INFO: Sensor JsSecuritySensor [security]
16:29:48.387 INFO: Reading type hierarchy from: /builds/x/helloworld-pythondemo/.scannerwork/ucfg2/js
16:29:48.387 INFO: Read 0 type definitions
16:29:48.387 INFO: No UCFGs have been included for analysis.
16:29:48.387 INFO: Sensor JsSecuritySensor [security] (done) | time=0ms
16:29:48.390 INFO: ------------- Run sensors on project
16:29:48.479 DEBUG: 'Generic Coverage Report' skipped because one of the required properties is missing
16:29:48.479 DEBUG: 'C#' skipped because there is no related file in current project
16:29:48.479 DEBUG: 'C# File Caching Sensor' skipped because there is no related file in current project
16:29:48.479 DEBUG: 'C# Tests Coverage Report Import' skipped because there is no related file in current project
16:29:48.480 DEBUG: '[Deprecated] C# Integration Tests Coverage Report Import' skipped because there is no related file in current project
16:29:48.480 DEBUG: 'C# Unit Test Results Import' skipped because there is no related file in current project
16:29:48.480 DEBUG: 'VB.NET' skipped because there is no related file in current project
16:29:48.480 DEBUG: 'VB.NET File Caching Sensor' skipped because there is no related file in current project
16:29:48.480 DEBUG: 'VB.NET Tests Coverage Report Import' skipped because there is no related file in current project
16:29:48.480 DEBUG: '[Deprecated] VB.NET Integration Tests Coverage Report Import' skipped because there is no related file in current project
16:29:48.480 DEBUG: 'VB.NET Unit Test Results Import' skipped because there is no related file in current project
16:29:48.480 DEBUG: 'Java CPD Block Indexer' skipped because there is no related file in current project
16:29:48.481 DEBUG: Sensors : Analysis Warnings import -> Zero Coverage Sensor
16:29:48.481 INFO: Sensor Analysis Warnings import [csharp]
16:29:48.481 INFO: Sensor Analysis Warnings import [csharp] (done) | time=0ms
16:29:48.481 INFO: Sensor Zero Coverage Sensor
16:29:48.481 INFO: Sensor Zero Coverage Sensor (done) | time=0ms
16:29:48.485 INFO: CPD Executor 2 files had no CPD blocks
16:29:48.486 INFO: CPD Executor Calculating CPD for 0 files
16:29:48.486 INFO: CPD Executor CPD calculation finished (done) | time=0ms
16:29:48.491 DEBUG: SCM revision ID '804b6850c6708f81f15f040634ef2a4ba72ebb09'
16:29:48.590 INFO: Load New Code definition
16:29:48.603 DEBUG: GET 200 https://sonarqube.url.com/api/new_code_periods/show.protobuf?project=x-helloworld-PYTHONdemo&branch=main | time=13ms
16:29:48.605 INFO: Load New Code definition (done) | time=15ms
16:29:48.607 INFO: Analysis report generated in 120ms, dir size=200.3 kB
16:29:48.616 INFO: Analysis report compressed in 9ms, zip size=29.5 kB
16:29:48.616 INFO: Analysis report generated in /builds/x/helloworld-pythondemo/.scannerwork/scanner-report
16:29:48.616 DEBUG: Upload report
16:29:48.644 DEBUG: POST 200 https://sonarqube.url.com/api/ce/submit?projectKey=x-helloworld-PYTHONdemo&characteristic=branch%3Dmain&characteristic=branchType%3DBRANCH | time=28ms
16:29:48.668 INFO: Analysis report uploaded in 52ms
16:29:48.669 DEBUG: Report metadata written to /builds/x/helloworld-pythondemo/.scannerwork/report-task.txt
16:29:48.669 INFO: ------------- Check Quality Gate status
16:29:48.669 INFO: Waiting for the analysis report to be processed (max 300s)
16:29:48.682 DEBUG: GET 200 https://sonarqube.url.com/api/ce/task?id=AY2OtCrUvmz5quFHaTXW | time=13ms
16:29:53.701 DEBUG: GET 200 https://sonarqube.url.com/api/ce/task?id=AY2OtCrUvmz5quFHaTXW | time=16ms
16:29:53.717 DEBUG: GET 200 https://sonarqube.url.com/api/qualitygates/project_status?analysisId=AY2OtCtKyKOQbRC43S46 | time=15ms
16:29:53.730 INFO: QUALITY GATE STATUS: PASSED - View details on https://sonarqube.url.com/dashboard?id=x-helloworld-PYTHONdemo&branch=main
16:29:53.732 DEBUG: Post-jobs : 
16:29:53.735 INFO: Analysis total time: 14.339 s
16:29:53.736 INFO: ------------------------------------------------------------------------
16:29:53.736 INFO: EXECUTION SUCCESS
16:29:53.736 INFO: ------------------------------------------------------------------------
16:29:53.736 INFO: Total time: 20.680s
16:29:53.826 INFO: Final Memory: 34M/99M
16:29:53.826 INFO: ------------------------------------------------------------------------

czurn · February 15, 2024, 7:11am

Hello Jacob,

Thanks for reporting this issue and providing the logs.
I will look into it and get back to you.

Best,
-Christophe

czurn · February 26, 2024, 9:45am

Hello Jacob,

I have tried to investigate the error you’ve reported, and I have not been able to reproduce such an issue so far.
I did a Python analysis with the same scanner, SonarQube, and JVM versions, and the analysis was completed without error on my side.

To help us better understand what could cause this, it would be helpful if you could answer the following questions:

in which environment (OS type and version) was this error raised?
is this error raised locally or in the CI?
are you able to reproduce this problem locally (or in another environment) and if yes, what are the steps you’ve taken to reach this state?

Thanks.

Best,
-Christophe

dws_guy · February 26, 2024, 2:59pm

Christophe,

This issue occurs within our gitlab CI environment, while utilizing the below IronBank sonar-scanner-cli image to execute the scan: registry1.dso.mil/ironbank/sonarsource/sonar-scanner-cli:5.0. This image has a base of redhat/openjdk/openjdk17:1.17.

I have not attempted to run scans locally, and the issue only occurs with the above Ironbank image executed by my Gitlab CI pipeline. I have tested sonar-scanner-cli versions 4.8 and 5.0 with the same results.

My pipeline passes the following to the cli:
- sonar-scanner -Dsonar.qualitygate.wait=true -Dsonar.projectKey=${PROJ_KEY} -Dsonar.exclusions=${EXCLUDE} -Dsonar.python.coverage.reportPaths=${PYTHON_COVERAGE_REPORT} -Dsonar.report.export.path=sonarqube-report2.json 2>&1 | tee sonaroutput.txt || exit_code=$?

jesseborden · April 26, 2024, 12:24pm

We have the same issue. It is not with the ironbank container for us yet, but the way that the openjdk is installed on a server and container using the same rpm install method in RedHat/UBI 8.9. Is there a solution for this? This is a FIPS enabled environment. The error is identical.

Tried passing in:
JAVA_OPTS=“-Dcom.redhat.fips=false” multiple different ways. Did not work, but I think it may be related to that.

Reviewing debug logs in another environment set up the same I see this:
java.security.NoSuchAlgorithmException: PBKDF2WithHmacSHA256 SecretKeyFactory not available

czurn · April 29, 2024, 8:23am

Hello Jesse,

Thanks for your message, and the information you provided.

This is a FIPS enabled environment. The error is identical.
Tried passing in:
JAVA_OPTS=“-Dcom.redhat.fips=false” multiple different ways. Did not work, but I think it may be related to that.

Indeed, this could definitely be related to the problem, as SonarQube is not compatible with an environment with FIPS enabled.

Reading your post reminded me of this older post related to FIPS. Could you try to disable FIPS on both the host and the container as mentioned there?

@dws_guy Was/Is FIPS mode also enabled on the containers/machines you are running the analysis on?