2021-02-15T08:16:27.8849848Z ##[section]Starting: Run Code Analysis 2021-02-15T08:16:27.8856173Z ============================================================================== 2021-02-15T08:16:27.8856536Z Task : Run Code Analysis 2021-02-15T08:16:27.8856902Z Description : Run scanner and upload the results to the SonarCloud server. 2021-02-15T08:16:27.8857244Z Version : 1.19.0 2021-02-15T08:16:27.8857492Z Author : sonarsource 2021-02-15T08:16:27.8858141Z Help : Version: 1.19.0. This task is not needed for Maven and Gradle projects since the scanner should be run as part of the build. [More Information](https://sonarcloud.io/documentation/analysis/scan/sonarscanner-for-azure-devops/) 2021-02-15T08:16:27.8858842Z ============================================================================== 2021-02-15T08:16:28.2613395Z [command]/__w/_tasks/SonarCloudAnalyze_ce096e50-6155-4de8-8800-4221aaeed4a1/1.19.0/sonar-scanner/bin/sonar-scanner 2021-02-15T08:16:28.3511712Z INFO: Scanner configuration file: /__w/_tasks/SonarCloudAnalyze_ce096e50-6155-4de8-8800-4221aaeed4a1/1.19.0/sonar-scanner/conf/sonar-scanner.properties 2021-02-15T08:16:28.3537685Z INFO: Project root configuration file: NONE 2021-02-15T08:16:28.3748745Z INFO: SonarScanner 4.4.0.2170 2021-02-15T08:16:28.3755996Z INFO: Java 11.0.10 Ubuntu (64-bit) 2021-02-15T08:16:28.3756600Z INFO: Linux 5.4.0-1039-azure amd64 2021-02-15T08:16:28.6867137Z INFO: User cache: /home/vsts_azpcontainer/.sonar/cache 2021-02-15T08:16:29.7763657Z INFO: Scanner configuration file: /__w/_tasks/SonarCloudAnalyze_ce096e50-6155-4de8-8800-4221aaeed4a1/1.19.0/sonar-scanner/conf/sonar-scanner.properties 2021-02-15T08:16:29.7771253Z INFO: Project root configuration file: NONE 2021-02-15T08:16:29.7783165Z INFO: Analyzing on SonarCloud 2021-02-15T08:16:29.7789373Z INFO: Default locale: "en_US", source code encoding: "US-ASCII" (analysis is platform dependent) 2021-02-15T08:16:30.2349281Z INFO: Load global settings 2021-02-15T08:16:30.4083033Z INFO: Load global settings (done) | time=174ms 2021-02-15T08:16:30.4144923Z INFO: Server id: 1BD809FA-AWHW8ct9-T_TB3XqouNu 2021-02-15T08:16:30.4199683Z INFO: User cache: /home/vsts_azpcontainer/.sonar/cache 2021-02-15T08:16:30.4227079Z INFO: Load/download plugins 2021-02-15T08:16:30.4230778Z INFO: Load plugins index 2021-02-15T08:16:30.4855982Z INFO: Load plugins index (done) | time=62ms 2021-02-15T08:16:49.4121007Z INFO: Load/download plugins (done) | time=18989ms 2021-02-15T08:16:49.7574800Z INFO: Loaded core extensions: developer-scanner 2021-02-15T08:16:50.0052752Z INFO: JavaScript/TypeScript frontend is enabled 2021-02-15T08:16:50.2032289Z INFO: Found an active CI vendor: 'Azure DevOps' 2021-02-15T08:16:50.2124775Z INFO: Load project settings for component key: 'XXXXXXXXXXXXX' 2021-02-15T08:16:50.2357730Z INFO: Load project settings for component key: 'XXXXXXXXXXXXX' (done) | time=23ms 2021-02-15T08:16:50.2394646Z INFO: Process project properties 2021-02-15T08:16:50.2460265Z INFO: Execute project builders 2021-02-15T08:16:50.2472198Z INFO: Execute project builders (done) | time=1ms 2021-02-15T08:16:50.2491436Z INFO: Project key: XXXXXXXXXXXXX 2021-02-15T08:16:50.2497267Z INFO: Base dir: /__w/1/s 2021-02-15T08:16:50.2497693Z INFO: Working dir: /__w/1/s/.scannerwork 2021-02-15T08:16:50.3893920Z INFO: Load project branches 2021-02-15T08:16:50.4229110Z INFO: Load project branches (done) | time=34ms 2021-02-15T08:16:50.4248635Z INFO: Check ALM binding of project 'XXXXXXXXXXXXX' 2021-02-15T08:16:50.4412457Z INFO: Detected project binding: NOT_BOUND 2021-02-15T08:16:50.4419259Z INFO: Check ALM binding of project 'XXXXXXXXXXXXX' (done) | time=17ms 2021-02-15T08:16:50.4425317Z INFO: Load project pull requests 2021-02-15T08:16:50.4691825Z INFO: Load project pull requests (done) | time=26ms 2021-02-15T08:16:50.4772158Z INFO: Load branch configuration 2021-02-15T08:16:50.4828106Z INFO: Load branch configuration (done) | time=3ms 2021-02-15T08:16:50.5143311Z INFO: Load quality profiles 2021-02-15T08:16:50.5824434Z INFO: Load quality profiles (done) | time=68ms 2021-02-15T08:16:50.5866263Z INFO: Load active rules 2021-02-15T08:16:51.7916364Z INFO: Load active rules (done) | time=1204ms 2021-02-15T08:16:51.8146923Z INFO: Organization key: illimitybank 2021-02-15T08:16:51.8163437Z INFO: Branch name: feature/az-pipe, type: short-lived 2021-02-15T08:16:51.8287514Z INFO: SCM collecting changed files in the branch 2021-02-15T08:16:52.0401555Z WARN: No merge base found between HEAD and refs/remotes/origin/master 2021-02-15T08:16:52.0496885Z INFO: SCM collecting changed files in the branch (done) | time=221ms 2021-02-15T08:16:52.0827726Z INFO: Indexing files... 2021-02-15T08:16:52.0842177Z INFO: Project configuration: 2021-02-15T08:16:52.0842892Z INFO: Excluded sources: **/*.java, apps/portal/public/**, apps/libery/** 2021-02-15T08:16:52.1996422Z WARN: File '/__w/1/s/dc' is ignored. It is a symbolic link targeting a file not located in project basedir. 2021-02-15T08:16:52.2993367Z INFO: Load project repositories 2021-02-15T08:16:52.3453632Z INFO: Load project repositories (done) | time=46ms 2021-02-15T08:16:52.5164804Z WARN: Invalid character encountered in file /__w/1/s/tests/CRMGateway/TrasformaEventoSorgente/Application/Service/Transformer/TrasformaEventoSorgenteInEntitaCRMTest.php at line 143 for encoding US-ASCII. Please fix file content or configure the encoding to be used using property 'sonar.sourceEncoding'. 2021-02-15T08:16:52.5254913Z INFO: 100 files indexed 2021-02-15T08:16:52.5266711Z INFO: 0 files ignored because of inclusion/exclusion patterns 2021-02-15T08:16:52.5267632Z INFO: 71 files ignored because of scm ignore settings 2021-02-15T08:16:52.5288418Z INFO: Quality profile for js: Sonar way 2021-02-15T08:16:52.5289495Z INFO: Quality profile for php: Sonar way 2021-02-15T08:16:52.5289932Z INFO: Quality profile for xml: Sonar way 2021-02-15T08:16:52.5895420Z INFO: ------------- Run sensors on module Neprix-crm-gateway 2021-02-15T08:16:52.6894468Z INFO: JavaScript/TypeScript frontend is enabled 2021-02-15T08:16:52.7108630Z INFO: Load metrics repository 2021-02-15T08:16:52.7424008Z INFO: Load metrics repository (done) | time=31ms 2021-02-15T08:16:54.6170579Z INFO: Sensor SonarCSS Rules [cssfamily] 2021-02-15T08:16:55.7872158Z INFO: 44 source files to be analyzed 2021-02-15T08:16:56.2678265Z INFO: 44/44 source files have been analyzed 2021-02-15T08:16:56.2682869Z INFO: Sensor SonarCSS Rules [cssfamily] (done) | time=1651ms 2021-02-15T08:16:56.2689922Z INFO: Sensor C# Properties [csharp] 2021-02-15T08:16:56.2702972Z INFO: Sensor C# Properties [csharp] (done) | time=1ms 2021-02-15T08:16:56.2714046Z INFO: Sensor JavaXmlSensor [java] 2021-02-15T08:16:56.2739151Z INFO: 1 source files to be analyzed 2021-02-15T08:16:56.6280494Z INFO: Sensor JavaXmlSensor [java] (done) | time=345ms 2021-02-15T08:16:56.6285431Z INFO: 1/1 source files have been analyzed 2021-02-15T08:16:56.6294426Z INFO: Sensor HTML [web] 2021-02-15T08:16:56.7324728Z INFO: Sensor HTML [web] (done) | time=103ms 2021-02-15T08:16:56.7331247Z INFO: Sensor XML Sensor [xml] 2021-02-15T08:16:56.7356739Z INFO: 1 source files to be analyzed 2021-02-15T08:16:57.1997246Z INFO: Sensor XML Sensor [xml] (done) | time=462ms 2021-02-15T08:16:57.1997774Z INFO: Sensor VB.NET Properties [vbnet] 2021-02-15T08:16:57.1998208Z INFO: Sensor VB.NET Properties [vbnet] (done) | time=0ms 2021-02-15T08:16:57.1998644Z INFO: Sensor JaCoCo XML Report Importer [jacoco] 2021-02-15T08:16:57.2000083Z INFO: 'sonar.coverage.jacoco.xmlReportPaths' is not defined. Using default locations: target/site/jacoco/jacoco.xml,target/site/jacoco-it/jacoco.xml,build/reports/jacoco/test/jacocoTestReport.xml 2021-02-15T08:16:57.2001142Z INFO: No report imported, no coverage information will be imported by JaCoCo XML Report Importer 2021-02-15T08:16:57.2001653Z INFO: Sensor JaCoCo XML Report Importer [jacoco] (done) | time=2ms 2021-02-15T08:16:57.2002096Z INFO: Sensor JavaScript analysis [javascript] 2021-02-15T08:16:57.2013206Z INFO: 1/1 source files have been analyzed 2021-02-15T08:16:58.4423104Z INFO: Deploying custom rules bundle jar:file:/home/vsts_azpcontainer/.sonar/cache/99f979961a8bcba2da5621779e2ff8c0/sonar-securityjsfrontend-plugin.jar!/js-vulnerabilities-rules-1.0.0.tgz to /__w/1/s/.scannerwork/.sonartmp/17072774903185615088 2021-02-15T08:16:59.5725511Z INFO: 1 source files to be analyzed 2021-02-15T08:16:59.6039872Z INFO: Version of TypeScript used during analysis: 3.8.3 2021-02-15T08:17:00.4319009Z INFO: 1/1 source files have been analyzed 2021-02-15T08:17:00.4319621Z INFO: Sensor JavaScript analysis [javascript] (done) | time=3232ms 2021-02-15T08:17:00.4320176Z INFO: Sensor ThymeLeaf template sensor [securityjavafrontend] 2021-02-15T08:17:00.4332185Z INFO: Sensor ThymeLeaf template sensor [securityjavafrontend] (done) | time=1ms 2021-02-15T08:17:00.4332738Z INFO: Sensor PHP sensor [php] 2021-02-15T08:17:00.4713647Z INFO: Starting PHP symbol indexer 2021-02-15T08:17:00.4722550Z INFO: 44 source files to be analyzed 2021-02-15T08:17:01.0283334Z INFO: 44/44 source files have been analyzed 2021-02-15T08:17:01.0454601Z INFO: Starting PHP rules 2021-02-15T08:17:01.0455127Z INFO: 44 source files to be analyzed 2021-02-15T08:17:02.6983130Z INFO: 44/44 source files have been analyzed 2021-02-15T08:17:02.7024269Z INFO: No PHPUnit test report provided (see 'sonar.php.tests.reportPath' property) 2021-02-15T08:17:02.7040580Z INFO: No PHPUnit coverage reports provided (see 'sonar.php.coverage.reportPaths' property) 2021-02-15T08:17:02.7041161Z INFO: Sensor PHP sensor [php] (done) | time=2271ms 2021-02-15T08:17:02.7041604Z INFO: Sensor Analyzer for "php.ini" files [php] 2021-02-15T08:17:02.7101766Z INFO: Sensor Analyzer for "php.ini" files [php] (done) | time=6ms 2021-02-15T08:17:02.7102354Z INFO: Sensor JavaSecuritySensor [security] 2021-02-15T08:17:02.7109325Z INFO: Reading type hierarchy from: /__w/1/s/.scannerwork/ucfg2/java 2021-02-15T08:17:02.7109884Z INFO: Read 0 type definitions 2021-02-15T08:17:02.7128289Z INFO: Reading UCFGs from: /__w/1/s/.scannerwork/ucfg2/java 2021-02-15T08:17:02.7142012Z INFO: No UCFGs have been included for analysis. 2021-02-15T08:17:02.7142541Z INFO: Sensor JavaSecuritySensor [security] (done) | time=4ms 2021-02-15T08:17:02.7143013Z INFO: Sensor CSharpSecuritySensor [security] 2021-02-15T08:17:02.7153215Z INFO: Reading type hierarchy from: /__w/1/s/ucfg_cs2 2021-02-15T08:17:02.7184008Z INFO: Read 0 type definitions 2021-02-15T08:17:02.7189371Z INFO: Reading UCFGs from: /__w/1/s/ucfg_cs2 2021-02-15T08:17:02.7189967Z INFO: No UCFGs have been included for analysis. 2021-02-15T08:17:02.7190410Z INFO: Sensor CSharpSecuritySensor [security] (done) | time=4ms 2021-02-15T08:17:02.7190900Z INFO: Sensor PhpSecuritySensor [security] 2021-02-15T08:17:02.7191336Z INFO: Reading type hierarchy from: /__w/1/s/.scannerwork/ucfg2/php 2021-02-15T08:17:02.8044462Z INFO: Read 255 type definitions 2021-02-15T08:17:02.8098336Z INFO: Reading UCFGs from: /__w/1/s/.scannerwork/ucfg2/php 2021-02-15T08:17:02.9481290Z INFO: 08:17:02.946692 Running Tarjan on 1579 nodes 2021-02-15T08:17:02.9533903Z INFO: 08:17:02.952646 Tarjan found 1579 components 2021-02-15T08:17:02.9600103Z INFO: 08:17:02.959305 Variable type analysis: done 2021-02-15T08:17:02.9620628Z INFO: 08:17:02.961527 Building Runtime Type propagation graph 2021-02-15T08:17:02.9725450Z INFO: 08:17:02.971933 Running Tarjan on 1652 nodes 2021-02-15T08:17:02.9742361Z INFO: 08:17:02.973748 Tarjan found 1651 components 2021-02-15T08:17:02.9795832Z INFO: 08:17:02.979094 Variable type analysis: done 2021-02-15T08:17:02.9803126Z INFO: 08:17:02.979778 Building Runtime Type propagation graph 2021-02-15T08:17:02.9872260Z INFO: 08:17:02.98664 Running Tarjan on 1630 nodes 2021-02-15T08:17:02.9887719Z INFO: 08:17:02.98827 Tarjan found 1622 components 2021-02-15T08:17:02.9924650Z INFO: 08:17:02.991932 Variable type analysis: done 2021-02-15T08:17:02.9938227Z INFO: Analyzing 653 ucfgs to detect vulnerabilities. 2021-02-15T08:17:03.3434469Z INFO: All rules entrypoints : 0 Retained UCFGs : 0 2021-02-15T08:17:03.3457809Z INFO: rule: S5146, entrypoints: 0 2021-02-15T08:17:03.3458293Z INFO: rule: S5146 done 2021-02-15T08:17:03.3474117Z INFO: rule: S5131, entrypoints: 0 2021-02-15T08:17:03.3474518Z INFO: rule: S5131 done 2021-02-15T08:17:03.3480499Z INFO: rule: S2091, entrypoints: 0 2021-02-15T08:17:03.3480901Z INFO: rule: S2091 done 2021-02-15T08:17:03.3486955Z INFO: rule: S2076, entrypoints: 0 2021-02-15T08:17:03.3487331Z INFO: rule: S2076 done 2021-02-15T08:17:03.3491819Z INFO: rule: S2631, entrypoints: 0 2021-02-15T08:17:03.3496543Z INFO: rule: S2631 done 2021-02-15T08:17:03.3501209Z INFO: rule: S2083, entrypoints: 0 2021-02-15T08:17:03.3505834Z INFO: rule: S2083 done 2021-02-15T08:17:03.3511751Z INFO: rule: S2078, entrypoints: 0 2021-02-15T08:17:03.3512151Z INFO: rule: S2078 done 2021-02-15T08:17:03.3517986Z INFO: rule: S3649, entrypoints: 0 2021-02-15T08:17:03.3518380Z INFO: rule: S3649 done 2021-02-15T08:17:03.3528006Z INFO: rule: S5135, entrypoints: 0 2021-02-15T08:17:03.3534503Z INFO: rule: S5135 done 2021-02-15T08:17:03.3534908Z INFO: rule: S5167, entrypoints: 0 2021-02-15T08:17:03.3552939Z INFO: rule: S5167 done 2021-02-15T08:17:03.3553376Z INFO: rule: S5144, entrypoints: 0 2021-02-15T08:17:03.3553730Z INFO: rule: S5144 done 2021-02-15T08:17:03.3554092Z INFO: rule: S5145, entrypoints: 0 2021-02-15T08:17:03.3554456Z INFO: rule: S5145 done 2021-02-15T08:17:03.3554817Z INFO: rule: S5335, entrypoints: 0 2021-02-15T08:17:03.3555165Z INFO: rule: S5335 done 2021-02-15T08:17:03.3555527Z INFO: rule: S5334, entrypoints: 0 2021-02-15T08:17:03.3555887Z INFO: rule: S5334 done 2021-02-15T08:17:03.3556283Z INFO: Sensor PhpSecuritySensor [security] (done) | time=636ms 2021-02-15T08:17:03.3556712Z INFO: Sensor PythonSecuritySensor [security] 2021-02-15T08:17:03.3557172Z INFO: Reading type hierarchy from: /__w/1/s/.scannerwork/ucfg2/python 2021-02-15T08:17:03.3557601Z INFO: Read 0 type definitions 2021-02-15T08:17:03.3558019Z INFO: Reading UCFGs from: /__w/1/s/.scannerwork/ucfg2/python 2021-02-15T08:17:03.3558447Z INFO: No UCFGs have been included for analysis. 2021-02-15T08:17:03.3558882Z INFO: Sensor PythonSecuritySensor [security] (done) | time=0ms 2021-02-15T08:17:03.3571389Z INFO: Sensor JsSecuritySensor [security] 2021-02-15T08:17:03.3576680Z INFO: Reading type hierarchy from: /__w/1/s/.scannerwork/ucfg2/js 2021-02-15T08:17:03.3583565Z INFO: Read 0 type definitions 2021-02-15T08:17:03.3588327Z INFO: Reading UCFGs from: /__w/1/s/.scannerwork/ucfg2/js 2021-02-15T08:17:03.3640707Z INFO: 08:17:03.363487 Building Runtime Type propagation graph 2021-02-15T08:17:03.3653513Z INFO: 08:17:03.364582 Running Tarjan on 10 nodes 2021-02-15T08:17:03.3654043Z INFO: 08:17:03.364845 Tarjan found 10 components 2021-02-15T08:17:03.3676094Z INFO: 08:17:03.365206 Variable type analysis: done 2021-02-15T08:17:03.3681552Z INFO: 08:17:03.366488 Building Runtime Type propagation graph 2021-02-15T08:17:03.3682036Z INFO: 08:17:03.366824 Running Tarjan on 10 nodes 2021-02-15T08:17:03.3682472Z INFO: 08:17:03.367076 Tarjan found 10 components 2021-02-15T08:17:03.3682955Z INFO: 08:17:03.367359 Variable type analysis: done 2021-02-15T08:17:03.3683400Z INFO: Analyzing 2 ucfgs to detect vulnerabilities. 2021-02-15T08:17:03.3855827Z INFO: rule: S5334, entrypoints: 1 2021-02-15T08:17:03.3856330Z INFO: Running symbolic analysis 2021-02-15T08:17:03.4894008Z INFO: rule: S5334 done 2021-02-15T08:17:03.4894472Z INFO: rule: S2083, entrypoints: 1 2021-02-15T08:17:03.4894840Z INFO: Running symbolic analysis 2021-02-15T08:17:03.4964919Z INFO: rule: S2083 done 2021-02-15T08:17:03.4965411Z INFO: rule: S5147, entrypoints: 1 2021-02-15T08:17:03.4972230Z INFO: Running symbolic analysis 2021-02-15T08:17:03.5033989Z INFO: rule: S5147 done 2021-02-15T08:17:03.5039068Z INFO: rule: S5131, entrypoints: 1 2021-02-15T08:17:03.5043861Z INFO: Running symbolic analysis 2021-02-15T08:17:03.5102119Z INFO: rule: S5131 done 2021-02-15T08:17:03.5102549Z INFO: rule: S2631, entrypoints: 1 2021-02-15T08:17:03.5102942Z INFO: Running symbolic analysis 2021-02-15T08:17:03.5170925Z INFO: rule: S2631 done 2021-02-15T08:17:03.5171337Z INFO: rule: S3649, entrypoints: 1 2021-02-15T08:17:03.5171723Z INFO: Running symbolic analysis 2021-02-15T08:17:03.5226565Z INFO: rule: S3649 done 2021-02-15T08:17:03.5227014Z INFO: rule: S6096, entrypoints: 1 2021-02-15T08:17:03.5227385Z INFO: Running symbolic analysis 2021-02-15T08:17:03.5433016Z INFO: rule: S6096 done 2021-02-15T08:17:03.5434058Z INFO: Sensor JsSecuritySensor [security] (done) | time=181ms 2021-02-15T08:17:03.5435331Z INFO: ------------- Run sensors on project 2021-02-15T08:17:03.5624291Z INFO: Sensor Zero Coverage Sensor 2021-02-15T08:17:03.6057318Z INFO: Sensor Zero Coverage Sensor (done) | time=41ms 2021-02-15T08:17:03.6058358Z INFO: SCM Publisher SCM provider for this project is: git 2021-02-15T08:17:03.6059056Z INFO: SCM Publisher 47 source files to be analyzed 2021-02-15T08:17:04.1075775Z INFO: SCM Publisher 47/47 source files have been analyzed (done) | time=499ms 2021-02-15T08:17:04.1233934Z INFO: CPD Executor 10 files had no CPD blocks 2021-02-15T08:17:04.1238720Z INFO: CPD Executor Calculating CPD for 35 files 2021-02-15T08:17:04.1510722Z INFO: CPD Executor CPD calculation finished (done) | time=27ms 2021-02-15T08:17:04.2221431Z INFO: SCM writing changed lines 2021-02-15T08:17:04.2304882Z WARN: No merge base found between HEAD and refs/remotes/origin/master 2021-02-15T08:17:04.2315839Z INFO: SCM writing changed lines (done) | time=10ms 2021-02-15T08:17:04.3566026Z INFO: Analysis report generated in 198ms, dir size=290 KB 2021-02-15T08:17:04.4680943Z INFO: Analysis report compressed in 111ms, zip size=130 KB 2021-02-15T08:17:04.5644479Z INFO: Analysis report uploaded in 96ms 2021-02-15T08:17:04.5913207Z INFO: ANALYSIS SUCCESSFUL, you can find the results at: https://sonarcloud.io/dashboard?id=XXXXXXXXXXXXX&branch=feature%2Faz-pipe&resolved=false 2021-02-15T08:17:04.5914062Z INFO: Note that you will be able to access the updated dashboard once the server has processed the submitted analysis report 2021-02-15T08:17:04.5929536Z INFO: More about the report processing at https://sonarcloud.io/api/ce/task?id=AXekw7IEmn1JqxZ2rl_b 2021-02-15T08:17:09.8908507Z INFO: Analysis total time: 20.133 s 2021-02-15T08:17:09.8934935Z INFO: ------------------------------------------------------------------------ 2021-02-15T08:17:09.8935516Z INFO: EXECUTION SUCCESS 2021-02-15T08:17:09.8936157Z INFO: ------------------------------------------------------------------------ 2021-02-15T08:17:09.8936599Z INFO: Total time: 41.552s 2021-02-15T08:17:10.0039623Z INFO: Final Memory: 34M/120M 2021-02-15T08:17:10.0040850Z INFO: ------------------------------------------------------------------------ 2021-02-15T08:17:10.0415039Z ##[section]Finishing: Run Code Analysis