Skip to content
Snippets Groups Projects

secret_detection

Passed Started by
Mark Beierl
@beierlm
1Running with gitlab-runner 17.1.0 (fe451d5a)
2 on osm-cicd-10 S9P1hQmo, system ID: s_0c544012072a
3Resolving secrets
4 Preparing the "docker" executor 00:03
5Using Docker executor with image registry.gitlab.com/security-products/secrets:6 ...
6Pulling docker image registry.gitlab.com/security-products/secrets:6 ...
7Using docker image sha256:5b2d7c5beeae28b0006cad45fd782414140644235c803d90429b862cf2310dd5 for registry.gitlab.com/security-products/secrets:6 with digest registry.gitlab.com/security-products/secrets@sha256:35f2839d838a50b318187c44bcead2994493a5b45eb5a9fb7fe77afef6fe7d65 ...
8 Preparing environment 00:01
9Running on runner-s9p1hqmo-project-67-concurrent-2 via osm-cicd-10...
10 Getting source from Git repository 00:02
11Fetching changes with git depth set to 50...
12Reinitialized existing Git repository in /builds/gitlab/osm/nbi/.git/
13Checking out 844f6482 as detached HEAD (ref is master)...
14Removing gl-secret-detection-report.json
15Skipping Git submodules setup
16 Executing "step_script" stage of the job script 00:01
17Using docker image sha256:5b2d7c5beeae28b0006cad45fd782414140644235c803d90429b862cf2310dd5 for registry.gitlab.com/security-products/secrets:6 with digest registry.gitlab.com/security-products/secrets@sha256:35f2839d838a50b318187c44bcead2994493a5b45eb5a9fb7fe77afef6fe7d65 ...
18$ /analyzer run
19[DEBUG] ▶ Choosing the input analyzer report: '/builds/gitlab/osm/nbi/gl-secret-detection-report.json'
20[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/main.go:25] ▶ GitLab secrets analyzer v6.28.0
21[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/main.go:75] ▶ Using secret detection rules version "0.9.0" from "https://gitlab.com/gitlab-org/security-products/secret-detection/secret-detection-rules/-/releases/v0.9.0"
22[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ ANALYZER_TARGET_DIR,CI_PROJECT_DIR=/builds/gitlab/osm/nbi
23[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ ANALYZER_ARTIFACT_DIR,CI_PROJECT_DIR=/builds/gitlab/osm/nbi
24[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ ANALYZER_INDENT_REPORT=false
25[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ ANALYZER_OPTIMIZE_REPORT=true
26[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ ADDITIONAL_CA_CERT_BUNDLE=
27[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ SEARCH_IGNORED_DIRS=bundle,node_modules,vendor,tmp,test,tests
28[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ SEARCH_IGNORE_HIDDEN_DIRS=true
29[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ SEARCH_MAX_DEPTH=2
30[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ SECRET_DETECTION_LOG_OPTIONS=
31[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ SECRET_DETECTION_HISTORIC_SCAN=false
32[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:267] ▶ SECRET_DETECTION_EXCLUDED_PATHS=
33[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/common/v3@v3.4.0/cacert/cacert.go:65] ▶ CA cert bundle not imported: empty bundle or empty target path
34[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:131] ▶ Detecting project
35[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:153] ▶ Analyzer will attempt to analyze all projects in the repository
36[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:165] ▶ Loading ruleset for /builds/gitlab/osm/nbi
37[WARN] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/ruleset/v3@v3.3.2/ruleset.go:263] ▶ /builds/gitlab/osm/nbi/.gitlab/secret-detection-ruleset.toml not found, ruleset customization will be disabled.
38[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:175] ▶ Running analyzer
39[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:103] ▶ Running gitleaks command: /usr/local/bin/gitleaks detect --report-path /tmp/gitleaks-61549133.json --report-format json --source /builds/gitlab/osm/nbi --config /gitleaks.toml --exit-code 0 --log-level debug --no-git
40[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶
41[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ ○
42[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ │╲
43[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ │ ○
44[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ ○ ░
45[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ ░ gitleaks
46[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶
47[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ 8:03PM DBG using github.com/wasilibs/go-re2 regex engine
48[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ 8:03PM DBG using gitleaks config /gitleaks.toml from `--config`
49[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ 8:03PM INF scanned ~1341267 bytes (1.34 MB) in 162ms
50[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/analyze.go:136] ▶ 8:03PM INF no leaks found
51[INFO] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/run.go:189] ▶ Creating report
52[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/src/app/rules/parser.go:32] ▶ Parsing rule file /gitleaks.toml
53[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/report/v5@v5.7.0/report.go:214] ▶ No Ids found to disable
54[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/report/v5@v5.7.0/report.go:256] ▶ Applying report overrides
55[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/report/v5@v5.7.0/report.go:275] ▶ No Ids found to override
56[DEBU] [secrets] [2025-04-11T20:03:18Z] [/go/pkg/mod/gitlab.com/gitlab-org/security-products/analyzers/command/v3@v3.1.1/jsonout.go:54] ▶ Optimizing JSON Output
57[INFO] [2025-04-11T20:03:18Z] [/build/clicmds/query.go:89] ▶ /builds/gitlab/osm/nbi/gl-report-post.json written
58 Uploading artifacts for successful job 00:01
59Uploading artifacts...
60gl-secret-detection-report.json: found 1 matching artifact files and directories
61Uploading artifacts as "secret_detection" to coordinator... 201 Created id=112723 responseStatus=201 Created token=glcbt-64
62 Cleaning up project directory and file based variables 00:00
63Job succeeded