+ source /utils.sh
++ OPM_RENDER_CACHE=/tmp/konflux-test-opm-cache
++ DEFAULT_INDEX_IMAGE=registry.redhat.io/redhat/redhat-operator-index
+ trap 'handle_error /tekton/results/TEST_OUTPUT' EXIT
+ [[ -z '' ]]
+ PROJECT_NAME=tsf-comp-tbnf
+ echo 'INFO: The PROJECT_NAME used is: tsf-comp-tbnf'
INFO: The PROJECT_NAME used is: tsf-comp-tbnf
+ ca_bundle=/mnt/trusted-ca/ca-bundle.crt
+ '[' -f /mnt/trusted-ca/ca-bundle.crt ']'
++ rpm -q --queryformat '%{NAME}-%{VERSION}-%{RELEASE}\n' ShellCheck
+ PACKAGE_VERSION=ShellCheck-0.10.0-3.el9
+ OUTPUT_FILE=shellcheck-results.json
+ SOURCE_CODE_DIR=/var/workdir/source
+ declare -a ALL_TARGETS
+ IFS=,
+ read -ra TARGET_ARRAY
+ for d in "${TARGET_ARRAY[@]}"
+ potential_path=/var/workdir/source/.
++ realpath -m /var/workdir/source/.
+ resolved_path=/var/workdir/source
+ [[ /var/workdir/source == \/\v\a\r\/\w\o\r\k\d\i\r\/\s\o\u\r\c\e* ]]
+ ALL_TARGETS+=("$resolved_path")
+ '[' -z '' ']'
+ '[' -r /sys/fs/cgroup/cpu.max ']'
+ read -r quota period
+ '[' 800000 '!=' max ']'
+ '[' -n 100000 ']'
+ '[' 100000 -gt 0 ']'
+ export SC_JOBS=8
+ SC_JOBS=8
+ echo 'INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh'
INFO: Setting SC_JOBS=8 based on cgroups v2 max for run-shellcheck.sh
+ /usr/share/csmock/scripts/run-shellcheck.sh /var/workdir/source
Looking for shell scripts.................. done
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/entrypoint.sh
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.github/scripts/cleanup-old-branches.sh
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/applypatch-msg.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/commit-msg.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/post-update.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-applypatch.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/prepare-commit-msg.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-commit.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-merge-commit.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-push.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-rebase.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/push-to-checkout.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/sendemail-validate.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/update.sample
+ timeout 30 shellcheck --format=json1 --external-sources --source-path=/var/workdir/source /var/workdir/source/.git/hooks/pre-receive.sample
+ CSGREP_OPTS=(--mode=json --strip-path-prefix="$SOURCE_CODE_DIR"/ --remove-duplicates --embed-context=3 --set-scan-prop="ShellCheck:${PACKAGE_VERSION}")
+ [[ true == \t\r\u\e ]]
+ CSGREP_EVENT_FILTER='\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|'
+ CSGREP_EVENT_FILTER+='2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|'
+ CSGREP_EVENT_FILTER+='2218|2224|2225|2242|2256|2258|2261)\]$'
+ CSGREP_OPTS+=(--event="$CSGREP_EVENT_FILTER")
+ csgrep --mode=json --strip-path-prefix=/var/workdir/source/ --remove-duplicates --embed-context=3 --set-scan-prop=ShellCheck:ShellCheck-0.10.0-3.el9 '--event=\[SC(1020|1035|1054|1066|1068|1073|1080|1083|1099|1113|1115|1127|1128|1143|2043|2050|2055|2057|2066|2069|2071|2077|2078|2091|2092|2157|2171|2193|2194|2195|2215|2216|2218|2224|2225|2242|2256|2258|2261)\]$' ./shellcheck-results/empty.json ./shellcheck-results/sc-108.json ./shellcheck-results/sc-110.json ./shellcheck-results/sc-111.json ./shellcheck-results/sc-123.json ./shellcheck-results/sc-61.json ./shellcheck-results/sc-62.json ./shellcheck-results/sc-65.json ./shellcheck-results/sc-68.json ./shellcheck-results/sc-72.json ./shellcheck-results/sc-94.json ./shellcheck-results/sc-96.json
+ [[ SITE_DEFAULT == \S\I\T\E\_\D\E\F\A\U\L\T ]]
+ KFP_GIT_URL=https://gitlab.cee.redhat.com/osh/known-false-positives.git
+ PROBE_URL=https://gitlab.cee.redhat.com/osh/known-false-positives
+ KFP_DIR=known-false-positives
+ KFP_CLONED=0
+ mkdir known-false-positives
+ [[ -n https://gitlab.cee.redhat.com/osh/known-false-positives.git ]]
+ echo -n 'INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... '
INFO: Probing https://gitlab.cee.redhat.com/osh/known-false-positives... + curl --fail --head --max-time 60 --no-progress-meter https://gitlab.cee.redhat.com/osh/known-false-positives
++ head -1
curl: (6) Could not resolve host: gitlab.cee.redhat.com
+ [[ 0 -eq 0 ]]
+ echo 'WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered'
WARN: Failed to clone known-false-positives at https://gitlab.cee.redhat.com/osh/known-false-positives.git, scan results will not be filtered
ShellCheck results have been saved to shellcheck-results.json
+ echo 'ShellCheck results have been saved to shellcheck-results.json'
+ csgrep --mode=evtstat shellcheck-results.json
+ csgrep --mode=sarif shellcheck-results.json
+ TEST_OUTPUT=
+ parse_test_output sast-shell-check-oci-ta sarif shellcheck-results.sarif
+ TEST_NAME=sast-shell-check-oci-ta
+ TEST_RESULT_FORMAT=sarif
+ TEST_RESULT_FILE=shellcheck-results.sarif
+ '[' -z sast-shell-check-oci-ta ']'
+ '[' -z sarif ']'
+ '[' -z shellcheck-results.sarif ']'
+ '[' '!' -f shellcheck-results.sarif ']'
+ '[' sarif = sarif ']'
+++ jq -rce '(if (.runs[].results | length > 0) then "FAILURE" else "SUCCESS" end)' shellcheck-results.sarif
+++ jq -rce '(.runs[].results | length)' shellcheck-results.sarif
++ make_result_json -r SUCCESS -f 0
++ local RESULT=
++ local SUCCESSES=0
++ local FAILURES=0
++ local WARNINGS=0
++ local 'NOTE=For details, check Tekton task log.'
++ local NAMESPACE=default
++ local OUTPUT
++ local OPTIND opt
++ getopts :r:s:f:w:t:n: opt
++ case "${opt}" in
++ RESULT=SUCCESS
++ getopts :r:s:f:w:t:n: opt
++ case "${opt}" in
++ FAILURES=0
++ getopts :r:s:f:w:t:n: opt
++ shift 4
++ '[' -z SUCCESS ']'
++ case "${RESULT}" in
++++ date -u --iso-8601=seconds
+++ jq -rce --arg date 2026-03-27T00:04:09+00:00 --arg result SUCCESS --arg note 'For details, check Tekton task log.' --arg namespace default --arg successes 0 --arg failures 0 --arg warnings 0 --null-input '{  result: $result,
        timestamp: $date,
        note: $note,
        namespace: $namespace,
        successes: $successes|tonumber,
        failures: $failures|tonumber,
        warnings: $warnings|tonumber
    }'
++ OUTPUT='{"result":"SUCCESS","timestamp":"2026-03-27T00:04:09+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}'
++ echo '{"result":"SUCCESS","timestamp":"2026-03-27T00:04:09+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}'
+ TEST_OUTPUT='{"result":"SUCCESS","timestamp":"2026-03-27T00:04:09+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}'
++ echo '{"result":"SUCCESS","timestamp":"2026-03-27T00:04:09+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}'
++ jq .failures
+ '[' 0 -gt 0 ']'
+ echo '{"result":"SUCCESS","timestamp":"2026-03-27T00:04:09+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}'
+ tee /tekton/results/TEST_OUTPUT
{"result":"SUCCESS","timestamp":"2026-03-27T00:04:09+00:00","note":"For details, check Tekton task log.","namespace":"default","successes":0,"failures":0,"warnings":0}
+ handle_error /tekton/results/TEST_OUTPUT
+ exit_code=0
+ '[' 0 -ne 0 ']'
+ exit 0