CI/CD Integrations

Wire popular tools into your CI/CD pipeline, step by step.

How to add code coverage, security scanning, testing, monitoring, and quality tools to your GitHub Actions pipeline: Codecov, SonarQube, Snyk, Playwright, Cypress, Sentry, Datadog, and more - with working workflow snippets.

Coverage & quality

Coverage, linting, code quality gates.

AWS AppConfig "BadRequestException"Fix AWS AppConfig "BadRequestException" for a configuration profile in CI - the application, environment, or buf "file does not exist"Fix buf "import ...: file does not exist" / FILE_NOT_FOUND in CI - buf cannot resolve an imported proto "can't resolve your ... dependency files"Fix "Dependabot can't resolve your <ecosystem> dependency files" - the manifest or lockfile in the configured GrowthBook "Failed to fetch features"Fix GrowthBook "Failed to fetch features" in CI - the SDK could not load features from the GrowthBook API LaunchDarkly "unknown feature flag"Fix LaunchDarkly "Unknown feature flag ...; returning default value" in CI - the flag key does not exist in LaunchDarkly "invalid SDK key"Fix LaunchDarkly "HTTP error 401 (invalid SDK key)" in CI - the SDK reached LaunchDarkly but the server-side "Can't load config class"Fix openapi-generator "Can't load config class with name ..." in CI - the -g generator name is misspelled or OpenFeature "PROVIDER_NOT_READY"Fix OpenFeature "provider not ready" (PROVIDER_NOT_READY) in CI - flags are evaluated before "check-added-large-files" FailedFix pre-commit "check-added-large-files" failing in CI - a committed file exceeds the size limit, so the hook "Coverage on New Code (required >= 80%)"Fix a SonarQube quality gate failing on "Coverage on New Code" in CI - the changed lines are not covered

Security & scanning

SAST, dependency, and container scanning.

OSV-ScannerScan lockfiles against the OSV database with Google OSV-Scanner in GitHub Actions using the reusable workflow "Some challenges have failed"Fix certbot "Some challenges have failed" in CI - the ACME validation for one or more domains did not pass, Rekor "transparency log ... failed"Fix cosign Rekor "transparency log" failures in CI - the signature could not be recorded in, or later found Dependency-Track policy failFix a CI step failing after uploading an SBOM to Dependency-Track - a license (or security) policy violation gitleaks "leaks found: N"Fix gitleaks "leaks found: N" with exit code 1 in CI - gitleaks matched one or more secret rules in the Grype "at or above the severity threshold"Fix Grype "discovered vulnerabilities at or above the severity threshold" in CI - the image scan found CVEs grype "unable to decode sbom"Fix grype "unable to decode sbom" in CI - grype could not parse the SBOM file you handed it because the

Testing & browsers

E2E, browser, and load testing in CI.

"PROTOCOL_ERROR" (HTTP/2)Fix the gRPC HTTP/2 error "PROTOCOL_ERROR" / "Received RST_STREAM with code 1" in CI - the channel hit an "No pacts found for provider"Fix Pact "No pacts found" for a provider in CI - the broker returned zero pacts for your consumer version "Could not find a valid Docker environment"Fix Testcontainers "Could not find a valid Docker environment" in CI - the client could not locate a Docker

Monitoring & releases

Error tracking, monitoring, release tooling.

Discord "Cannot send an empty message"Fix Discord webhook HTTP 400 "Cannot send an empty message" in CI - the payload has no content, embeds, or gajira-create field/project errorFix atlassian/gajira-create failures in CI - a wrong project key, unknown issuetype, or a required custom

Explore other topics

GitHub ActionsWorkflow, runner, and YAML errors - diagnosed and fixed. Node.js & npmnpm, yarn, and pnpm failures in CI - solved. DockerBuild, run, compose, and registry errors - explained. Pythonpip, poetry, venv, and pytest failures - fixed. Java & JVMMaven, Gradle, and JVM failures in CI - resolved. GoGo build, module, and test failures - diagnosed.