Skip to content
Latchkey
CI/CD Integrations

Wire popular tools into your CI/CD pipeline, step by step.

How to add code coverage, security scanning, testing, monitoring, and quality tools to your GitHub Actions pipeline: Codecov, SonarQube, Snyk, Playwright, Cypress, Sentry, Datadog, and more - with working workflow snippets.

Coverage & quality

Coverage, linting, code quality gates.

Coverlet (.NET)Collect .NET test coverage with Coverlet in GitHub Actions, emit Cobertura XML, and upload it to Codecov or r… Prettier checkEnforce formatting in CI with prettier --check in GitHub Actions so unformatted code fails the build instead… CodacyRun Codacy static analysis and upload coverage from GitHub Actions using the Codacy CLI action and a project… Code ClimateReport test coverage to Code Climate from GitHub Actions using the test-reporter binary, before-build and aft… CodecovUpload code coverage to Codecov from a GitHub Actions workflow: generate an lcov/Cobertura report, add the co… CoverallsSend coverage to Coveralls from GitHub Actions using the coverallsapp action, including parallel jobs and the… Danger.jsAutomate PR review chores with Danger.js in GitHub Actions: enforce changelog entries, PR descriptions, and f… ESLint gateMake ESLint block merges in GitHub Actions: run lint on every PR, fail on errors, and optionally annotate the… JaCoCoGenerate JaCoCo coverage for a Java/JVM project in GitHub Actions, publish the XML report, and comment covera… SonarQube / SonarCloudRun SonarCloud (or self-hosted SonarQube) analysis in GitHub Actions with the official scan action, a SONAR_T… Super-LinterRun GitHub Super-Linter to lint many languages in one job, scoped to changed files, with the right permission… "must have required property"Fix ajv "must have required property 'X'" in CI - the JSON/YAML document is missing a field the JSON Schema m… "must NOT have additional properties"Fix ajv "must NOT have additional properties" in CI - the data contains a key the schema does not define whil… "schema is invalid"Fix ajv "schema is invalid" in CI - the JSON Schema itself does not conform to its meta-schema, or uses a dra… "rover subgraph check" breaking changesFix "rover subgraph check" failing with "found breaking changes" in CI - the proposed subgraph schema removes… "Schema composition errors: INVALID_GRAPHQL"Fix Apollo Federation "Schema composition errors" with code INVALID_GRAPHQL in CI - composing subgraphs into… "New" / "Unresolved" checkpointsFix Applitools Eyes failures where checkpoints come back "New" or "Unresolved" in CI - a human must accept th… AWS AppConfig "BadRequestException"Fix AWS AppConfig "BadRequestException" for a configuration profile in CI - the application, environment, or… "aria-required-attr" (missing required ARIA)Fix axe-core "aria-required-attr: Required ARIA attributes must be provided" in CI - an element with an ARIA… "aria-valid-attr-value" (invalid ARIA value)Fix axe-core "aria-valid-attr-value: ARIA attributes must conform to valid values" in CI - an aria-* attribut… "button-name" (no discernible text)Fix axe-core "button-name: Buttons must have discernible text" in CI - a button (often icon-only) has no visi… "color-contrast" (insufficient contrast)Fix axe-core "color-contrast: Elements must meet minimum color contrast ratio thresholds" in CI - the text an… "duplicate-id" (id not unique)Fix axe-core "duplicate-id: id attribute value must be unique" in CI - two or more elements share the same id… "html-has-lang" (missing lang attribute)Fix axe-core "html-has-lang: <html> element must have a lang attribute" in CI - the document root has no lang… "image-alt" (missing alt text)Fix axe-core "image-alt: Images must have alternate text" in CI - an <img> has no alt attribute, aria-label,… "label" (form field missing label)Fix axe-core "label: Form elements must have labels" in CI - an input, select, or textarea has no associated… "landmark-one-main" (no main landmark)Fix axe-core "landmark-one-main: Document should have one main landmark" in CI - the page has no <main> or ro… "link-name" (no discernible text)Fix axe-core "link-name: Links must have discernible text" in CI - an anchor has no text or accessible name,… "region" (content outside landmarks)Fix axe-core "region: All page content should be contained by landmarks" in CI - some content sits outside an… "buf breaking" FAILUREFix "buf breaking" FAILURE in CI - your change is backward-incompatible against the --against baseline. Rever… "Failure: compile error"Fix "buf build" compile errors in CI - buf could not compile a proto because of a syntax error or an unresolv… "buf lint" FAILUREFix "buf lint" FAILURE in CI - your protos violate a lint rule like FIELD_LOWER_SNAKE_CASE or the DEFAULT rul… "buf: command not found"Fix "buf: command not found" in CI - the Buf CLI is not installed on the runner. Add bufbuild/buf-setup-actio… "buf.yaml is invalid"Fix "buf.yaml is invalid" / "buf.gen.yaml is invalid" in CI - a malformed key, wrong version, or unknown fiel… buf "file does not exist"Fix buf "import ...: file does not exist" / FILE_NOT_FOUND in CI - buf cannot resolve an imported proto becau… buf breaking baseline not foundFix buf breaking "--against .git#branch=main" failures in CI - a shallow checkout has no main ref to compare… "previously present ... was deleted"Fix buf breaking "Previously present field/message was deleted" in CI - a field, message, enum, or service yo… buf "breaking changes" detectedFix buf breaking change failures in CI - buf breaking compared your protos against a baseline and found a wir… buf "could not find protoc plugin"Fix buf generate "unable to find protoc plugin for name ..." in CI - buf cannot locate a local plugin binary… buf lint violationsFix buf lint violations in CI - buf lint enforces style and naming rules on your protos and fails when a fiel… "Additional properties are not allowed"Fix check-jsonschema "Additional properties are not allowed ('X' was unexpected)" in CI - the document has a… "Failed to parse ... Invalid JSON"Fix check-jsonschema "Failed to parse ...: Invalid JSON" in CI - the instance or schema file is not valid JSO… "generated files differ"Fix the "generated files differ" CI gate - a git diff after regenerating shows committed generated code is st… "go generate" diff gate failsFix the "go generate ./... && git diff --exit-code" gate in CI - running go generate produced changes, meanin… "uncommitted changes after buf generate"Fix the "uncommitted changes after buf generate" CI check - regenerating protobuf code produced a diff, so th… "Failed to properly upload report"Fix Codecov "Failed to properly upload report" in CI - the codecov uploader reached Codecov but the upload wa… "No coverage reports found"Fix Codecov "No coverage reports found" in CI - the uploader searched the workspace and could not locate any… "Token required - not valid tokenless upload"Fix Codecov "Token required" and "Rate limit reached" errors in CI - tokenless uploads are rejected or thrott… "unusable reports"Fix Codecov "some files were unusable" / report processing errors in CI - Codecov received the upload but cou… ConfigCat "failed to fetch config JSON"Fix ConfigCat "Unexpected HTTP response ... received while trying to fetch config JSON" in CI - the SDK could… ConfigCat "SDK Key is invalid"Fix ConfigCat "The SDK Key ... is invalid" in CI - the SDK key format is wrong, empty, or does not match the… "Bad response: 422 Unprocessable Entity"Fix Coveralls "Bad response: 422 Unprocessable Entity" in CI - Coveralls received the payload but rejected it… "Couldn't find a repository matching this job"Fix Coveralls "Couldn't find a repository matching this job" in CI - the token or service info does not map t… cspell config ignoredFix cspell in CI where "Issues found" appears despite a config, because cspell.json was not found, the glob m… "Unknown word (X)"Fix cspell "Unknown word (X)" failures in CI - cspell flags a token absent from its dictionaries. Add project… "conflicting values"Fix CUE "conflicting values" in CI - two constraints unified to an impossible result, for example a field pin… "relation ... does not exist"Fix "table/relation does not exist" from data quality tools in CI. Quality checks ran before the models or tr… threshold / tolerance too strictFix data quality threshold and tolerance failures in CI where checks demand zero defects on data with a known… "authentication failed" (warehouse)Fix "authentication failed" from data quality tools in CI. The warehouse credentials or OIDC token are missin… "connection ... refused"Fix "connection refused" from data quality tools in CI. The warehouse service is not running or not reachable… "Compilation Error"Fix a dbt "Compilation Error" in CI. dbt could not compile a test or model, usually from an undefined ref, ma… dbt accepted_values failureFix a dbt accepted_values test that fails in CI. A column contains a value outside the allowed set, reported… dbt not_null / relationships failureFix dbt not_null and relationships test failures in CI, both reported as "Got N results, expected 0". Nulls i… "source ... is X hours old"Fix dbt source freshness failures in CI. A source loaded more than the configured threshold ago, so dbt repor… "got N results, expected 0" (unique)Fix a dbt unique test that fails with "Got N results, configured to fail if != 0" in CI. Duplicate values exi… "can't resolve your ... dependency files"Fix "Dependabot can't resolve your <ecosystem> dependency files" - the manifest or lockfile in the configured… "couldn't find ... a compatible version"Fix "Dependabot couldn't find a compatible version" - no release of the dependency satisfies every constraint… "Dependabot encountered an error"Fix "Dependabot encountered an error while updating ..." - an unexpected failure during the update run, usual… "could not be updated"Fix the "The following dependencies could not be updated" note on a Dependabot PR - a listed package could no… "unknown package manager"Fix "The property '/updates/0/package-ecosystem' value ... is not one of the accepted values" - an unsupporte… Auto-merge does nothingFix Dependabot PRs that never auto-merge - auto-merge must be enabled on the repo and a workflow must enable… automerge waits on required checksFix Dependabot and Renovate PRs that never automerge because required status checks are pending, missing, or… TOC out of date (doctoc)Fix a docs job that fails because the generated table of contents is stale in CI - doctoc or markdown-toc reg… "The href attribute is required for an anchor"Fix eslint-plugin-jsx-a11y "The href attribute is required for an anchor to be keyboard accessible" (anchor-i… "img elements must have an alt prop"Fix eslint-plugin-jsx-a11y "img elements must have an alt prop" (jsx-a11y/alt-text) in CI - an <img> in JSX h… "click-events-have-key-events"Fix eslint-plugin-jsx-a11y "Visible, non-interactive elements with click handlers must have at least one keyb… Firebase Remote Config "fetch throttled"Fix Firebase Remote Config "Fetch was throttled" / fetch failed in CI - too-frequent fetches trigger throttli… Flagsmith "Connection refused"Fix Flagsmith connection refused / connection errors against a self-hosted instance in CI - the SDK cannot re… Flagsmith "invalid environment key"Fix Flagsmith 401 "Invalid or missing environment key" in CI - the SDK reached Flagsmith but the environment… lcov reportingProduce and publish an lcov coverage report in GitHub Actions, merge per-shard reports, and feed it to Codeco… "Invalid workflow file"Fix GitHub Actions "Invalid workflow file ... You have an error in your yaml syntax on line N" - the workflow… "coverage: X% of statements"Fix a Go coverage gate failing in CI - go test reports "coverage: X% of statements" and a shell gate comparin… "GraphQL introspection is not allowed"Fix "GraphQL introspection is not allowed by Apollo Server, but the query contained __schema or __type" in CI… "must contain uniquely named types"Fix the GraphQL build error "Schema must contain uniquely named types but contains multiple types named X" in… "There can be only one type named X"Fix the GraphQL SDL error "There can be only one type named X" in CI - the schema document parses but declare… "Cannot query field ... on type"Fix GraphQL Code Generator "Cannot query field X on type Y" in CI - an operation document selects a field the… "Unable to find any GraphQL type definitions"Fix GraphQL Code Generator "Failed to load schema ... Unable to find any GraphQL type definitions for the fol… "must have a selection of subfields"Fix GraphQL Code Generator "Field X of type Y must have a selection of subfields" in CI - an operation select… "Syntax Error: Unexpected Name"Fix GraphQL Code Generator "Syntax Error: Unexpected Name" in CI - the parser hit invalid GraphQL SDL or an o… "Unable to find Plugin"Fix GraphQL Code Generator "Unable to find Plugin <name>. Install the plugin via npm" in CI - a plugin listed… "Batch ... could not be retrieved"Fix Great Expectations "The batch could not be retrieved" in CI. The batch request matched no data because th… "Checkpoint ... failed"Fix a Great Expectations Checkpoint that fails in CI. A checkpoint bundles suites and actions; a false result… "DataContextError ... datasource"Fix Great Expectations "DataContextError: Unable to load datasource" in CI. The named datasource is missing f… "ExpectationSuite ... failed"Fix a failing Great Expectations validation in CI where an ExpectationSuite reports success: false. The data… GE V2 vs V3 config versionFix Great Expectations V2/V3 config errors in CI. A great_expectations.yml written for one config version fai… GrowthBook "Failed to fetch features"Fix GrowthBook "Failed to fetch features" in CI - the SDK could not load features from the GrowthBook API hos… "values don't meet the specifications"Fix helm "values don't meet the specifications of the schema(s)" in CI - values.yaml violates the chart's val… "Coverage for lines does not meet threshold"Fix nyc/Istanbul "ERROR: Coverage for lines (X%) does not meet global threshold (Y%)" in CI - measured covera… "Error while instrumenting class"Fix JaCoCo "Error while instrumenting class" and "Can't add different class with same name" in CI - the repor… "Rule violated for bundle"Fix JaCoCo "Rule violated for bundle X: lines covered ratio is 0.50, but expected minimum is 0.80" in CI - th… "Skipping JaCoCo execution"Fix JaCoCo "Skipping JaCoCo execution due to missing execution data file" in CI - the agent never recorded da… "coverage threshold ... not met"Fix Jest "Jest: \"global\" coverage threshold for statements (80%) not met: 71.4%" in CI - measured coverage… "Expected the HTML ... to have no violations"Fix jest-axe "Expected the HTML found at $X to have no violations" in CI - the toHaveNoViolations matcher fou… "RUNTIME ERROR: Field does not exist"Fix jsonnet "RUNTIME ERROR: Field does not exist: X" in CI - the template referenced a field that is not pres… "could not find schema for"Fix kubeconform "could not find schema for" in CI - no schema is available for a resource kind (often a CRD).… "is invalid: ... against schema"Fix kubeconform "resource is invalid against schema" in CI - a Kubernetes manifest has a field of the wrong t… LaunchDarkly "timed out waiting for initialization"Fix LaunchDarkly "Timeout encountered waiting for LaunchDarkly client initialization" in CI - the SDK could n… LaunchDarkly "Error on stream connection"Fix LaunchDarkly "Error on stream connection ... will retry" network failures in CI - the SDK cannot reach th… LaunchDarkly "unknown feature flag"Fix LaunchDarkly "Unknown feature flag ...; returning default value" in CI - the flag key does not exist in t… LaunchDarkly "invalid SDK key"Fix LaunchDarkly "HTTP error 401 (invalid SDK key)" in CI - the SDK reached LaunchDarkly but the server-side… "Assertion failed. Exiting with status code 1."Fix Lighthouse CI "Assertion failed. Exiting with status code 1." in CI - one or more per-audit assertions (l… "categories:accessibility failure ... below 0.9"Fix Lighthouse CI (lhci) assertion "categories:accessibility failure for score" below 0.9 in CI - the audited… update PRs conflict on the lockfileFix stacked Dependabot and Renovate PRs that conflict on the lockfile - the base branch moved after the PR wa… lychee "429 Too Many Requests"Fix lychee "[429] Too Many Requests" in CI - a host rate-limited the link checker. Add retries, exclude the h… lychee broken links (404)Fix lychee "N errors" from broken links in CI - lychee found 404 or unreachable URLs in your docs. Fix dead l… lychee "Timeout"Fix lychee "Timeout" errors in CI - a link did not respond within the request timeout. Raise the timeout, add… lychee fragment not foundFix lychee anchor errors in CI where a #fragment link does not match any heading id. Fix the anchor slug, or… "dead link found"Fix markdown-link-check "ERROR: N dead links found" in CI - the tool reported unreachable URLs. Fix them or c… "markdownlint: command not found"Fix "markdownlint: command not found" in CI - the runner never installed markdownlint or markdownlint-cli2, s… "MD013/line-length"Fix markdownlint "MD013/line-length: Line length" failures in CI - a Markdown line exceeds the configured col… "MD024/no-duplicate-heading"Fix markdownlint "MD024/no-duplicate-heading: Multiple headings with the same content" in CI - two headings s… "MD033/no-inline-html"Fix markdownlint "MD033/no-inline-html: Inline HTML" failures in CI - the linter flags raw HTML tags in Markd… "MD040/fenced-code-language"Fix markdownlint "MD040/fenced-code-language: Fenced code blocks should have a language specified" in CI - a… "MD041/first-line-heading"Fix markdownlint "MD041/first-line-h1: First line in a file should be a top-level heading" in CI - the file s… markdownlint-cli2 config ignoredFix markdownlint-cli2 in CI where the config is not found or not applied - rules fire that your local run doe… "No coverage information was collected"Fix nyc "No coverage information was collected, exit without writing coverage information" in CI - nyc instru… "Can't load config class"Fix openapi-generator "Can't load config class with name ..." in CI - the -g generator name is misspelled or… "Could not resolve reference"Fix openapi-generator "Could not resolve reference because of: Could not resolve pointer ... $ref" in CI - a… "OutOfMemoryError: Java heap space"Fix openapi-generator "java.lang.OutOfMemoryError: Java heap space" in CI - the JVM ran out of heap generatin… "Spec has N errors"Fix openapi-generator spec validation failures in CI - the validator found schema errors (missing required fi… "is not valid JSON/YAML"Fix openapi-generator "The file ... cannot be read / is not valid JSON or YAML" in CI - the input spec is mal… OpenFeature "TYPE_MISMATCH / FLAG_NOT_FOUND"Fix OpenFeature flag evaluation errors (errorCode TYPE_MISMATCH or FLAG_NOT_FOUND) in CI - the flag key is mi… OpenFeature "PROVIDER_NOT_READY"Fix OpenFeature "provider not ready" (PROVIDER_NOT_READY) in CI - flags are evaluated before setProviderAndWa… "WCAG2AA.Principle1.Guideline1_1..."Fix pa11y WCAG2AA error codes (for example WCAG2AA.Principle1.Guideline1_1.1_1_1.H37) in CI - HTML CodeSniffe… "pa11y-ci ... failed with N errors"Fix pa11y-ci exiting non-zero because a URL "failed with N errors" above the configured threshold in CI - pa1… "Pa11y timed out" loading the pageFix pa11y-ci "Error: Pa11y timed out" or "page could not be loaded" in CI - the server was not ready, the URL… "SchemaError ... failed ... check"Fix pandera "SchemaError" in CI. A DataFrame column failed a pandera check or dtype constraint, so validate()… pandera dtype mismatchFix pandera dtype mismatches in CI where a column is object/float instead of the declared type. A different p… Flaky Percy diffs (dynamic content)Fix flaky Percy visual diffs from dynamic content in CI - freeze dates, stop animations, and mask non-determi… "mapping values are not allowed here"Fix the YAML parse error "mapping values are not allowed here" in .pre-commit-config.yaml in CI - indentation… "is not a valid ... rev"Fix pre-commit "[ERROR] ... is not a valid ... rev" in CI - the rev pinned for a hook repo does not exist as… "An unexpected error has occurred: CalledProcessError"Fix pre-commit "An unexpected error has occurred: CalledProcessError" in CI - a subprocess pre-commit spawned… "check-added-large-files" FailedFix pre-commit "check-added-large-files" failing in CI - a committed file exceeds the size limit, so the hook… "check-json...Failed"Fix pre-commit "check-json...Failed" in CI - the check-json hook could not parse a .json file (trailing comma… "check-yaml...Failed"Fix pre-commit "check-yaml...Failed" in CI - the check-yaml hook could not parse a YAML file (syntax error, t… "pre-commit: command not found"Fix "pre-commit: command not found" in CI - the runner never installed the pre-commit framework, or it was in… "detect-private-key" FailedFix pre-commit "detect-private-key" failing in CI - the hook found what looks like a private key committed in… "end-of-file-fixer...Failed"Fix pre-commit "end-of-file-fixer...Failed" in CI - the hook modified files to end in a single newline. In CI… "Executable `...` not found"Fix pre-commit "Executable `X` not found" in CI - the hook language environment did not build the tool, usual… "files were modified by this hook"Fix pre-commit "files were modified by this hook" in CI - an auto-fixing formatter (black, prettier, isort) r… "not present in repo"Fix pre-commit "Hook id `X` not present in repository ..." in CI - the hook id in your config does not exist… "InvalidConfigError"Fix pre-commit "InvalidConfigError" in CI - the framework parsed .pre-commit-config.yaml but a required key i… "InvalidManifestError"Fix pre-commit "InvalidManifestError" in CI - the hook repository pre-commit cloned has a .pre-commit-hooks.y… "language ... not found"Fix pre-commit hook language runtime errors in CI - a hook needs node, python, ruby, or go to build its envir… "Cannot install ... environment"Fix pre-commit "RuntimeError: Cannot install ... environment" in CI - the framework could not build a hook la… "unauthenticated git protocol ... no longer supported"Fix pre-commit "The unauthenticated git protocol on port 9418 is no longer supported" in CI - the framework t… "trailing-whitespace" FailedFix pre-commit "trailing-whitespace" failing in CI - the hook strips trailing whitespace, which counts as a f… additional_dependencies install failsFix pre-commit additional_dependencies failures in CI - a plugin listed under additional_dependencies cannot… pre-commit autoupdate errorsFix pre-commit autoupdate failing in CI - the command cannot reach a hook repo to find its latest tag, or it… network failure cloning hook reposFix pre-commit network failures cloning hook repos in CI - with no cached PRE_COMMIT_HOME and no network, the… "exceeded timeout"Fix a pre-commit hook that exceeds its timeout in CI - a long-running hook is killed, or the whole job hits t… stages: [manual] hook is skippedFix a pre-commit hook that never runs in CI because it is set to stages: [manual] - the default `pre-commit r… local hook missing required keysFix pre-commit local hooks failing in CI - a `repo: local` entry is missing the id, name, entry, or language… pre-commit skips files without --all-filesFix pre-commit checking only changed files in CI - without --all-files pre-commit runs against the staged dif… SKIP silently disables hooksFix pre-commit hooks being skipped by the SKIP environment variable in CI - a leftover SKIP value disables th… pre-commit/action vs pre-commit.ciUnderstand pre-commit/action and the pre-commit.ci bot in CI - how the official action runs hooks and caches,… prettier --check (markdown)Fix "prettier --check" failing on Markdown in CI - files are not formatted to Prettier rules. Run prettier --… proselint / alex fails CIFix proselint or alex failing a docs job in CI - both return advisory prose suggestions. Scope or disable che… "Plugin failed with status code 1"Fix "--go_out: protoc-gen-go: Plugin failed with status code 1" in CI - the Go plugin ran but exited non-zero… "plugins are not supported"Fix protoc "--go_out: protoc-gen-go: plugins are not supported" in CI - the new protoc-gen-go rejects the leg… "Explicit 'optional' labels are disallowed"Fix protoc "Explicit 'optional' labels are disallowed in the Proto3 syntax" in CI - your protoc is too old fo… "was not found or had errors"Fix protoc "google/protobuf/timestamp.proto: File not found" and "Import ... was not found or had errors" in… "was not found or had errors"Fix protoc "Import X was not found or had errors" in CI - an imported .proto could not be located or failed t… "Missing output directives"Fix protoc "Missing output directives" in CI - protoc was invoked with input .proto files but no --*_out flag… "protoc-gen-go: program not found"Fix protoc "protoc-gen-go: program not found or is not executable" in CI - protoc could not locate the protoc… "protoc-gen-go: program not found"Fix "protoc-gen-go: program not found or is not executable" in CI - the Go codegen plugin is not installed or… "protoc: command not found"Fix "protoc: command not found" in CI - the Protocol Buffers compiler is not installed on the runner or not o… "is already defined"Fix protoc "X is already defined" in CI - a message, enum, or file is compiled twice, usually because the sam… "File not found"Fix protoc "X.proto: File not found" in CI - protoc cannot locate an imported .proto because its directory is… protoc vs plugin version skewFix protoc and codegen-plugin version skew in CI - a mismatch between protoc, protoc-gen-go, and protoc-gen-g… generated code diff in CIFix a "generate then git diff" CI failure for Protocol Buffers - committed generated code does not match what… pytest data quality assertions failFix pytest data quality test failures in CI. Assertion-based checks on DataFrames or query results fail becau… "CoverageWarning: No data was collected"Fix pytest-cov "CoverageWarning: No data was collected" and "Module X was never imported" in CI - coverage me… "Required test coverage ... not reached"Fix pytest-cov "FAIL Required test coverage of 80% not reached. Total coverage: 72.34%" in CI - the --cov-fai… remark plugin not foundFix remark "Could not find module `remark-preset-lint-recommended`" in CI - a preset or plugin referenced in… "Artifact update error"Fix Renovate "Artifact update error" and failed lockFileMaintenance - the lockfile refresh command failed, of… "Branch automerge failed"Fix Renovate "Branch automerge failed" - required status checks are not passing or branch protection blocks t… "Cannot find preset"Fix Renovate "Cannot find preset" - an extended preset does not exist, is in a private repo Renovate cannot r… "Dependency lookup failure"Fix Renovate "Dependency lookup failure" / "Failed to look up dependency" - Renovate could not query the regi… "No dependencies found"Fix Renovate "No dependencies found" - managers are disabled, file patterns miss your manifests, or ignorePat… "PR limit reached"Fix Renovate stopping at "PR limit reached" - prConcurrentLimit or prHourlyLimit caps open/new PRs, so remain… "Invalid JSON (parsing failed)"Fix "Invalid JSON (parsing failed)" and config validation errors from Renovate - a syntax error or an unknown… "Repository is disabled"Fix Renovate "Repository is disabled - skipping" - the repo has enabled:false in config, was archived, or was… onboarding PR never progressesFix a Renovate/Mend "Configure Renovate" onboarding PR that never proceeds - it must be merged (or config com… "coverage is below the expected minimum"Fix SimpleCov "Line coverage (72.5%) is below the expected minimum coverage (80.00%)" in CI - minimum_coverag… "Check ... FAILED"Fix a failing Soda scan in CI where a check reports FAILED. A failed check means the data violated a threshol… Soda Cloud "invalid API key"Fix Soda Cloud authentication errors in CI. The scan cannot push results because the SODA_CLOUD api key id/se… Soda "connection ... failed"Fix Soda Core data source connection failures in CI. The scan cannot reach the warehouse because the host, po… "Project not found. Please check the sonar.projectKey"Fix SonarCloud "Project not found. Please check the 'sonar.projectKey' and 'sonar.organization' properties" i… "CI analysis while Automatic Analysis is enabled"Fix SonarCloud "You are running CI analysis while Automatic Analysis is enabled" in CI - both analysis modes… PR decoration "You are not authorized"Fix SonarCloud pull request decoration failing with "You are not authorized" or not appearing in CI - the app… "Coverage on New Code (required >= 80%)"Fix a SonarQube quality gate failing on "Coverage on New Code" in CI - the changed lines are not covered enou… "Duplicated Lines on New Code (required <= 3%)"Fix a SonarQube quality gate failing on "Duplicated Lines (%) on New Code" in CI - the change introduced copy… "Error during SonarScanner execution"Fix SonarQube "ERROR: Error during SonarScanner execution" in CI - the scanner aborted; the real cause (confi… "Could not find a default branch / project"Fix SonarQube "Project not found" and "Could not find a default branch to fall back on" in CI - the projectKe… "Quality Gate failed"Fix SonarQube/SonarCloud "Quality Gate failed" in CI - the analysis completed but the project did not meet th… "QUALITY GATE STATUS: FAILED"Fix "QUALITY GATE STATUS: FAILED" in CI - the analysis uploaded successfully but the project did not meet one… "Security Hotspots Reviewed (required = 100%)"Fix a SonarQube quality gate failing on "Security Hotspots Reviewed" in CI - new security hotspots exist that… "Shallow clone detected"Fix SonarQube "Shallow clone detected, no blame information will be provided" in CI - the default fetch-depth… "The main branch ... has not been analyzed yet"Fix SonarQube "The main branch has not been analyzed yet" and "Could not find a default branch" in CI - a PR… "You're not authorized to run analysis"Fix SonarQube "You're not authorized to run analysis. Please contact the project administrator" and "Insuffic… "not authorized to run analysis"Fix SonarQube "You're not authorized to run analysis. Please contact the project administrator" in CI - the S… "coverage report ... could not be read"Fix SonarQube coverage showing 0% in CI - the scanner did not import your coverage report because the path wa… New bugs / code smells / vulnerabilitiesFix a SonarQube quality gate failing on new bugs, code smells, or vulnerabilities in CI - the change introduc… Quality gate wait timed outFix a SonarQube quality gate timeout in CI - with sonar.qualitygate.wait the scanner polls for the gate resul… "Coverage report ... could not be read"Fix SonarScanner "Coverage report ... could not be read" in CI - the report path is set but the file is empty… "Fail to get bootstrap index from server"Fix "ERROR: Error during SonarScanner execution ... Fail to get bootstrap index from server" in CI - the scan… "java.net.UnknownHostException"Fix SonarScanner "java.net.UnknownHostException" in CI - DNS could not resolve the SONAR_HOST_URL hostname, u… "No files nor directories matching"Fix SonarScanner "No files nor directories matching ... in sonar.sources" in CI - the configured source path… "Not authorized. Please check ... sonar.token"Fix SonarScanner "Not authorized. Please check the properties sonar.login, sonar.password or sonar.token" in… "Shallow clone detected"Fix SonarScanner "Shallow clone detected, please configure a full clone" in CI - the checkout has limited his… "sonar.pullrequest.key ... required"Fix SonarScanner errors about missing pull request parameters in CI - both sonar.pullrequest.key and the bran… "reportPaths ... file can not be found"Fix SonarScanner "coverage report ... can not be found" for sonar.python.coverage.reportPaths in CI - the con… "version of Java ... is deprecated"Fix SonarScanner "The version of Java (X) you have used to run this analysis is deprecated" in CI - the scann… "mandatory properties: sonar.projectKey"Fix SonarScanner "You must define the following mandatory properties: sonar.projectKey" in CI - the scanner s… Split.io "Splits are not yet available"Fix Split.io "Splits are not yet available for evaluation" / SDK_READY timeout in CI - treatments are request… Split.io "invalid api_key"Fix Split.io "Factory instantiation: you passed an invalid api_key" in CI - the authorizationKey is empty, wr… "no dialect was specified"Fix sqlfluff "No dialect was specified" in CI. sqlfluff refuses to lint without a dialect; set it in .sqlfluf… sqlfluff "Parse error"Fix sqlfluff "Parse error" and unparsable sections in CI. sqlfluff could not parse the SQL, usually a dialect… sqlfluff dbt templater failsFix sqlfluff dbt templater failures in CI. The dbt templater needs sqlfluff-templater-dbt, a valid profile, a… sqlfluff "L010 ..." lint failFix sqlfluff lint failures in CI. Rule violations like L010 (keyword capitalization) return a non-zero exit t… Statsig "initialize timed out"Fix Statsig initialize timeout in CI - the SDK could not download its config specs within the init timeout, s… Statsig "Invalid key provided"Fix Statsig "Invalid key provided. Please check your Statsig console" in CI - the server SDK was given an emp… "expected ..." (TOML)Fix taplo "expected ..." errors in CI - the TOML parser hit invalid syntax (a bare value, a missing quote, or… textlint "error" outputFix textlint "N problems" errors in CI - a textlint rule flagged prose. Auto-fix fixable rules, adjust severi… Unleash "ECONNREFUSED"Fix Unleash "Unleash Repository error ... ECONNREFUSED" in CI - the client cannot reach the Unleash API URL t… Unleash "401 Unauthorized"Fix Unleash "Unleash server responded 401 Unauthorized" in CI - the client reached the Unleash API but the cl… Unleash client "not ready"Fix Unleash evaluating toggles before the client emits "ready" / "synchronized" in CI - flags read too early… "StylesPath" not foundFix Vale "StylesPath not found" / "cannot find styles" in CI - the path in .vale.ini does not exist on the ru… Vale "errors" (spelling)Fix Vale "N errors" from the Vale.Spelling rule in CI - Vale flags words absent from its dictionary. Add proj… "vale sync" package errorFix "vale sync" failures in CI - Vale cannot download the style packages named in .vale.ini because the packa… Vale alert level too strictFix a Vale docs job that fails on suggestions or warnings in CI - MinAlertLevel or the action fail_level is s… Baselines not managed on mainFix visual regression failures from poor baseline management in CI - keep the authoritative baseline on main,… Masking dynamic regionsFix flaky visual regression diffs by masking dynamic regions in CI - use Playwright mask, Percy ignore region… Non-deterministic rendering flakinessFix flaky visual regression tests caused by non-deterministic rendering in CI - freeze time, disable animatio… write-good suggestionsFix write-good failing a docs job in CI - the readability linter flagged passive voice, wordiness, or weasel… "did not find expected key"Fix YAML "did not find expected key" in CI - inconsistent indentation put a value or list item where the pars… "found character that cannot start any token"Fix YAML "found character that cannot start any token" in CI - a tab character was used for indentation. YAML… "mapping values are not allowed"Fix YAML "mapping values are not allowed in this context" in CI - an unquoted colon inside a value makes the… "duplication of key ... in mapping"Fix yamllint "duplication of key \"X\" in mapping (key-duplicates)" in CI - the same key appears twice in one… "line too long (N > 80 characters)"Fix yamllint "line too long (N > 80 characters) (line-length)" in CI - a line exceeds the configured max leng… "could not find expected ':'"Fix yamllint "syntax error: could not find expected ':' (syntax)" in CI - the YAML parser expected a key/valu… "trailing spaces (trailing-spaces)"Fix yamllint "trailing spaces (trailing-spaces)" in CI - a line ends in whitespace. Strip trailing whitespace… "truthy value should be one of"Fix yamllint "truthy value should be one of [false, true] (truthy)" in CI - a value like yes, no, on, or off… "wrong indentation: expected N but found M"Fix yamllint "wrong indentation: expected N but found M (indentation)" in CI - a block is indented by the wro…

Security & scanning

SAST, dependency, and container scanning.

"Temporary failure in name resolution"Fix "Temporary failure in name resolution" in CI - the glibc resolver could not reach a DNS server, usually f… CheckovScan Terraform, CloudFormation, and Kubernetes manifests with Checkov in GitHub Actions, emit SARIF, and fail… CodeQLEnable CodeQL static analysis in GitHub Actions: initialize, autobuild or build manually, analyze, and surfac… DependabotConfigure Dependabot version and security updates with dependabot.yml, then auto-merge safe updates using Git… GitleaksDetect committed secrets with Gitleaks in GitHub Actions, scan full history on a full clone, and fail the bui… GrypeScan images and directories for vulnerabilities with Anchore Grype in GitHub Actions, set a fail-on severity,… OSV-ScannerScan lockfiles against the OSV database with Google OSV-Scanner in GitHub Actions using the reusable workflow… Dependency-CheckRun OWASP Dependency-Check in GitHub Actions to find vulnerable libraries via the NVD, with an API key and re… SemgrepRun Semgrep SAST in GitHub Actions with a ruleset, emit SARIF for code scanning, and fail PRs on new findings. SnykScan dependencies for vulnerabilities with Snyk in GitHub Actions, set a severity threshold, and upload SARIF… tfsecScan Terraform for security issues with tfsec in GitHub Actions, post inline PR comments, and emit SARIF for… TrivyScan container images for vulnerabilities with Trivy in GitHub Actions, fail on critical CVEs, and upload SAR… TruffleHogScan for verified secret leaks with TruffleHog in GitHub Actions, scope to the PR diff, and only fail on veri… "predicate ... invalid"Fix attestation "predicate invalid" in CI - the predicate JSON attached to an in-toto attestation does not ma… Auth0 "access_denied"Fix Auth0 "error":"access_denied" in CI - the client authenticated but was not authorized for the requested A… Auth0 "Grant type ... is not allowed"Fix Auth0 "Grant type 'X' not allowed for the client" in CI - the Auth0 application does not have the request… "AADSTS65001" consent requiredFix Azure AD / Entra ID "AADSTS65001: The user or administrator has not consented" in CI - the app or its del… Base-image CVE: bump the baseFix container scan findings that come from the base image in CI - OS-layer CVEs are not fixed by your app dep… cargo-deny license requirementsFix cargo-deny reporting that a crate failed to satisfy license requirements in CI - the crate expression doe… cargo-deny rejected licenseFix cargo-deny failing the licenses check in CI when a crate license is rejected because it is not in the all… cargo-deny "unlicensed"Fix cargo-deny flagging a crate as unlicensed in CI - it found no license field and no detectable license fil… "acme:error:rateLimited"Fix ACME "urn:ietf:params:acme:error:rateLimited" from Let's Encrypt in cert-manager or certbot CI - too many… cert-manager DNS-01 propagation timeoutFix cert-manager DNS-01 "Waiting for DNS-01 challenge propagation" timeouts in CI - the TXT record was create… cert-manager HTTP-01 404Fix cert-manager HTTP-01 challenge 404 errors in CI - the ACME server could not fetch the token at /.well-kno… "Some challenges have failed"Fix certbot "Some challenges have failed" in CI - the ACME validation for one or more domains did not pass, f… clair-scanner "connection refused"Fix clair-scanner "could not analyze layers" / connection refused in CI - the scanner could not reach the Cla… clair-scanner "unapproved vulnerabilities"Fix clair-scanner exiting 1 with "unapproved vulnerabilities" in CI - the Clair analysis found CVEs not on yo… "could not process the submitted SARIF file"Fix "Code Scanning could not process the submitted SARIF file" in CI - the uploaded SARIF is malformed, inval… "rejecting SARIF, as it is too large"Fix "rejecting SARIF, as it is too large" in CI - the uploaded SARIF exceeds the code scanning size or result… "Advanced Security must be enabled"Fix CodeQL "Advanced Security must be enabled for this repository to use code scanning" in CI - GitHub Advanc… "Autobuild failed"Fix CodeQL "Autobuild failed" in CI - the automatic build of a compiled language exited non-zero, usually a m… "does not appear to be a git repository"Fix CodeQL "The checkout path provided ... does not appear to be a git repository" in CI - CodeQL ran before… "Config file ... does not exist"Fix CodeQL "1 configuration error: Config file ... does not exist" in CI - the config-file path passed to the… "Could not auto-detect a suitable build method"Fix CodeQL "Could not auto-detect a suitable build method" in CI - autobuild could not infer how to compile a… "fatal error while running ... codeql database create"Fix CodeQL "Encountered a fatal error while running codeql database create" in CI - the database build crashe… "No source code was seen during the build"Fix CodeQL "No source code was seen during the build" / "CodeQL did not detect any code" in CI - the extracto… "No space left on device" (CodeQL)Fix CodeQL "No space left on device" in CI - building the database and downloading query packs fills the runn… "Resource not accessible by integration"Fix CodeQL upload "Resource not accessible by integration" in CI - the workflow token lacks the security-even… "not authorized to upload SARIF"Fix CodeQL "You are not authorized to upload SARIF results" in CI - the token identity or repository is not p… CodeQL language matrix mismatchFix CodeQL matrix language and config mismatches in CI - the language in the matrix does not match init, or a… CodeQL OOM / killed during extractionFix CodeQL out-of-memory failures during database create in CI - extraction of a large codebase exhausts runn… "InvalidParameterException"Fix Cognito "InvalidParameterException" in CI - the auth flow or required auth parameters do not match how th… "NotAuthorizedException"Fix Cognito "NotAuthorizedException: Incorrect username or password" in CI - the InitiateAuth call used wrong… cosign "bundle ... verification"Fix cosign "error verifying bundle" in CI - the sigstore bundle (signature, certificate, and tlog proof) coul… cosign "MANIFEST_UNKNOWN"Fix cosign "MANIFEST_UNKNOWN" in CI - the registry has no manifest for the signature tag cosign derived from… Rekor "transparency log ... failed"Fix cosign Rekor "transparency log" failures in CI - the signature could not be recorded in, or later found i… cosign attest "signing"Fix cosign attest signing failures in CI - cosign could not sign the attestation because no key was configure… "COSIGN_EXPERIMENTAL" requiredFix cosign keyless failures asking for COSIGN_EXPERIMENTAL in CI - old cosign needs the flag, or you are on a… cosign "getting Fulcio ... 403"Fix cosign keyless "error getting signer: getting Fulcio ... 403" in CI - the workflow had no OIDC token to e… cosign "no signatures found"Fix cosign verify "no signatures found" in CI - cosign looked up the signature for the image reference and fo… cosign "no matching attestations"Fix cosign verify-attestation "no matching attestations" in CI - no attestation of the requested predicate ty… "curl: (35) SSL connect error"Fix "curl: (35) SSL connect error" in CI - the TLS handshake itself failed, usually from a protocol or cipher… "curl: (6) Could not resolve host"Fix "curl: (6) Could not resolve host" inside a CI container - DNS resolution failed, usually from missing re… "curl: (60) self signed certificate"Fix "curl: (60) SSL certificate problem: self signed certificate" in CI - the endpoint presents a self-signed… "curl: (60) unable to get local issuer certificate"Fix "curl: (60) SSL certificate problem: unable to get local issuer certificate" in CI - curl reached the ser… "curl: (77) error setting certificate verify locations"Fix "curl: (77) error setting certificate verify locations" in CI - curl was told to use a CA bundle or direc… CycloneDX "error generating BOM"Fix CycloneDX "error generating BOM" in CI - the cyclonedx generator could not read the lockfile or manifest… "Dependabot couldn't authenticate"Fix "Dependabot couldn't authenticate with ..." for a private registry - the registries block in dependabot.y… GITHUB_TOKEN does not re-trigger CIFix Dependabot PRs whose commits run no checks - events made with the default GITHUB_TOKEN do not trigger fur… "secret is not available"Fix empty secrets on workflows triggered by Dependabot PRs - GitHub withholds Actions secrets and uses a read… registries block misconfiguredFix a broken registries block in dependabot.yml - a wrong type, an unresolved secret, or a URL mismatch stops… Dependency-Track policy failFix a CI step failing after uploading an SBOM to Dependency-Track - a license (or security) policy violation… Dependency-Track "401"Fix uploading an SBOM to Dependency-Track failing with 401 Unauthorized in CI - the X-Api-Key is missing or l… detect-secrets audit "unaudited"Fix detect-secrets CI failing on unaudited baseline entries - findings in .secrets.baseline have no is_secret… detect-secrets "baseline was modified"Fix detect-secrets "the baseline file was modified" / out-of-date baseline in CI - the committed .secrets.bas… detect-secrets "--all-files" neededFix detect-secrets passing while a secret sits in git history - the pre-commit hook only scans staged diffs,… detect-secrets "Potential secrets"Fix detect-secrets-hook "Potential secrets about to be committed" in CI - the pre-commit hook found high-entr… Docker Scout "cves" exit non-zeroFix "docker scout cves" failing the build in CI - the image has vulnerabilities at or above the --exit-code /… Docker Scout "not authenticated"Fix Docker Scout "not authenticated" / "unauthorized" in CI - Scout needs a Docker Hub login to query its CVE… "fail-on-severity" blocks the deployFix a container CVE gate that blocks every deploy in CI - the fail-on severity is too strict or counts unfixe… False positive: allowlist, do not blanket-ignoreHandle a false-positive or accepted container CVE in CI without dropping the gate - use a scanner allowlist e… "auth/invalid-api-key"Fix Firebase Auth "auth/invalid-api-key" in CI - the Firebase config apiKey passed to initializeApp was missi… Auth emulator "ECONNREFUSED"Fix Firebase Auth emulator "connect ECONNREFUSED 127.0.0.1:9099" in CI - the tests ran before the emulator fi… fossa "401 Unauthorized"Fix "fossa analyze" failing with 401 Unauthorized in CI - the FOSSA_API_KEY is missing, empty, or not exposed… fossa "issues found"Fix "fossa test" reporting issues found in CI - FOSSA flagged license or policy violations for the current sc… ggshield "401" UnauthorizedFix ggshield "401 Unauthorized" in CI - the GitGuardian API rejected the key because it is expired, revoked,… ggshield "Invalid API key"Fix ggshield "Error: Invalid API key" in CI - GITGUARDIAN_API_KEY is missing, empty, or malformed, so ggshiel… git-secrets "matches a prohibited pattern"Fix git-secrets "matches one or more prohibited patterns" in CI - a staged line matched a configured regex or… git-secrets AWS key in historyFix git-secrets flagging an AWS credential during --scan-history in CI - an access key committed earlier stil… ggshield "1 incident detected"Fix ggshield "1 incident detected" with a non-zero exit in CI - GitGuardian matched a secret in the scanned d… "Resource not accessible by integration"Fix actions/attest-build-provenance "Resource not accessible by integration" in CI - the job lacks attestatio… "subject digest ... does not match"Fix a GitHub attestation "subject digest does not match" in CI - the digest you attested does not equal the d… gitleaks ".gitleaksignore" ignoredFix a gitleaks finding that keeps failing despite a .gitleaksignore entry in CI - the ignored fingerprint cha… gitleaks "failed to load config"Fix gitleaks "failed to load config" in CI - gitleaks could not parse the .gitleaks.toml at the given path, u… gitleaks "leaks found: N"Fix gitleaks "leaks found: N" with exit code 1 in CI - gitleaks matched one or more secret rules in the scann… gitleaks "no commits to scan"Fix gitleaks scanning nothing in CI - a shallow checkout (fetch-depth 1) leaves gitleaks with only one commit… "dial tcp: lookup ...: no such host"Fix Go "dial tcp: lookup <host>: no such host" in CI - a definitive DNS failure meaning the name does not res… go-licenses discovery errorFix "go-licenses" failing with an error discovering the license URL or file in CI - the tool cannot locate or… go-licenses "Forbidden"Fix "go-licenses check" failing in CI - a module carries a license Google classifies as Forbidden (or Restric… "authentication handshake failed"Fix the gRPC TLS error "transport: authentication handshake failed" in CI - the channel could not complete th… "UNAUTHENTICATED"Fix the gRPC status UNAUTHENTICATED in CI - the server rejected the call because credentials were missing, ma… Grype "at or above the severity threshold"Fix Grype "discovered vulnerabilities at or above the severity threshold" in CI - the image scan found CVEs a… Grype "failed to catalog"Fix Grype "failed to catalog" in CI - Grype (via Syft) could not read the image contents to build a package c… grype "unable to decode sbom"Fix grype "unable to decode sbom" in CI - grype could not parse the SBOM file you handed it because the forma… Grype "unable to update vulnerability database"Fix Grype "failed to load vulnerability db" / "unable to update" in CI - Grype could not download or refresh… "failed to retrieve secret"Fix hashicorp/vault-action "failed to retrieve secret" in CI - the secrets mapping path or key is wrong, or t… Large image scan timeout / OOMFix container CVE scans that time out or run out of memory on very large images in CI - slim the image, cache… in-toto "link metadata ... verification failed"Fix in-toto "verification failed" in CI - the supply-chain layout could not be satisfied because link metadat… "PKIX path building failed"Fix Java "PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to fi… "unable to find a signing key that matches"Fix jwks-rsa "Unable to find a signing key that matches" in CI - the token kid does not match any key returne… "invalid signature"Fix "JsonWebTokenError: invalid signature" in CI - the verifying key or algorithm does not match the one used… "jwt expired"Fix "TokenExpiredError: jwt expired" in CI - the token exp claim is in the past, often because a fixture toke… "jwt malformed"Fix "JsonWebTokenError: jwt malformed" in CI - the value passed to the JWT verifier is not a well-formed thre… Keycloak "Connection refused"Fix Keycloak "Connection refused" in CI - the test suite hit the Keycloak service container before it finishe… "Account is not fully set up"Fix Keycloak "invalid_grant: Account is not fully set up" in CI - the test user has a required action pending… "too many certificates already issued"Fix Let's Encrypt "too many certificates already issued for exact set of domains" in CI - the duplicate-certi… SPDX parse errorFix a license-policy tool failing to parse an SPDX license expression in CI - an invalid identifier, wrong op… "Found license defects"Fix npm license-checker "Error: Found license defects" in CI - a dependency carries a license outside your --… "UNKNOWN" licenseFix npm license-checker reporting a package as "UNKNOWN" in CI - the package.json has no license field and no… licensee "License: Unknown"Fix licensee (GitHub licensee gem) detecting "License: Unknown" in CI - the LICENSE file does not match a kno… "DEPTH_ZERO_SELF_SIGNED_CERT"Fix Node.js "Error: self-signed certificate" / DEPTH_ZERO_SELF_SIGNED_CERT in CI - the leaf certificate itsel… "getaddrinfo EAI_AGAIN"Fix Node.js "getaddrinfo EAI_AGAIN <host>" inside a CI container - a temporary DNS resolution failure from an… "SELF_SIGNED_CERT_IN_CHAIN"Fix Node.js "Error: self-signed certificate in certificate chain" / SELF_SIGNED_CERT_IN_CHAIN in CI - the cha… Node "unable to get local issuer certificate"Fix Node.js "unable to get local issuer certificate" in CI by trusting the issuing CA with NODE_EXTRA_CA_CERT… "UNABLE_TO_VERIFY_LEAF_SIGNATURE"Fix Node.js "Error: unable to verify the first certificate" / UNABLE_TO_VERIFY_LEAF_SIGNATURE in CI - the ser… "error":"invalid_client"Fix OAuth2 "error":"invalid_client" in CI - the client_id/client_secret sent to the token endpoint was unknow… "error":"invalid_grant"Fix OAuth2 "error":"invalid_grant" from the token endpoint in CI - the authorization code, refresh token, or… "error":"redirect_uri_mismatch"Fix OAuth2 "error":"redirect_uri_mismatch" in CI - the redirect_uri sent in the authorization request does no… "error":"unsupported_grant_type"Fix OAuth2 "error":"unsupported_grant_type" in CI - the grant_type value in the token request is not one the… Okta "E0000004"Fix Okta "errorCode":"E0000004","errorSummary":"Authentication failed" in CI - a primary auth call with wrong… OpenSSL "self-signed certificate in certificate chain"Fix OpenSSL "verify error:num=19:self-signed certificate in certificate chain" in CI - the chain ends at a se… OpenSSL "certificate has expired"Fix OpenSSL "verify error:num=10:certificate has expired" in CI - the presented certificate is past its notAf… OpenSSL "unable to get local issuer certificate"Fix OpenSSL "verify error:num=20:unable to get local issuer certificate" in CI - s_client or verify could not… OpenSSL "Verify return code: 21"Fix OpenSSL "Verify return code: 21 (unable to verify the first certificate)" in CI - the server sent an inco… pip-licenses --fail-onFix pip-licenses exiting non-zero from --fail-on in CI - an installed Python package carries a license in you… "no attestations ... denied"Fix a kyverno or cosign policy "denied" for missing attestations in CI - admission required a signed attestat… provenance "unverified"Fix a provenance "unverified" gate in CI - a policy required verified build provenance but the artifact had n… Python "CERTIFICATE_VERIFY_FAILED"Fix Python "SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer… "No authentication found"Fix Renovate "No authentication found" - RENOVATE_TOKEN (or the token option) is unset, so Renovate cannot ac… GITHUB_COM_TOKEN requiredFix Renovate rate-limit failures fetching release notes - set GITHUB_COM_TOKEN for github.com lookups from a… "401 Unauthorized" via hostRulesFix Renovate 401/403 against a private registry - the hostRules entry is missing, the matchHost does not matc… reuse lint non-compliantFix "reuse lint" failing in CI with files that have no copyright and licensing information - the repository i… missing SPDX-License-IdentifierFix "reuse lint" flagging files that have copyright but no SPDX-License-Identifier in CI - the file needs a v… npm auditGate your Node CI on npm audit in GitHub Actions: choose an audit level, handle transitive noise, and avoid f… pip-auditAudit Python dependencies for vulnerabilities with pip-audit in GitHub Actions, scan requirements or the envi… "SubjectConfirmation ... NotOnOrAfter"Fix SAML "assertion NotOnOrAfter condition not met" / clock skew errors in CI - the runner clock differs from… "Signature validation failed"Fix SAML "Signature validation failed. SAML Response rejected" in CI - the SP verified the response against a… SARIF category collisionFix SARIF upload category collisions in CI - two uploads share a category, so one overwrites the other or res… Syft SBOM then scan errorsFix errors when generating an SBOM with Syft and scanning it in CI - a mismatched SBOM format or a stale SBOM… SPDX vs CycloneDX format mismatchFix an SBOM format mismatch in CI - one tool emits SPDX while the next expects CycloneDX (or vice versa), so… scancode "no such option"Fix ScanCode Toolkit exiting with "Error: no such option" in CI - a flag was renamed or removed between versi… scancode no license foundUnderstand ScanCode reporting empty license detections in CI - files scanned without --license, or without li… "Invalid rule schema" / "Invalid YAML"Fix Semgrep "Invalid rule schema" and "Invalid YAML" errors in CI - a custom rule file is malformed or missin… semgrep "invalid rule schema"Fix Semgrep "invalid rule schema" / "Invalid rule" in CI - a custom secrets rule YAML is malformed or uses an… "rule errored" / partial resultsFix Semgrep "rule ... errored" and "Partial results" in CI - a rule timed out or crashed on some files, so th… semgrep "SEMGREP_APP_TOKEN"Fix Semgrep "You are not logged in" / missing SEMGREP_APP_TOKEN in CI - semgrep ci needs the app token to pul… "SEMGREP_APP_TOKEN not set"Fix Semgrep "SEMGREP_APP_TOKEN is not set" in CI - semgrep ci needs the app token to fetch your rules policy… "unable to clone" (diff-aware)Fix Semgrep diff-aware "unable to clone" and baseline errors in CI - semgrep ci needs full git history to com… Semgrep exit 1 on findingsFix Semgrep failing CI with exit code 1 on findings - by default semgrep ci returns non-zero when blocking fi… semgrep "findings" (secrets)Fix Semgrep secret findings failing CI - semgrep ci matched secret rules and returned a non-zero exit because… "certificate identity ... does not match"Fix cosign "none of the expected identities matched" in CI - the --certificate-identity / --certificate-oidc-… slsa-github-generator provenance failedFix slsa-github-generator failures in CI - the reusable provenance workflow errors on missing permissions, wr… slsa-verifier "could not find ... provenance"Fix slsa-verifier "FAILED: could not find a matching provenance" in CI - no SLSA provenance attestation match… Snyk "Authentication error"Fix Snyk "Authentication error (SNYK-0005)" in CI - the SNYK_TOKEN env var was missing or invalid, so the CLI… Snyk "Failed to test"Fix Snyk "Failed to test <image>" in CI - Snyk could not scan the image because the reference did not resolve… Snyk container test "found N issues"Fix "snyk container test" failing with "found N issues" in CI - the image scan found vulnerabilities at or ab… "Snyk Code is not supported / not enabled"Fix Snyk Code "is not supported for your organization" / "not enabled" in CI - Snyk Code (SAST) must be turne… snyk code test exit 1Fix Snyk Code failing CI on found issues - snyk code test exits non-zero when it finds issues at or above the… "SNYK_TOKEN" not set / auth failedFix Snyk Code authentication errors in CI - snyk code test needs SNYK_TOKEN in the environment to authenticat… Snyk "monitor" does not blockFix a Snyk container step that never fails the build in CI - "snyk container monitor" only records a snapshot… syft "could not determine source"Fix syft "could not determine source" in CI - syft could not resolve the image or directory reference you pas… syft "unable to catalog"Fix syft "unable to catalog" in CI - syft reached the source but a cataloger failed or found no packages, lea… Talisman "Potential secrets detected"Fix Talisman "Potential secrets detected" in CI - Talisman flagged filenames, file content, or high-entropy s… Trivy "--ignore-unfixed"Fix Trivy failing on CVEs with no fix in CI - use --ignore-unfixed to skip vulnerabilities that have no fixed… Trivy ".trivyignore" not appliedFix Trivy still failing on CVEs listed in .trivyignore in CI - the ignore file was not found at the working d… Trivy "context deadline exceeded"Fix Trivy "analyze error ... context deadline exceeded" in CI - scanning a large image exceeded the default t… Trivy "failed to download vulnerability DB"Fix Trivy "failed to download vulnerability DB" / TOOMANYREQUESTS from ghcr.io in CI - anonymous pulls of the… Trivy "unable to find the specified image"Fix Trivy "FATAL unable to find the specified image" in CI - Trivy could not locate the image in the local Do… trivy "unable to decode SBOM"Fix trivy "unable to decode SBOM" in CI - trivy could not parse the SBOM passed to `trivy sbom` because the f… Trivy "unable to initialize the OS scanner"Fix Trivy "unable to initialize a scanner: unable to initialize the OS scanner" in CI - Trivy could not ident… Trivy "Total: N (HIGH, CRITICAL)"Fix Trivy exiting 1 with "Total: N (HIGH: x, CRITICAL: y)" in CI - the image scan found vulnerabilities at or… Trivy license FAILEDFix Trivy license scanning failing the build in CI - a detected package license matches a category at or abov… trufflehog "found verified result"Fix TruffleHog "found verified result" with a non-zero exit in CI - TruffleHog live-verified a detected crede… trufflehog "unable to clone repo"Fix TruffleHog "unable to clone repo" and empty diff scans in CI - a shallow clone or an equal BASE and HEAD… trufflehog "403" GitHub tokenFix TruffleHog "403" / rate-limit errors while scanning a GitHub org or verifying in CI - the GITHUB_TOKEN is… Unapproved license blocks buildUnderstand a license-compliance gate blocking a CI build because a dependency carries an unapproved license -… "Path does not exist" (upload-sarif)Fix upload-sarif "Path does not exist" and missing SARIF results in CI - the sarif_file path is wrong, or the… "* permission denied" on pathFix Vault "* permission denied" on one path in CI while other reads succeed - the policy covers some paths bu… "no handler for route"Fix Vault "Code: 404 ... no handler for route" in CI - the path is wrong or the secrets engine is not mounted… "connection refused" / "no such host"Fix Vault "connection refused" or "no such host" in CI - VAULT_ADDR is unset, wrong, or points at a host the… "context deadline exceeded"Fix Vault "context deadline exceeded" in CI - the client timed out reaching Vault because of network latency,… "Code: 403"Fix Vault "Error making API request ... Code: 403" in CI - the token authenticated but is not authorized for… "Vault is in standby mode"Fix Vault "Vault is in standby mode" in CI - the request hit a standby node that does not forward, so target… "lease is not renewable"Fix Vault "lease is not renewable" in CI - the token or dynamic secret lease cannot be extended, so re-authen… "missing client token"Fix Vault "missing client token" in CI - the request reached Vault with no token because VAULT_TOKEN was neve… "namespace not found"Fix Vault Enterprise "namespace not found" in CI - VAULT_NAMESPACE is unset, misspelled, or the path lives in… "permission denied"Fix Vault "permission denied" when reading a secret in CI - the token authenticated but its policies do not g… "token is expired"Fix Vault "token is expired" in CI - the token TTL elapsed mid-job or the token was created without enough li… "Vault is sealed"Fix Vault "Vault is sealed" (HTTP 503) in CI - the Vault server is sealed and cannot serve any request until… "x509: certificate signed by unknown authority"Fix Vault "x509: certificate signed by unknown authority" in CI - the runner does not trust the CA that signe… "failed to get credentials"Fix hashicorp/vault-action "failed to get credentials" for AppRole in CI - roleId or secretId is empty becaus… "invalid role or secret id"Fix Vault AppRole "invalid role or secret id" in CI - the role_id/secret_id pair is wrong, expired, or the se… "role not found" (database engine)Fix Vault database "role not found" in CI - the dynamic database role does not exist on the mount, or the rea… "claim ... does not match associated bound claim"Fix Vault JWT/OIDC "claim does not match associated bound claim" in CI - the GitHub OIDC token subject or rep… "invalid audience"Fix Vault JWT/OIDC "invalid audience" in CI - the aud claim in the GitHub OIDC token does not match the role… "role could not be found"Fix Vault JWT/OIDC "role could not be found" from GitHub Actions in CI - the login named a role that does not… "service account name not authorized"Fix Vault Kubernetes auth "service account name not authorized" in CI - the pod service account or namespace… "version not found"Fix Vault KV v2 "version not found" in CI - the requested secret version was deleted, destroyed, or never exi… KV v1 vs v2 path (data/ vs metadata/)Fix Vault KV v2 path mistakes in CI - the raw API needs secret/data/... to read and secret/metadata/... to li… "Code: 429"Fix Vault "Code: 429" rate-limit errors in CI - a rate-limit quota was hit by concurrent jobs; back off and r…

Testing & browsers

E2E, browser, and load testing in CI.

PercyAdd Percy visual regression testing to GitHub Actions: capture snapshots in your test run, upload to Percy, a… "Missing field while writing result"Fix Apollo Client "Missing field \"X\" while writing result" in CI - the response written to the cache lacks… "Network error: Failed to fetch"Fix Apollo Client "Network error: Failed to fetch" during server-side rendering or tests in CI - the HTTP lin… "PersistedQueryNotFound"Fix the Apollo persisted-queries error "PersistedQueryNotFound" in CI - the client sent only a query hash but… "Received status code 400"Fix Apollo Client "Server response was missing for query ... Response not successful: Received status code 40… "Store reset while query was in flight"Fix Apollo Client "Store reset while query was in flight (not completed in link chain)" in CI - the cache was… "apiKey ... was not set"Fix Applitools Eyes "Eyes API key is not set" or unauthorized errors in CI - the APPLITOOLS_API_KEY environme… "Mismatch errors found"Fix BackstopJS "Mismatch errors found" in CI - one or more scenarios differ from the reference beyond mismatc… "Navigation timeout of NNN ms exceeded"Fix BackstopJS "Navigation timeout ... exceeded" in CI - Puppeteer could not load the scenario URL in time be… "Reference image ... not found"Fix BackstopJS "Reference image not found, please run reference" in CI - no baseline exists for a scenario be… Chromium download / launch failedFix BackstopJS failures where Puppeteer cannot download or launch Chromium in CI - install the browser and it… Bruno "bru run" failedFix Bruno "bru run" failures in CI - a request assertion or test failed, or the CLI exited non-zero because a… "bru: command not found"Fix "bru: command not found" in CI - the Bruno CLI (@usebruno/cli) is not installed on the runner. Install it… "buf format --diff" failureFix "buf format --diff" (or --exit-code) failures in CI - a proto is not formatted to buf canonical style. Ru… "buf generate" plugin failedFix "buf generate" plugin failures in CI - a local plugin binary is missing from PATH or a remote plugin refe… "buf push" 401 UnauthorizedFix "buf push" 401 Unauthorized to the Buf Schema Registry in CI - the BUF_TOKEN is missing, wrong, or not pa… "buf.lock is out of date"Fix "buf.lock is out of date" in CI - the committed lockfile does not match the deps declared in buf.yaml. Ru… "unable to resolve" dependencyFix buf "unable to resolve" dependency errors in CI - a buf.yaml dep is not pinned in buf.lock, or the runner… buf module not foundFix a buf "module not found" error from the Buf Schema Registry in CI - the module reference is wrong, the mo… buf remote plugin not foundFix a buf remote plugin "not found" error in CI - the plugin name or version in buf.gen.yaml does not exist o… "Failed to publish build"Fix Chromatic "Failed to publish build" in CI - the CLI built or uploaded the Storybook but could not complet… "Missing project token"Fix Chromatic "Missing project token" in CI - the --project-token flag or CHROMATIC_PROJECT_TOKEN is not set,… "Missing project token"Fix Chromatic "Missing project token" in CI - the CHROMATIC_PROJECT_TOKEN was not provided to the publish ste… "No Storybook build output"Fix Chromatic "No Storybook build output" in CI - Chromatic could not find a built Storybook to publish becau… Shallow clone breaks baseline lookupFix Chromatic "Failed to find ancestor build" / baseline detection errors in CI caused by a shallow git check… TurboSnap "could not determine changed files"Fix Chromatic TurboSnap "could not determine what files changed" in CI - TurboSnap needs git history that a s… Chromatic "changes must be reviewed"Understand Chromatic failing a CI build with visual snapshot changes - Chromatic detected pixel differences t… "N accessibility violation(s) were detected"Fix cypress-axe "A accessibility violation(s) were detected" from cy.checkA11y() in CI - axe-core found real… Dredd "connect ECONNREFUSED"Fix Dredd "Error: connect ECONNREFUSED" in CI - Dredd could not reach the API host and port, usually because… Dredd "statusCode: expected 200"Fix Dredd "fail: GET ... statusCode: expected 200 but got 500" in CI - the live API response does not match t… "Cannot query field on type"Fix the GraphQL validation error "Cannot query field X on type Y" when an Apollo Server request runs in CI -… "must have a selection of subfields"Fix the GraphQL error "Field X of type Y must have a selection of subfields" when a request runs against Apol… "of required type ... was not provided"Fix the GraphQL error "Variable \"$x\" of required type \"Y!\" was not provided" in CI - the operation declar… "Failed to load schema ... ECONNREFUSED"Fix GraphQL Code Generator "Failed to load schema from <url>: connect ECONNREFUSED" in CI - codegen could not… "DEADLINE_EXCEEDED"Fix the gRPC status DEADLINE_EXCEEDED in CI - the call did not complete within the deadline the client set, u… "INVALID_ARGUMENT"Fix the gRPC status INVALID_ARGUMENT in CI - the server rejected the request fields as invalid, independent o… "PROTOCOL_ERROR" (HTTP/2)Fix the gRPC HTTP/2 error "PROTOCOL_ERROR" / "Received RST_STREAM with code 1" in CI - the channel hit an HTT… "received message larger than max"Fix the gRPC error "received message larger than max (N vs. 4194304)" in CI - a message exceeded the default… "code = Unavailable desc = connection refused"Fix the Go gRPC error "rpc error: code = Unavailable desc = connection refused" in CI - the dialed gRPC serve… "failed to connect to all addresses"Fix the gRPC status UNAVAILABLE "failed to connect to all addresses" in CI - the client could not establish a… "UNIMPLEMENTED: Method not found"Fix the gRPC status UNIMPLEMENTED "Method not found" in CI - the server has no handler registered for the met… "Failed to dial target host"Fix grpcurl "Failed to dial target host ...: connection refused" in CI - grpcurl could not open a connection… "does not support the reflection API"Fix grpcurl "server does not support the reflection API" in CI - grpcurl relies on server reflection to disco… "Expected image to match or be a close match"Fix jest-image-snapshot "Expected image to match or be a close match to snapshot but was NNN% different" in C… CI vs local render mismatchFix jest-image-snapshot failures where baselines pass locally but fail in CI due to different headless Chromi… "Could not connect to LocalStack health endpoint"Fix LocalStack "Could not connect to LocalStack health endpoint" in CI - tests started before LocalStack fini… "InvalidClientTokenId"Fix LocalStack "InvalidClientTokenId" in CI - the AWS SDK sent no or real credentials to LocalStack, which ex… Waiting for "Ready." raceFix LocalStack readiness races in CI - tests start before LocalStack logs "Ready." because a fixed sleep repl… "service ... not yet implemented"Fix LocalStack "service not yet implemented" or "API not implemented" in CI - the AWS operation your test cal… "The security token ... is invalid"Fix LocalStack "The security token included in the request is invalid" in CI - the request hit real AWS inste… "Could not connect to the endpoint URL"Fix botocore "Could not connect to the endpoint URL http://localhost:4566" in CI - the AWS client reached for… Port 4566 already in useFix LocalStack "port is already allocated" / bind failures on 4566 in CI - another process or a leftover cont… Pro service needs an auth tokenFix LocalStack Pro service startup failures in CI - a Pro-only service or feature was requested without LOCAL… S3 path-style addressingFix LocalStack S3 failures in CI caused by virtual-host bucket addressing - the SDK resolves bucket.localhost… "could not find reporter"Fix Newman "could not find reporter" in CI - the JUnit or htmlextra reporter package is not installed, so New… Newman "ECONNREFUSED"Fix Newman "ECONNREFUSED" in CI - the request could not connect because the API under test was not listening… Newman "ENOENT ... collection"Fix Newman "ENOENT: no such file or directory" for the collection path in CI - Newman cannot find the collect… "expected ... status code 200 but got 500"Fix the Newman AssertionError "expected response to have status code 200 but got 500" in CI - a Postman test… "newman: command not found"Fix "newman: command not found" in CI - the Newman CLI is not installed on the runner. Install it globally wi… Newman "self signed certificate"Fix Newman "self signed certificate" and "unable to verify the first certificate" in CI - the API uses a cert… "The top-level 'item'"Fix Newman "The top-level 'item' property" and old-format collection errors in CI - the collection was export… "unable to load ... environment"Fix Newman "unable to load environment" in CI - Newman cannot read the environment file passed to -e, so requ… "error in evaluating the test script"Fix Newman "There was an error in evaluating the test script" in CI - a ReferenceError or TypeError in a Post… "Actual interactions do not match expected"Fix Pact "Actual interactions do not match expected interactions" in CI - the consumer mock server saw reques… "Computer says no"Fix Pact "can-i-deploy ... Computer says no" in CI - the broker has no successful verification result for the… "no records found"Fix Pact "can-i-deploy ... there is no matrix ... no records found" in CI - the broker has no matrix rows for… "Could not connect to the Pact Broker"Fix Pact "Could not connect to the Pact Broker" in CI - the PACT_BROKER_BASE_URL is wrong, unset, or unreacha… "409 Conflict" publishing a pactFix Pact "Error publishing pact: 409 Conflict" in CI - the broker rejected a republish of the same consumer v… "Missing request"Fix Pact "Missing request" during provider verification in CI - the provider under test never received an int… "No consumer state handler found"Fix Pact "No consumer state handler found for consumer ... state ..." in CI - the provider verification has n… "No pacts found for provider"Fix Pact "No pacts found" for a provider in CI - the broker returned zero pacts for your consumer version sel… "consumer version required"Fix "pact-broker publish: --consumer-app-version is required" in CI - the publish command ran without a consu… "state change request failed"Fix Pact "state change request failed" in CI - the verifier could not call the provider state setup endpoint,… "Pact verification failed"Fix "Pact verification failed" with a request/response mismatch in CI - the provider returned a body, status,… "401 Unauthorized" from the brokerFix Pact "Error retrieving pacts: 401 Unauthorized" in CI - the broker request had no valid PACT_BROKER_TOKEN… "404 ... no pact found"Fix Pact Broker "404 Not Found: no pact found" in CI - the broker has no pact for the consumer, provider, or… Broker Docker health waitFix a dockerized Pact Broker not being ready in CI - publish or verify runs before the pactfoundation/pact-br… "certificate verify failed" to brokerFix Pact Broker TLS "SSL_connect ... certificate verify failed" in CI - the client could not validate the bro… "webhook ... failed"Fix a Pact Broker webhook that failed to trigger provider verification in CI - the broker called your CI trig… consumerVersionSelectors emptyFix Pact consumerVersionSelectors returning no pacts in CI - the selectors point at a branch, tag, or environ… Pact Go "VerifyProvider" failedFix Pact Go "VerifyProvider" failures in CI - the pact-go verifier reports interaction mismatches, a missing… "PactVerificationError"Fix Pact JS "@pact-foundation/pact ... PactVerificationError: Pact verification failed" in CI - the JS Verifi… "au.com.dius.pact ... MismatchException"Fix Pact JVM "au.com.dius.pact.core ... MismatchException" in CI - the JVM provider verification found a body… New pact breaks provider buildFix a new consumer pact breaking the provider build in CI - without pending pacts enabled, an unverified new… Provider "Connection refused" on verifyFix Pact provider verification "Connection refused" in CI - the provider app was not started, or bound to a d… Missing provider version/branchFix Pact provider version or branch not set in CI - without providerVersion and providerVersionBranch, result… Verification results missing in brokerFix missing Pact verification results in CI - the provider verified pacts but did not publish the results, so… includeWipPactsSince has no effectFix Pact WIP pacts not appearing in CI - includeWipPactsSince is set but no work-in-progress pacts are verifi… "Missing Percy token"Fix Percy "Error: Missing Percy token" in CI - the PERCY_TOKEN environment variable is not set, so the CLI ca… "No snapshots found"Fix Percy "No snapshots found" in CI - the build finalized without receiving any snapshot calls, usually beca… "percy: command not found"Fix "percy: command not found" in CI - the @percy/cli package is not installed or not on PATH, so percy exec… "A snapshot doesn't match its reference"Fix Playwright toHaveScreenshot "Error: A snapshot doesn't match its reference" in CI - the rendered screensh… "snapshot doesn't exist"Fix Playwright "Error: A snapshot doesn't exist ... writing actual" in CI - no reference image was committed,… "expect(results.violations).toEqual([])" failsFix Playwright accessibility tests where AxeBuilder().analyze() returns violations in CI - the @axe-core/play… Anti-aliasing / sub-pixel noiseFix flaky Playwright screenshot diffs from anti-aliasing and sub-pixel rendering in CI - use the threshold an… Font rendering differs macOS vs LinuxFix Playwright screenshot diffs caused by font rendering differences between macOS/Windows and the Linux CI r… Prism mock "connection refused"Fix Prism mock server "ECONNREFUSED" in CI - tests could not reach the Prism mock because it was not started,… "reg-suit run failed"Fix "reg-suit run failed" in CI - the run could not fetch the expected images or the comparison found differe… reg-suit S3 publish auth failedFix reg-suit reg-publish-s3-plugin auth failures in CI - AccessDenied or missing credentials when uploading s… CypressRun Cypress end-to-end tests in GitHub Actions with the official cypress-io action, start your app, and paral… JestRun Jest tests in GitHub Actions with CI mode, coverage, and sharding so your Node test suite is fast and det… k6Run k6 load tests in GitHub Actions with the Grafana action, enforce thresholds as pass/fail gates, and expor… Lighthouse CIRun Lighthouse CI in GitHub Actions to audit performance, accessibility, and SEO, with assertions that fail t… Newman / PostmanRun Postman collections in GitHub Actions with Newman: pass an environment file, generate a JUnit report, and… PlaywrightRun Playwright end-to-end tests in GitHub Actions: install browsers, shard across runners, and upload the HTM… pytestRun pytest in GitHub Actions across a Python version matrix with coverage and JUnit output for test reporting. Selenium GridRun browser tests against Selenium Grid in GitHub Actions using service containers for the hub and browser no… TestcontainersRun integration tests that spin up real databases with Testcontainers in GitHub Actions, where Docker is alre… Storybook testsRun the Storybook test runner in GitHub Actions to smoke-test every story, with the static build served and P… VitestRun Vitest in GitHub Actions with run mode, coverage via v8, and sharding for fast Vite-based test suites. Schemathesis "checks failed"Fix schemathesis "1 checks failed" (status_code_conformance / response_schema_conformance) in CI - the API re… "schemathesis: command not found"Fix "schemathesis: command not found" in CI - the schemathesis package is not installed on the runner. Instal… "Failed to load schema"Fix schemathesis "Failed to load schema" in CI - schemathesis could not fetch the OpenAPI schema from the URL… Hypothesis "DeadlineExceeded"Fix schemathesis "hypothesis.errors.DeadlineExceeded" in CI - a generated request took longer than Hypothesis… "Schemathesis found N failures"Fix "Schemathesis found N failures" in CI - schemathesis generated requests from your OpenAPI schema and the… "spectral: command not found"Fix "spectral: command not found" in CI - the Spectral CLI is not installed on the runner. Install @stoplight… spectral OpenAPI lint errorsFix spectral OpenAPI lint failures in CI - spectral found rule violations (missing descriptions, invalid sche… ".storybook/main.js SyntaxError"Fix a SyntaxError loading .storybook/main.js in CI - Storybook could not parse its config file because of an… "Failed to load preset"Fix Storybook "Failed to load preset" in CI - Storybook tried to load an addon or framework preset that is no… "framework field ... is required"Fix Storybook "framework field in main.js is required" after upgrading from 6 to 7 or 8 in CI - the config mu… "No story files found"Fix Storybook "No story files found for the specified pattern" in CI - the glob in .storybook/main.js matched… "Port 6006 is already in use"Fix "storybook dev" failing because the port is already in use in CI - another process (a leftover Storybook… "Rollup failed to resolve import"Fix Storybook Vite build "Rollup failed to resolve import" in CI - the production Rollup pass could not resol… Storybook test-runner a11y violationsFix Storybook @storybook/test-runner a11y failures in CI - the axe-playwright a11y check on a story returned… a11y addon reports violationsUnderstand Storybook a11y addon violations failing the test-runner in CI - an axe accessibility check found v… "Cannot find module '@storybook/...'"Fix Storybook "Cannot find module '@storybook/...'" in CI - a Storybook package listed in config is not insta… "JavaScript heap out of memory"Fix "storybook build" crashing with "JavaScript heap out of memory" in CI - a large Storybook exceeds Node's… "Module not found: Can't resolve"Fix "storybook build" failing with "Module not found: Error: Can't resolve" in CI - the builder cannot resolv… "Loading PostCSS plugin failed"Fix a Storybook build PostCSS plugin error in CI - the CSS pipeline could not load a PostCSS plugin (Tailwind… Composition "refs" cannot be reachedFix a Storybook composition ref that cannot be reached in CI - a composed Storybook URL in refs is unavailabl… Interaction test failed play assertionUnderstand a Storybook interaction test failing a play assertion in CI - the test-runner ran a story's play f… "toBeInTheDocument is not a function"Fix a Storybook play function failing with "expect(...).toBeInTheDocument is not a function" in CI - the jest… "A snapshot ... does not match"Fix @storybook/test-runner "A snapshot ... does not match its stored snapshot" in CI - a story's rendered out… "browserType.launch: Executable doesn't exist"Fix @storybook/test-runner "browserType.launch: Executable doesn't exist" in CI - the test-runner uses Playwr… "Cannot connect to Storybook"Fix @storybook/test-runner "Cannot connect to Storybook at http://127.0.0.1:6006" in CI - the runner reached… "No tests found"Fix @storybook/test-runner "No tests found" in CI - the runner discovered no stories to test, usually a wrong… "Timeout ... waiting for Storybook"Fix @storybook/test-runner "Timeout waiting for Storybook to be ready" in CI - the runner needs a served Stor… webpack5 vs vite builder mismatchFix a Storybook builder mismatch in CI - the framework package and the installed builder disagree (react-vite… Tavern "Max retries exceeded"Fix Tavern "requests.exceptions.ConnectionError: Max retries exceeded" in CI - the API was not reachable when… Tavern "Test failed" mismatchFix Tavern "Test '...' failed" response mismatch in CI - the API response body or status did not match the ex… "Cannot connect to the Docker daemon"Fix Testcontainers "Cannot connect to the Docker daemon at unix:///var/run/docker.sock" in CI - the socket ex… "Could not find a valid Docker environment"Fix Testcontainers "Could not find a valid Docker environment" in CI - the client could not locate a Docker d… "Could not start container"Fix Testcontainers "Could not start container" in CI - the container was created but failed to start or becom… "Could not start Ryuk resource reaper"Fix Testcontainers "Could not start Ryuk resource reaper" in CI - the cleanup sidecar could not start or conn… "host.docker.internal" not resolvingFix Testcontainers failures where "host.docker.internal" does not resolve in CI - the special host name is no… "Mapped port can only be obtained after the container is started"Fix Testcontainers "Mapped port can only be obtained after the container is started" in CI - code read the ma… "no matching manifest for linux/..."Fix Testcontainers "no matching manifest for linux/arm64" or amd64 in CI - the image has no build for the run… "no space left on device"Fix Testcontainers "no space left on device" in CI - image layers and container volumes filled the runner dis… "permission denied ... docker.sock"Fix Testcontainers "permission denied while trying to connect to the Docker daemon socket at unix:///var/run/… "Previously pulled image ... not available"Fix Testcontainers "Previously pulled image, but not available locally" in CI - the image reference resolved… "pull access denied" / rate limitFix Testcontainers image pull failures in CI - "pull access denied" or "toomanyrequests: You have reached you… "Timed out waiting for container ... to be ready"Fix Testcontainers "Timed out waiting for container to be ready" in CI - the wait strategy did not observe re… "Wait strategy failed"Fix Testcontainers "Wait strategy failed" in CI - the readiness check itself errored (wrong port, wrong path,… DinD vs docker.sock mountFix Testcontainers container-networking failures in CI caused by mixing up Docker-in-Docker with a mounted ho… Slow first pull trips timeoutsFix Testcontainers first-pull slowness in CI - a cold image pull on a fresh runner adds minutes and can push… Browser binaries missingFix visual regression failures where the browser is not installed in CI - install Playwright/Puppeteer browse… WireMock "connection refused"Fix WireMock "Connection refused" and "Request was not matched" in CI - the WireMock container was not ready,…

Monitoring & releases

Error tracking, monitoring, release tooling.

ChangesetsAutomate monorepo versioning and publishing with Changesets in GitHub Actions using the changesets/action rel… Datadog CISend pipeline and test data to Datadog CI Visibility from GitHub Actions using datadog-ci, with an API key an… Deploy previewsCreate per-PR deploy previews from GitHub Actions, deploy a build to a host, and comment the preview URL back… Discord alertsSend GitHub Actions build status to a Discord channel using a webhook, with a community action or a direct cu… semantic-releaseAutomate versioning and publishing with semantic-release in GitHub Actions: derive the version from commits,… SentryCreate Sentry releases and upload sourcemaps from GitHub Actions so production errors map back to readable st… Slack alertsPost a Slack message when a GitHub Actions workflow fails using the official slack-github-action and an incom… Status badgesAdd a GitHub Actions workflow status badge to your README, scope it to a branch or event, and avoid the commo… Akamai EdgeGrid signature/timestamp invalidFix Akamai EdgeGrid 401 "Invalid timestamp" or signature errors in CI - the .edgerc credentials are malformed… Akamai Fast Purge 403 (no authorization)Fix Akamai Fast Purge (CCU v3) returning HTTP 403 in CI - the API client credentials are not authorized for t… Akamai purge by CP code not authorizedFix Akamai Fast Purge by CP code failing with 403 in CI - the API client is not authorized for that CP code,… GitHub ReleasesAutomate GitHub Releases on tag push: generate notes, attach build artifacts, and publish with softprops/acti… CloudFront "NoSuchDistribution"Fix CloudFront "NoSuchDistribution: The specified distribution does not exist" in CI - the distribution id is… CloudFront "TooManyInvalidationsInProgress"Fix CloudFront "TooManyInvalidationsInProgress" in CI - more than 15 invalidations are already in progress on… CloudFront create-invalidation "AccessDenied"Fix "An error occurred (AccessDenied) when calling the CreateInvalidation operation" in CI - the IAM role or… S3 sync "AccessDenied" (upload then invalidate)Fix "An error occurred (AccessDenied) when calling the PutObject operation" during aws s3 sync in CI - the CI… SES "Email address is not verified"Fix AWS SES "Email address is not verified" in CI - in the SES sandbox both from and to must be verified. Ver… SES "MessageRejected"Fix AWS SES "MessageRejected" in CI - SES accepted the request but declined the message, often for an unverif… SES 403 "SignatureDoesNotMatch"Fix AWS SES "SignatureDoesNotMatch" (HTTP 403) in CI - the AWS credentials or region used to sign the request… Bunny.net pull zone not foundFix Bunny.net returning HTTP 404 for a pull-zone operation in CI - the pull zone id is wrong, belongs to anot… Bunny.net purge API 401Fix Bunny.net purge API returning HTTP 401 Unauthorized in CI - the AccessKey header carries a wrong or missi… Cloudflare Pages "project not found"Fix wrangler pages deploy failing with "Project not found. The specified project name does not match any of y… Cloudflare "Invalid request headers"Fix Cloudflare purge_cache returning HTTP 400 with "Invalid request headers" (code 6003) in CI - the Authoriz… Cloudflare purge "Authentication error"Fix Cloudflare "POST /purge_cache" returning HTTP 403 with "Authentication error" (code 10000) in CI - the AP… Cloudflare purge 429 rate limitFix Cloudflare purge_cache returning HTTP 429 "More than 1000 requests per 300 seconds" (code 10035) in CI -… wrangler "Authentication error [code: 10000]"Fix wrangler deploy failing with "A request to the Cloudflare API ... failed. Authentication error [code: 100… "403 Forbidden" (invalid API key)Fix datadog-ci "403 Forbidden" / "API key is not valid" in CI - a key was sent but Datadog rejected it as inv… "Missing DATADOG_API_KEY"Fix datadog-ci "Missing DATADOG_API_KEY in your environment" in CI - the command aborted before any upload be… "synthetics ... test(s) failed"Fix datadog-ci synthetics run-tests failures in CI - one or more Synthetic tests returned a failed result and… "400 Bad Request" (sourcemaps)Fix datadog-ci sourcemaps upload "400 Bad Request" in CI - Datadog rejected the payload because a required pa… Discord "Cannot send an empty message"Fix Discord webhook HTTP 400 "Cannot send an empty message" in CI - the payload has no content, embeds, or fi… Discord 401 "Invalid Webhook Token"Fix Discord webhook HTTP 401 "Invalid Webhook Token" in CI - the webhook was deleted or the token part of the… Discord 429 rate limitFix Discord webhook HTTP 429 "You are being rate limited" in CI - too many posts to one webhook. Honor retry_… Fastly purge 401 (bad Fastly-Key)Fix Fastly purge returning HTTP 401 "Provided credentials are missing or invalid" in CI - the Fastly-Key API… Fastly service version not activatedFix a Fastly config deploy that leaves the new service version inactive in CI - a cloned draft version was wr… Fastly surrogate-key purge has no effectFix a Fastly surrogate-key purge that returns 200 but does not clear content in CI - objects were never tagge… gajira-create field/project errorFix atlassian/gajira-create failures in CI - a wrong project key, unknown issuetype, or a required custom fie… gajira-login "Login failed"Fix atlassian/gajira-login failures in CI - the action needs JIRA_BASE_URL, JIRA_USER_EMAIL, and JIRA_API_TOK… gajira-transition "Missing issue"Fix atlassian/gajira-transition "Missing issue" in CI - the action found no issue key because gajira-find-iss… Grafana dashboard provisioning failedFix Grafana dashboard provisioning failures in CI - invalid dashboard JSON, a missing folder, or a bad provis… Grafana "Data source not found"Fix Grafana "Data source not found" in CI - a dashboard or API call references a datasource UID or name that… Grafana "401 Unauthorized"Fix Grafana HTTP API "401 Unauthorized" in CI - the request reached Grafana but the API token or service acco… "grafana-cli plugins install" failedFix "grafana-cli plugins install" failures in CI - the plugin id is wrong, the version is unavailable, or the… "connection refused" on 14268Fix Jaeger HTTP collector reporting failures on port 14268 in CI - the client posts spans to /api/traces but… "connection refused" on 6831Fix Jaeger client failures reporting to the agent on UDP 6831 in CI - no jaeger-agent listens on the compact-… Jira "customfield_XXXXX" wrongFix Jira "Field customfield_XXXXX cannot be set" in CI - the custom field id does not exist on the create/edi… "Issue key not found in branch"Fix "Issue key not found in commit or branch" in CI - the pipeline extracts a Jira key from Git metadata and… Jira deployment info "400"Fix Jira deployments API "400 Bad Request" in CI - the deployment payload is missing required fields or refer… Jira "value does not exist for the field"Fix Jira "The value X does not exist for the field Y" in CI - the option, component, or version you set is no… Jira "transition is not valid"Fix Jira "Transition id X is not valid for the current status" in CI - the transition is not available from t… Jira attachment "XSRF check failed"Fix Jira attachment upload failures in CI - the multipart request must send the X-Atlassian-Token: no-check h… Jira /rest/api/2 vs 3Fix Jira 404/400 from calling the wrong REST version in CI - Jira Cloud uses /rest/api/3 with ADF for rich te… Jira OAuth "token is expired"Fix Jira OAuth 2.0 "token is expired" and invalid_token errors in CI - the cached access token outlived its T… Jira "401 Unauthorized"Fix Jira REST "401 Unauthorized" in CI - the request reached Jira but the basic-auth header was missing, malf… Jira "403 Forbidden"Fix Jira REST "403 Forbidden" in CI - the credentials authenticated but the account lacks the project permiss… Jira "Issue does not exist"Fix Jira REST "404 Issue does not exist" in CI - the issue key in the request does not resolve, usually a wro… Jira "415 Unsupported Media Type"Fix Jira "415 Unsupported Media Type" in CI - the POST body is JSON but the request did not set Content-Type:… Jira "429 Too Many Requests"Fix Jira "429 Too Many Requests" in CI - the site rate limit was exceeded, so requests must back off and hono… Jira smart commits ignoredFix Jira smart commits that do nothing in CI - smart commits need the GitHub for Jira app connected and the e… Jira transition "field is required"Fix Jira "Field X is required" on a transition in CI - the transition has a screen that mandates a field (res… Jira webhook signature mismatchFix Jira automation webhook secret failures in CI - the receiver rejects the request because the shared secre… JQL "does not exist or no permission"Fix JQL "The field X does not exist or you do not have permission to view it" in CI - the JQL references a fi… Mailgun "Domain not found"Fix Mailgun "Domain not found" in CI - the domain in the messages URL is not registered, is misspelled, or be… Mailgun 401 ForbiddenFix Mailgun HTTP 401 Forbidden in CI - the API key is missing or wrong, or the basic-auth user is not "api".… Mailgun sandbox not authorizedFix Mailgun "not authorized to send to this recipient" from a sandbox domain in CI - sandbox domains only sen… Teams connector retiredFix Microsoft Teams notifications breaking after Office 365 connector retirement in CI - the old connector we… Teams 400 "Bad payload"Fix Microsoft Teams incoming webhook HTTP 400 "Bad payload received by generic incoming webhook" in CI - the… Netlify CLI "Not authorized to access this resource"Fix Netlify CLI deploy failing with "Not authorized to access this resource" in CI - NETLIFY_AUTH_TOKEN is mi… New Relic "API key ... invalid"Fix New Relic CLI / NerdGraph "API key invalid" in CI - the request was authenticated with a missing, wrong-t… New Relic "NRQL Syntax Error"Fix New Relic "NRQL Syntax Error" in CI - a NerdGraph or CLI query has invalid NRQL, so New Relic returns an… Notify step never firesFix a CI notification step that never fires because of a wrong if: condition - if: failure() skips when an ea… "context deadline exceeded"Fix OpenTelemetry OTLP "context deadline exceeded" in CI - the export timed out because the collector was slo… OTLP exporter "connection refused"Fix OpenTelemetry OTLP exporter "connection refused" in CI - the SDK or collector reached the host but nothin… "traces export: ... connection refused"Fix OpenTelemetry Go "traces export: ... connect: connection refused" in CI - the otlptrace exporter cannot r… "Failed to export spans"Fix OpenTelemetry Java "Failed to export spans. The request could not be executed. Connection refused" in CI… "Cannot find module '@opentelemetry/...'"Fix "Cannot find module '@opentelemetry/api'" (or sdk-node/auto-instrumentations) in CI - an OTel package is… "OTLPExporterError ... ECONNREFUSED"Fix OpenTelemetry JS "OTLPExporterError connect ECONNREFUSED 127.0.0.1:4317" in CI - the OTLP exporter has no… "existing ... TracerProvider" registrationFix OpenTelemetry JS "Registration of existing global tracer provider" warnings in CI - the SDK is registered… "resource detection failed"Fix OpenTelemetry JS resource-detector timeouts in CI - cloud/host detectors hang or fail because the metadat… SpanProcessor shutdown hangsFix an OpenTelemetry JS test process that will not exit in CI - a BatchSpanProcessor keeps an open exporter c… span.is_recording() is FalseFix OpenTelemetry Python spans that never record in CI - only the API is installed/registered, so the default… Resource attributes empty at read timeFix OpenTelemetry Python tests that read resource attributes before detectors finish in CI - the Resource is… "no such host" (OTLP endpoint)Fix OpenTelemetry "lookup ...: no such host" for OTEL_EXPORTER_OTLP_ENDPOINT in CI - the configured collector… "otelcol ... failed to load config"Fix OpenTelemetry Collector "failed to load config" / "cannot unmarshal the configuration" in CI - the collec… PagerDuty "invalid routing key"Fix PagerDuty Events API v2 HTTP 400 "invalid routing key" in CI - the routing_key is wrong or belongs to the… PagerDuty 429 rate limitedFix PagerDuty Events API HTTP 429 in CI - too many events for one routing key. Deduplicate with dedup_key and… pino transport keeps Jest aliveFix "Jest did not exit" caused by a pino transport in CI - a pino worker-thread transport (pino.transport / p… "has already been registered"Fix prom-client "A metric with the name ... has already been registered" in CI - a metric is created twice be… "Duplicated timeseries in CollectorRegistry"Fix prometheus_client "ValueError: Duplicated timeseries in CollectorRegistry" in CI - a metric is registered… "promtool check config" FAILEDFix "promtool check config" FAILED in CI - prometheus.yml has an invalid field, a bad scrape target, or a ref… "promtool check rules" FAILEDFix "promtool check rules" failures in CI - the rule file has a YAML or PromQL error, so promtool reports FAI… "could not parse expression"Fix promtool "could not parse expression: parse error" in CI - a PromQL query in a rule or test has a syntax… Docker to GHCRBuild and push a Docker image to GitHub Container Registry from GitHub Actions with Buildx, login, metadata t… SendGrid 400 Bad RequestFix SendGrid HTTP 400 Bad Request in CI - the mail/send JSON is missing a required field such as content, sub… SendGrid 401 "authorization required"Fix SendGrid HTTP 401 "authorization required" in CI - the API key is missing, wrong, or lacks the Bearer pre… SendGrid "verified Sender Identity"Fix SendGrid HTTP 403 "The from address does not match a verified Sender Identity" in CI - the from email or… "Invalid Sentry Dsn"Fix Sentry SDK "Invalid Sentry Dsn" / "Invalid DSN" during Sentry.init in CI - the DSN env var is empty or ma… Test suite sends events to SentryStop the Sentry SDK from sending real events during CI test runs - deliberately thrown test errors get captur… Sentry.close() flush blocks exitFix a CI test process that will not exit because the Sentry SDK transport is still flushing - close() blocks… "401 Authentication credentials were not provided"Fix sentry-cli "API request failed: 401 ... Authentication credentials were not provided" in CI - no auth tok… "403 ... project not found"Fix sentry-cli "403 Forbidden" / "A project with this slug does not exist" in CI - the token authenticated bu… "Auth token is required for this request"Fix sentry-cli "error: Auth token is required for this request" in CI - the CLI aborted before contacting Sen… "could not find any commits"Fix sentry-cli "could not find any commits" / "no commits found" when associating commits to a release in CI… "Source map could not be uploaded"Fix sentry-cli source map upload failures in CI - the CLI found no maps, the release was missing, or the arti… ServiceNow-Change action failsFix the ServiceNow DevOps Change GitHub action failing in CI - it needs the correct instance URL, tool id, an… ServiceNow "insufficient rights"Fix ServiceNow "Operation against file X was aborted, insufficient rights" in CI - the authenticated user lac… ServiceNow "required field" missingFix ServiceNow "Mandatory field missing" on a change request in CI - a data policy or the change model requir… ServiceNow "401 Unauthorized"Fix ServiceNow Table/Change API "401 Unauthorized" in CI - the request reached the instance but the basic-aut… Slack "invalid_auth"Fix the Slack API "invalid_auth" error in CI - the bot token is missing, expired, revoked, or not injected in… Slack 429 "rate_limited"Fix Slack API HTTP 429 "rate_limited" in CI - too many messages in a short window, often from a matrix build… Slack "channel_not_found"Fix the Slack API "channel_not_found" error in CI - the channel name or ID does not resolve for this token. U… Slack "not_in_channel"Fix the Slack API "not_in_channel" error in CI - chat.postMessage failed because the bot is not a member of t… Slack "invalid_payload"Fix the Slack incoming webhook "invalid_payload" error in CI - Slack rejected the request because the JSON bo… Slack "no_service"Fix the Slack incoming webhook "no_service" error in CI - Slack could not find the webhook because the URL is… Stale CDN cache after deployFix a CDN serving old assets after a successful deploy in CI - the pipeline uploaded new files but never inva… "ECONNREFUSED" on 8125Fix StatsD instrumentation in CI where UDP metrics on port 8125 go nowhere - the send is silent but a TCP hea… Twilio 20003 "Authenticate"Fix Twilio error 20003 "Authenticate" (HTTP 401) in CI - the Account SID or Auth Token is missing or wrong. S… Twilio 21211 invalid ToFix Twilio error 21211 "Invalid To Phone Number" in CI - the To number is not in E.164 format or is empty. Se… Twilio 21608 unverified numberFix Twilio error 21608 in CI - a trial account can only message verified numbers. Verify the recipient or upg… Vercel "The specified token is not valid"Fix Vercel CLI deploy failing with "The specified token is not valid. Use vercel login to generate a new toke… Stale build cache after deployFix a Vercel or Netlify deploy that ships stale output because the build cache was reused in CI - a cached st… "write EPIPE" from winston transportFix winston "Error: write EPIPE" in CI - a stream transport writes to a pipe whose reader closed, often when… Wrong Cache-Control makes purge look ineffectiveFix a case where a CDN purge runs but clients still see old assets in CI - immutable or long-lived Cache-Cont… "failed to report ... spans"Fix Zipkin reporter failures posting to /api/v2/spans on port 9411 in CI - no Zipkin server runs in the test…
Explore other topics