End-to-end (security)
took 2m 59s Raw logs
Matrix: name: security, shard: security
Failed
The runner's container stopped before the job finished, without an exit code (the platform restarted or replaced it).
Set up job
Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@40d8a3d10e25Runner: image diffinery-runner:4d3bf17f06575e64ab4155b3, in muc01, WEUR, container 11c4b6a9ac5eb68add1ea29aa29091420dc5844730e02ce3f575e3fcab61bcf1Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), an earlier run of this job wasn't measured; runs-on: diffinery-large (or -medium, -small, -tiny) sets a sizeHost: AMD EPYC (family 25, model 17), 4 vCPUs, 2550 MHzWorkspace: /workspace/diffinery
Run actions/checkout@v41s
##[group]Run actions/checkout@v4##[endgroup]Syncing repository: codician/diffineryFetching the repository (depth 1)remote: Enumerating objects: 881, done. Receiving objects: 0% (1/881) Receiving objects: 1% (9/881) Receiving objects: 2% (18/881) Receiving objects: 3% (27/881) Receiving objects: 4% (36/881) Receiving objects: 5% (45/881) Receiving objects: 6% (53/881) Receiving objects: 7% (62/881) Receiving objects: 8% (71/881) Receiving objects: 9% (80/881) Receiving objects: 10% (89/881) Receiving objects: 11% (97/881) Receiving objects: 12% (106/881) Receiving objects: 13% (115/881) Receiving objects: 14% (124/881) Receiving objects: 15% (133/881) Receiving objects: 16% (141/881) Receiving objects: 17% (150/881) Receiving objects: 18% (159/881) Receiving objects: 19% (168/881) Receiving objects: 20% (177/881) Receiving objects: 21% (186/881) Receiving objects: 22% (194/881) Receiving objects: 23% (203/881) Receiving objects: 24% (212/881) Receiving objects: 25% (221/881) Receiving objects: 26% (230/881) Receiving objects: 27% (238/881) Receiving objects: 28% (247/881) Receiving objects: 29% (256/881) Receiving objects: 30% (265/881) Receiving objects: 31% (274/881) Receiving objects: 32% (282/881) Receiving objects: 33% (291/881) Receiving objects: 34% (300/881) Receiving objects: 35% (309/881) Receiving objects: 36% (318/881) Receiving objects: 37% (326/881) Receiving objects: 38% (335/881) Receiving objects: 39% (344/881) Receiving objects: 40% (353/881) Receiving objects: 41% (362/881) Receiving objects: 42% (371/881) Receiving objects: 43% (379/881) Receiving objects: 44% (388/881) Receiving objects: 45% (397/881) Receiving objects: 46% (406/881) Receiving objects: 47% (415/881) Receiving objects: 48% (423/881) Receiving objects: 49% (432/881) Receiving objects: 50% (441/881) Receiving objects: 51% (450/881) Receiving objects: 52% (459/881) Receiving objects: 53% (467/881) Receiving objects: 54% (476/881) Receiving objects: 55% (485/881) Receiving objects: 56% (494/881) Receiving objects: 57% (503/881) Receiving objects: 58% (511/881) Receiving objects: 59% (520/881) Receiving objects: 60% (529/881) Receiving objects: 61% (538/881) Receiving objects: 62% (547/881) Receiving objects: 63% (556/881) Receiving objects: 64% (564/881) Receiving objects: 65% (573/881) Receiving objects: 66% (582/881) Receiving objects: 67% (591/881) Receiving objects: 68% (600/881) Receiving objects: 69% (608/881) Receiving objects: 70% (617/881) Receiving objects: 71% (626/881) Receiving objects: 72% (635/881) Receiving objects: 73% (644/881) Receiving objects: 74% (652/881) Receiving objects: 75% (661/881) Receiving objects: 76% (670/881) Receiving objects: 77% (679/881) Receiving objects: 78% (688/881) Receiving objects: 79% (696/881) Receiving objects: 80% (705/881) Receiving objects: 81% (714/881) Receiving objects: 82% (723/881) Receiving objects: 83% (732/881) Receiving objects: 84% (741/881) Receiving objects: 85% (749/881) Receiving objects: 86% (758/881) Receiving objects: 87% (767/881) Receiving objects: 88% (776/881) Receiving objects: 89% (785/881) Receiving objects: 90% (793/881) Receiving objects: 91% (802/881) Receiving objects: 92% (811/881) Receiving objects: 93% (820/881) Receiving objects: 94% (829/881) Receiving objects: 95% (837/881) Receiving objects: 96% (846/881) Receiving objects: 97% (855/881) remote: Total 881 (delta 0), reused 881 (delta 0) Receiving objects: 98% (864/881) Receiving objects: 99% (873/881) Receiving objects: 100% (881/881) Receiving objects: 100% (881/881), 4.17 MiB | 24.80 MiB/s, done.From https://diffinery.com/codician/diffinery * [new ref] 40d8a3d10e25ad7f88784cce0a25b488ae47804b -> origin/diffinery-checkoutNote: switching to '40d8a3d10e25ad7f88784cce0a25b488ae47804b'.You are in 'detached HEAD' state. You can look around, make experimentalchanges and commit them, and you can discard any commits you make in thisstate without impacting any branches by switching back to a branch.If you want to create a new branch to retain commits you create, you maydo so (now or later) by using -c with the switch command. Example: git switch -c <new-branch-name>Or undo this operation with: git switch -Turn off this advice by setting config variable advice.detachedHead to falseHEAD is now at 40d8a3d Merge 955557599549aa315b8095a2797a0caa80c9de93 into f5b65344c0a10e839ae82ef669fe5a54c6dce9c1HEAD is now at 40d8a3d10e25ad7f88784cce0a25b488ae47804b
Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b11m 22s
Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1'##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1with: dest: ~/setup-pnpm run_install: null cache: false cache_dependency_path: pnpm-lock.yaml package_json_file: package.json standalone: false##[endgroup]##[group]Running self-installer...Progress: resolved 1, reused 0, downloaded 0, added 0Packages: +1+Progress: resolved 1, reused 0, downloaded 1, added 1, donedependencies:+ pnpm 10.28.0 (12.15.0 is available)Done in 833ms##[endgroup]Installation Completed!
Run actions/setup-node@v45s
##[group]Run actions/setup-node@v4with: node-version: 22 cache: pnpm##[endgroup]Found in cache @ 22.22.0 (pre-installed node satisfies '22')Cache Size: ~216 MB (226934503 B)Cache restored from key: node-cache-Linux-x64-pnpm-42d02c0263a3b5f911ed6ae8e9210922b97166ca02e60b2c70c55dfa1f00371b
Run pnpm install --frozen-lockfile3s
##[group]Run pnpm install --frozen-lockfile##[endgroup]Scope: all 8 workspace projectsLockfile is up to date, resolution step is skippedProgress: resolved 1, reused 0, downloaded 0, added 0Packages: +251++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Progress: resolved 251, reused 245, downloaded 0, added 250Progress: resolved 251, reused 245, downloaded 0, added 251, done.../node_modules/workerd postinstall$ node install.js.../esbuild@0.25.12/node_modules/esbuild postinstall$ node install.js.../esbuild@0.28.1/node_modules/esbuild postinstall$ node install.js.../node_modules/workerd postinstall$ node install.js.../esbuild@0.25.11/node_modules/esbuild postinstall$ node install.js.../node_modules/workerd postinstall: Done.../esbuild@0.25.12/node_modules/esbuild postinstall: Done.../esbuild@0.28.2/node_modules/esbuild postinstall$ node install.js.../esbuild@0.28.1/node_modules/esbuild postinstall: Done.../node_modules/workerd postinstall: Done.../esbuild@0.25.11/node_modules/esbuild postinstall: Done.../esbuild@0.28.2/node_modules/esbuild postinstall: DonedevDependencies:+ turbo 2.11.7+ typescript 5.9.3Done in 2.6s using pnpm v10.28.0
Run pnpm -r --if-present build3s
##[group]Run pnpm -r --if-present build##[endgroup]Scope: 7 of 8 workspace projectsapps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env nodeimport { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjscontainers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"apps/cli build: dist/diffinery.mjs 468.9kbapps/cli build: ⚡ Done in 28msapps/cli build: Donecontainers/runner build: dist/agent.mjs 684.1kbcontainers/runner build: ⚡ Done in 44mscontainers/runner build: Doneapps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KBapps/diffinery build: docs: 84 pages (+2 generated at runtime), 19 site pages, 11 images, CLI 0.1.0 (250 KiB), editor extension 0.1.1 (20 KiB), JetBrains plugin 0.1.0 (64 KiB), Claude Code plugins diffinery 0.1.3, diffinery-ci 0.2.3apps/diffinery build: Done
Run pnpm --filter @diffinery/app exec playwright install --with-deps chromium
Run as_root() { if [ "$(id -u)" = 0 ]; then "$@"; else sudo "$@"; fi; }
Run the shard's tests17h 58m
##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another.core='/e2e\.test\.mjs$'agents='/(agentic|review|tasks)\.test\.mjs$'# security.test.mjs, security-*.test.mjs (security-txt's too) and status.test.mjs.security='/(security(-[a-z-]+)?|status)\.test\.mjs$'# The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on# Diffinery's runners): two shards of their own, so no part of the file runs into node's# per-file timeout, which is the --test-timeout here.histories='^real histories:'large='^(large files|large pushes):'opts=(--test-timeout=600000)case "security" in core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;; histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;; large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;; agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;; security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;; *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;;esacecho "$files"# Two files at a time: each starts its own local server on its own port, database and# directory, so they don't share state, and a file's server mostly keeps one core busy.node --test --test-concurrency=2 "${opts[@]}" $files##[endgroup]test/e2e/security-limits.test.mjstest/e2e/security-txt.test.mjstest/e2e/security.test.mjstest/e2e/status.test.mjsTAP version 13# Subtest: security: environment reviewers hold a deploy job until a listed person approves, and nobody else canok 1 - security: environment reviewers hold a deploy job until a listed person approves, and nobody else can --- duration_ms: 31868.272413 type: 'test' ...# Subtest: security: adding someone by username sends an invitation, and they get access only once they acceptok 2 - security: adding someone by username sends an invitation, and they get access only once they accept --- duration_ms: 1083.921255 type: 'test' ...