End-to-end (security)
took 2m 5s Raw logs
Matrix: name: security, shard: security
Cancelled
cancelled by a newer run in the same concurrency group
Set up job
Diffinery runner: job e2e (End-to-end (security)) for codician/diffinery@ac9367d87591Runner: image diffinery-runner:aeeb9e24ddf78dd4d8e258a7, in cdg10, WEUR, container d23bf0183a2194a1bd8f398ede4e4bbca4999566d3f59e868e4177be7cf66a7eRunner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), an earlier run of this job wasn't measured; runs-on: diffinery-large (or -medium, -small, -tiny) sets a sizeWorkspace: /workspace/diffinery
Run actions/checkout@v41s
##[group]Run actions/checkout@v4##[endgroup]Syncing repository: codician/diffineryFetching the repository (depth 1)remote: Enumerating objects: 622, done. Receiving objects: 0% (1/622) Receiving objects: 1% (7/622) Receiving objects: 2% (13/622) Receiving objects: 3% (19/622) Receiving objects: 4% (25/622) Receiving objects: 5% (32/622) Receiving objects: 6% (38/622) Receiving objects: 7% (44/622) Receiving objects: 8% (50/622) Receiving objects: 9% (56/622) Receiving objects: 10% (63/622) Receiving objects: 11% (69/622) Receiving objects: 12% (75/622) Receiving objects: 13% (81/622) Receiving objects: 14% (88/622) Receiving objects: 15% (94/622) Receiving objects: 16% (100/622) Receiving objects: 17% (106/622) Receiving objects: 18% (112/622) Receiving objects: 19% (119/622) Receiving objects: 20% (125/622) Receiving objects: 21% (131/622) Receiving objects: 22% (137/622) Receiving objects: 23% (144/622) Receiving objects: 24% (150/622) Receiving objects: 25% (156/622) Receiving objects: 26% (162/622) Receiving objects: 27% (168/622) Receiving objects: 28% (175/622) Receiving objects: 29% (181/622) Receiving objects: 30% (187/622) Receiving objects: 31% (193/622) Receiving objects: 32% (200/622) Receiving objects: 33% (206/622) Receiving objects: 34% (212/622) Receiving objects: 35% (218/622) Receiving objects: 36% (224/622) Receiving objects: 37% (231/622) Receiving objects: 38% (237/622) Receiving objects: 39% (243/622) Receiving objects: 40% (249/622) Receiving objects: 41% (256/622) Receiving objects: 42% (262/622) Receiving objects: 43% (268/622) Receiving objects: 44% (274/622) Receiving objects: 45% (280/622) Receiving objects: 46% (287/622) Receiving objects: 47% (293/622) Receiving objects: 48% (299/622) Receiving objects: 49% (305/622) Receiving objects: 50% (311/622) Receiving objects: 51% (318/622) Receiving objects: 52% (324/622) Receiving objects: 53% (330/622) Receiving objects: 54% (336/622) Receiving objects: 55% (343/622) Receiving objects: 56% (349/622) Receiving objects: 57% (355/622) Receiving objects: 58% (361/622) Receiving objects: 59% (367/622) Receiving objects: 60% (374/622) Receiving objects: 61% (380/622) Receiving objects: 62% (386/622) Receiving objects: 63% (392/622) Receiving objects: 64% (399/622) Receiving objects: 65% (405/622) Receiving objects: 66% (411/622) Receiving objects: 67% (417/622) Receiving objects: 68% (423/622) Receiving objects: 69% (430/622) Receiving objects: 70% (436/622) Receiving objects: 71% (442/622) Receiving objects: 72% (448/622) Receiving objects: 73% (455/622) Receiving objects: 74% (461/622) Receiving objects: 75% (467/622) Receiving objects: 76% (473/622) Receiving objects: 77% (479/622) Receiving objects: 78% (486/622) Receiving objects: 79% (492/622) Receiving objects: 80% (498/622) Receiving objects: 81% (504/622) Receiving objects: 82% (511/622) Receiving objects: 83% (517/622) Receiving objects: 84% (523/622) Receiving objects: 85% (529/622) Receiving objects: 86% (535/622) Receiving objects: 87% (542/622) Receiving objects: 88% (548/622) Receiving objects: 89% (554/622) Receiving objects: 90% (560/622) Receiving objects: 91% (567/622) Receiving objects: 92% (573/622) Receiving objects: 93% (579/622) Receiving objects: 94% (585/622) Receiving objects: 95% (591/622) Receiving objects: 96% (598/622) remote: Total 622 (delta 0), reused 622 (delta 0) Receiving objects: 97% (604/622) Receiving objects: 98% (610/622) Receiving objects: 99% (616/622) Receiving objects: 100% (622/622) Receiving objects: 100% (622/622), 2.54 MiB | 13.20 MiB/s, done.From https://diffinery.com/codician/diffinery * [new ref] ac9367d87591d621114311a795541039fd963b1d -> origin/diffinery-checkoutNote: switching to 'ac9367d87591d621114311a795541039fd963b1d'.You are in 'detached HEAD' state. You can look around, make experimentalchanges and commit them, and you can discard any commits you make in thisstate without impacting any branches by switching back to a branch.If you want to create a new branch to retain commits you create, you maydo so (now or later) by using -c with the switch command. Example: git switch -c <new-branch-name>Or undo this operation with: git switch -Turn off this advice by setting config variable advice.detachedHead to falseHEAD is now at ac9367d Merge 786b5065041b296b1c7b69ba3728d5cee12d8b83 into c74f242352b9c6271ed267578eb3ec312700c90dHEAD is now at ac9367d87591d621114311a795541039fd963b1d
Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b14s
Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1'##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1with: dest: ~/setup-pnpm run_install: null cache: false cache_dependency_path: pnpm-lock.yaml package_json_file: package.json standalone: false##[endgroup]##[group]Running self-installer...Progress: resolved 1, reused 0, downloaded 0, added 0Packages: +1+Progress: resolved 1, reused 0, downloaded 1, added 0Progress: resolved 1, reused 0, downloaded 1, added 1, donedependencies:+ pnpm 10.28.0 (12.14.0 is available)Done in 2.2s##[endgroup]Installation Completed!
Run actions/setup-node@v411s
##[group]Run actions/setup-node@v4with: node-version: 22 cache: pnpm##[endgroup]Found in cache @ 22.22.0 (pre-installed node satisfies '22')Cache Size: ~216 MB (226515969 B)Cache restored from key: node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0
Run pnpm install --frozen-lockfile19s
##[group]Run pnpm install --frozen-lockfile##[endgroup]Scope: all 7 workspace projectsLockfile is up to date, resolution step is skippedProgress: resolved 1, reused 0, downloaded 0, added 0Packages: +249++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Progress: resolved 249, reused 243, downloaded 0, added 162Progress: resolved 249, reused 243, downloaded 0, added 249, donedevDependencies:+ turbo 2.11.7+ typescript 5.9.3Done in 18.9s using pnpm v10.28.0
Run pnpm -r --if-present build3s
##[group]Run pnpm -r --if-present build##[endgroup]Scope: 6 of 7 workspace projectsapps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env nodeimport { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjscontainers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"containers/runner build: dist/agent.mjs 665.1kbcontainers/runner build: ⚡ Done in 245mscontainers/runner build: Doneapps/cli build: dist/diffinery.mjs 444.7kbapps/cli build: ⚡ Done in 284msapps/cli build: Doneapps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KBapps/diffinery build: docs: 65 pages (+2 generated at runtime), CLI 0.1.0 (234 KiB)apps/diffinery build: Done
Run pnpm --filter @diffinery/app exec playwright install --with-deps chromium
Run as_root() { if [ "$(id -u)" = 0 ]; then "$@"; else sudo "$@"; fi; }
Run the shard's tests250h 32m
##[group]Run # Shards of similar length; a new test file runs in "rest" unless it's added to another.core='/e2e\.test\.mjs$'agents='/(agentic|review|tasks)\.test\.mjs$'security='/(security|status)\.test\.mjs$'# The core file's real histories and large pushes take minutes each (jquery's alone 2 to 3 on# Diffinery's runners): two shards of their own, so no part of the file runs into node's# per-file timeout, which is the --test-timeout here.histories='^real histories:'large='^(large files|large pushes):'opts=(--test-timeout=600000)case "security" in core) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-skip-pattern="$histories" --test-skip-pattern="$large") ;; histories) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts=(--test-timeout=900000 --test-name-pattern="$histories") ;; large) files=$(ls test/e2e/*.test.mjs | grep -E "$core"); opts+=(--test-name-pattern="$large") ;; agents) files=$(ls test/e2e/*.test.mjs | grep -E "$agents") ;; security) files=$(ls test/e2e/*.test.mjs | grep -E "$security") ;; *) files=$(ls test/e2e/*.test.mjs | grep -vE "$core|$agents|$security") ;;esacecho "$files"node --test --test-concurrency=1 "${opts[@]}" $files##[endgroup]test/e2e/security.test.mjstest/e2e/status.test.mjsTAP version 13# Subtest: security: search, required checks, environments, reviews, locks, archives, drafts and tree namesok 1 - security: search, required checks, environments, reviews, locks, archives, drafts and tree names --- duration_ms: 57756.863821 type: 'test' ...# Subtest: security: organization admins can't hand out ownershipok 2 - security: organization admins can't hand out ownership --- duration_ms: 222.532802 type: 'test' ...# Subtest: security: anonymous writes, token scopes, agent secrets, merge rules and draftsok 3 - security: anonymous writes, token scopes, agent secrets, merge rules and drafts --- duration_ms: 3552.374148 type: 'test' ...# Subtest: security: push protection covers commits made without gitok 4 - security: push protection covers commits made without git --- duration_ms: 734.38081 type: 'test' ...