1de016dfeb
Some checks failed
Veza CI / Rust (Stream Server) (push) Successful in 3m40s
Security Scan / Secret Scanning (gitleaks) (push) Successful in 1m4s
E2E Playwright / e2e (full) (push) Failing after 14m36s
Veza CI / Backend (Go) (push) Failing after 17m6s
Veza CI / Frontend (Web) (push) Successful in 26m17s
Veza CI / Notify on failure (push) Successful in 7s
Two issues from run 430: 1. Health probe never produced a diagnosable signal. The script printed only `false` (jq output) and "Health response invalid" without the body or backend log, because Forgejo artifact upload is broken under GHES so /tmp/backend.log never made it out. Fix: poll instead of fixed sleep, always cat the health body, and tail backend.log on any non-ok status. 2. Redis auth never actually took effect. I had set REDIS_ARGS=--requirepass on the redis service expecting the redis:7-alpine entrypoint to pick it up. It does not — the entrypoint just execs whatever CMD is set, and act_runner services don't accept a `command:` field. So the service started without auth while the backend was sending a password in REDIS_URL → AUTH rejected → .status != "ok". Fix: drop auth on the CI redis service (the dev/prod REM-023 policy lives in docker-compose.yml; the CI service network is ephemeral and isolated), and change REDIS_URL accordingly. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| ci.yml | ||
| e2e.yml | ||
| go-fuzz.yml | ||
| security-scan.yml | ||
| trivy-fs.yml | ||