Skip to content

Merge pull request #1598 : remove conflicting codeql stages in pipelines #426

Merge pull request #1598 : remove conflicting codeql stages in pipelines

Merge pull request #1598 : remove conflicting codeql stages in pipelines #426

Triggered via push April 22, 2026 08:50
Status Failure
Total duration 42m 20s
Artifacts 10

push.yaml

on: push
Site unit tests
1m 43s
Site unit tests
Server unit tests
44s
Server unit tests
Desktop unit tests
1m 15s
Desktop unit tests
Build latest docker
34m 15s
Build latest docker
Desktop e2e smokes
2m 8s
Desktop e2e smokes
Upload to Heroku
4m 41s
Upload to Heroku
Site e2e smokes
1m 42s
Site e2e smokes
Local site zap scan
1m 45s
Local site zap scan
Scan image with Trivy
36s
Scan image with Trivy
Windows desktop build test
5m 34s
Windows desktop build test
MacOS desktop build test
4m 14s
MacOS desktop build test
Linux desktop build test
4m 15s
Linux desktop build test
Linux snap build test
2m 19s
Linux snap build test
Browserstack smoke test
Browserstack smoke test
SBOM combiner test
7s
SBOM combiner test
Fit to window
Zoom out
Zoom in

Annotations

1 error and 4 warnings
Upload to Heroku
Error: Command failed: heroku container:push web --app threatdragon-v2 › Warning: heroku update available from 11.2.0 to 11.3.0. #0 building with "default" instance using docker driver #1 [internal] load build definition from Dockerfile #1 transferring dockerfile: 2.70kB done #1 DONE 0.0s #2 [internal] load metadata for docker.io/library/node:24.14.1-alpine #2 ... #3 [internal] load metadata for docker.io/library/ruby:4.0-slim-bookworm #3 DONE 0.3s #2 [internal] load metadata for docker.io/library/node:24.14.1-alpine #2 DONE 0.3s #4 [internal] load .dockerignore #4 transferring context: 416B done #4 DONE 0.0s #5 [base-node 1/5] FROM docker.io/library/node:24.14.1-alpine@sha256:8510330d3eb72c804231a834b1a8ebb55cb3796c3e4431297a24d246b8add4d5 #5 DONE 0.0s #6 [build-docs 1/8] FROM docker.io/library/ruby:4.0-slim-bookworm@sha256:63220653a4d5b21a0d9325b1de6805d7977b7f4f25a88746d984265ae2fd11cc #6 DONE 0.0s #7 [internal] load build context #7 transferring context: 23.09kB 0.0s done #7 DONE 0.0s #8 [build 13/15] RUN npm run build #8 CACHED #9 [stage-3 3/7] COPY --chown=node:node ./td.server/package-lock.json ./td.server/package.json ./td.server/ #9 CACHED #10 [build 7/15] COPY ./td.vue/src/ ./td.vue/src/ #10 CACHED #11 [stage-3 5/7] COPY --chown=node:node --from=build /app/td.server/dist ./td.server/dist #11 CACHED #12 [build 9/15] COPY ./td.vue/*.config.js ./td.vue/ #12 CACHED #13 [base-node 4/5] RUN npm i -g npm@latest #13 CACHED #14 [build-docs 3/8] WORKDIR /td.docs #14 CACHED #15 [stage-3 6/7] COPY --chown=node:node --from=build /app/td.vue/dist ./dist #15 CACHED #16 [build 11/15] RUN cd td.server && npm clean-install #16 CACHED #17 [build 5/15] COPY ./td.server/.babelrc ./td.server/ #17 CACHED #18 [build 14/15] RUN cd td.server && npm run make-sbom #18 CACHED #19 [stage-3 2/7] COPY --chown=node:node --from=build /app/boms /app/boms #19 CACHED #20 [build-docs 7/8] COPY docs/ . #20 CACHED #21 [build 12/15] RUN cd td.vue && npm clean-install --legacy-peer-deps #21 CACHED #22 [base-node 3/5] WORKDIR /app #22 CACHED #23 [build 8/15] COPY ./td.vue/public/ ./td.vue/public/ #23 CACHED #24 [build-docs 8/8] RUN bundle exec jekyll build -b docs/ #24 CACHED #25 [build-docs 5/8] COPY docs/Gemfile.lock Gemfile.lock #25 CACHED #26 [build 15/15] RUN cp td.server/sbom.json boms/threat-dragon-server-bom.json && cp td.server/sbom.xml boms/threat-dragon-server-bom.xml && cp td.vue/dist/.sbom/bom.json boms/threat-dragon-site-bom.json && cp td.vue/dist/.sbom/bom.xml boms/threat-dragon-site-bom.xml #26 CACHED #27 [stage-3 1/7] COPY --chown=node:node --from=build-docs /td.docs/_site /app/docs #27 CACHED #28 [build 6/15] COPY ./td.server/src/ ./td.server/src/ #28 CACHED #29 [stage-3 4/7] RUN cd td.server && npm clean-install --omit dev --ignore-scripts #29 CACHED #30 [build 3/15] COPY ./td.server/package-lock.json ./td.server/package.json ./td.server/ #30 CACHED #31 [build-docs 4/8] COPY docs/Gemfile Gemfile #31 CACHED #32 [build 10/15] RUN npm clean-install --ignore-scripts #32 CACHED #33 [build-docs 6/8] RUN bundle install #33 CACHED #34 [build-docs 2/8] RUN apt-get update && apt-get install -y --no-install-recommends build-essential && rm -rf /var/lib/apt/lists/* #34 CACHED #35 [base-node 2/5] RUN apk -U upgrade #35 CACHED #36 [build 1/15] RUN mkdir -p boms td.server td.vue td.vue/src/service/schema/api_json #36 CACHED #37 [build 2/15] COPY package-lock.json package.json /app/ #37 CACHED #38 [base-node 5/5] RUN chown -R node:node /app #38 CACHED #39 [build 4/15] COPY ./td.vue/package-lock.json ./td.vue/package.json ./td.vue/ #39 CACHED #40 [stage-3 7/7] COPY --chown=node:node ./td.server/index.js ./td.server/index.js #40 CACHED #41 exporting to
Build latest docker
Unexpected input(s) 'install', valid inputs are ['version', 'driver', 'driver-opts', 'buildkitd-flags', 'buildkitd-config', 'buildkitd-config-inline', 'use', 'name', 'endpoint', 'platforms', 'append', 'keep-state', 'cache-binary', 'cleanup']
Build latest docker
Unexpected input(s) 'install', valid inputs are ['version', 'driver', 'driver-opts', 'buildkitd-flags', 'buildkitd-config', 'buildkitd-config-inline', 'use', 'name', 'endpoint', 'platforms', 'append', 'keep-state', 'cache-binary', 'cleanup']
Scan image with Trivy
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Upload to Heroku
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: akhileshns/heroku-deploy@e3eb99d45a8e2ec5dca08735e089607befa4bf28. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
OWASP~threat-dragon~BSKT7F.dockerbuild
104 KB
sha256:126459be9554443852cb7bb5cef5c965e641fdb07e2e396a1a66e6fa5c835e57
OWASP~threat-dragon~Z4JUVO.dockerbuild
111 KB
sha256:51504375f987c839261933640e8629f13703a2db0ef53af3d12e8068da02a929
sboms
212 KB
sha256:319ec4429928180ff1f5016878d891dd84ec36b872187e89a58b03fe830ab16f
sboms-container-image-app
110 KB
sha256:e09ad35daf1a9e6df08aafaad306f8fcfa1fac62f52bb6e802e6c2dbcde2072e
sboms-desktop-linux-site
11.2 KB
sha256:301d3b4ae1993227517bcf71abde0cca241b3332d8bbbdec9cd469e7ccaf8c28
sboms-desktop-linux-snap-site
11.1 KB
sha256:8fb5eca97845263b9f545f9a0ad54e54c9eb6f6836a50d02652768ba1e1e2c2d
sboms-desktop-macos-site
11.1 KB
sha256:e00d7c250098ea6f26669cc0b4b34535df6a2e92da48273146f6cc73899195ee
sboms-desktop-windows-site
11.2 KB
sha256:94254d5d8ee44f23dcaf0a34f177456ca82850d15b4637fc1d6cdbbe81634f4d
sboms-server
56.7 KB
sha256:23a89749a3b63f6e0fce9eee18207b9457461c939c544419c7621a8aee6141e7
zap-scan-push
28.2 KB
sha256:48d63d65b0a7a266e3a2e388de77bebf065baf52f1480c3627771aad6a07b76e