CI/CD Workflow Debugging
47 incident problems about CI/CD Workflow Debugging. Start with the reviewed ones.
Read first
When the CI cache restores the wrong dependency graphAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when package.json, the lockfile, and artifacts no longer agree even after a cache hit.CI/CD3 min readWhen GitHub Actions succeeds but only the rollout failsAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when the build logs look fine but the failure surfaces only on the target deploy cluster or runtime.CI/CD3 min readThe checking order when GitHub Actions succeeds but only the deploy failsAn InfraTree guide that lays out the first signals to check, the CLI verification order, common misdiagnoses, and a safe recovery path when the workflow is green but the failure happens only in the rollout, promotion, or health check stage.CI/CD3 min read
Recommended problems
Reviewed problems first, then problems with detailed scenarios.
CICD-109Self-hosted runner label matches the build queue but the runner misses the Docker socket mount and image builds fail only thereThe job lands on the intended runner group, yet one fleet member lacks the host capability the workflow assumes every labeled runner provides.ReviewedCI/CDIntermediate16 minFreenpm ci fails with EUSAGE: only the PR that edited package.jsonnpm ci fails with EUSAGE: only the PR that edited package.json is a hands-on troubleshooting drill. Fix the lock file when npm ci refuses to install. ci-cd-workflow-debugging needs to be checked by narrowing scope, recent change, and the current live signal before rollback. 실무...ReviewedCI/CDBeginner3 minFree
All problems (47)
npm ci fails with EUSAGE: only the PR that edited package.jsonnpm ci fails with EUSAGE: only the PR that edited package.json is a hands-on troubleshooting drill. Fix the lock file when npm ci refuses to install. ci-cd-workflow-debugging needs to be checked by narrowing scope, recent change, and the current live signal before rollback. 실무...ReviewedCI/CDBeginner3 minFreeCICD-109Self-hosted runner label matches the build queue but the runner misses the Docker socket mount and image builds fail only thereThe job lands on the intended runner group, yet one fleet member lacks the host capability the workflow assumes every labeled runner provides.ReviewedCI/CDIntermediate16 minFreeCICD-098Maven cache reuse hides a repository auth failure until the monthly cache eviction windowBuilds appear stable for weeks, then all fail at once because the dependency cache had been masking a broken repository credential path.CI/CDIntermediate15 minFreeCICD-095Release branch hotfix bypasses the migration stepThe deployment is green, but the hotfix runs against an old schema because the branch-specific trigger skipped the migration workflow.CI/CDIntermediate17 minFreeCICD-092GitHub Actions reusable workflow loses required secretsThe shared pipeline is healthy overall, but one repository fails because the caller stopped forwarding the secret set the workflow expects.CI/CDIntermediate16 minFreeCICD-074Helm values schema rejects a CI overrideThe chart and environment variable both look right in isolation, but the rendered upgrade fails because the pipeline injects a quoted string where the schema expects a boolean.CI/CDIntermediate16 minFreeCICD-086Monorepo path filter skips the shared library change and one service deploys without rebuildingThe workflow optimization seems valid, but one service ships stale code because its dependency lives outside the path pattern that triggers rebuilds.CI/CDIntermediate16 minFreeCICD-077GitHub Actions artifact download fails on self-hosted runnersThe workflow is correct, but only one runner cannot fetch artifacts because its local time drift makes a short-lived signed URL look expired immediately.CI/CDIntermediate17 minFreeCICD-082Build cache hides a broken transitive dependency until a clean runner finally fails in production weekMost builds stay green, but a later clean environment fails because the cache had been masking a missing or incompatible transitive dependency path.CI/CDIntermediate18 minFreeCICD-062Reusable GitHub workflow call fails after the default branch renameWorkflows on the main pipeline still run, but the shared reusable workflow is no longer resolved because the referenced branch and published ref policy drifted apart.CI/CDIntermediate18 minFreeCICD-117Webhook filters only trigger on merge queue branches and hotfix tags skip the production deployment workflow entirelyNormal merges deploy correctly, but emergency releases never enter the deploy pipeline because the event filter no longer matches tag-based flows.CI/CDIntermediate14 minFreeCICD-124A monorepo path filter skips the shared library hotfix, and only services outside the touched directory keep shipping the vulnerable packageThe PR diff looks narrow, but the actual dependency graph is wider than the changed path filter acknowledges.CI/CDIntermediate15 minFreeCICD-119Build jobs pin Node 20 while deploy jobs still render assets on Node 18 and checksum validation fails at release timeThe same commit produces different asset bundles depending on which stage builds them because the toolchain version is not truly centralized.CI/CDIntermediate16 minFreeCICD-106Matrix test sharding skips the failing packageThe aggregate workflow passes, but one package never runs in CI after a sharding rule change silently excludes it from every matrix segment.CI/CDIntermediate16 minFreeCICD-142A reusable workflow updates its permissions block, but the caller workflow still downgrades the token scope and deployment cannot assume the cloud roleThe shared workflow looks fixed, yet the effective identity is still too narrow because the caller constrains it further.CI/CDAdvanced18 minProCICD-094Argo CD sync succeeds but a namespace label policy silently strips the network exemption labelThe app is deployed cleanly, yet the workload breaks because a cluster policy rewrites the namespace labels the app depends on for networking.CI/CDAdvanced18 minProCICD-102OIDC exchange fails only in reusable workflowsA shared workflow refactor succeeds for linting but deployment breaks because the federated identity provider expects a different token audience than the child workflow emits.CI/CDAdvanced18 minProCICD-168A reusable workflow assumes a broader OIDC scope than the caller actually grants during a failover rehearsalThe shared logic is valid, but the effective token permissions are still narrower than the deployment step needs. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.CI/CDAdvanced19 minProCICD-089Multi-account deployment role trusts the pipeline account but not the delegated tooling role session name patternCross-account deploys worked before, but now fail because the trust policy still allows the source account while denying the actual delegated session identity format.CI/CDAdvanced20 minProCICD-069OIDC deploy role works on push events but fails on workflow_call reuseThe repository already deploys successfully on direct pushes, but the reusable workflow path now fails because the token subject pattern no longer matches the calling context.CI/CDAdvanced20 minPro