Vendor682 problems· 14 reviewed

GitHub

682 incident problems in GitHub environments.

All problems (682)

CICD-1426A provenance upload step succeeds on Linux and fails on Windows self-hosted...A provenance upload step succeeds on Linux and fails on Windows self-hosted... focuses on Runner Hygiene and asks the reader to isolate the key signal in GitHub. Cross-platform provenance issues can come from filesystem metadata...CI/CDAdvanced13 minProCICD-1436A provenance upload succeeds and attestation fails on one Windows runner poolA provenance upload succeeds and attestation fails on one Windows runner pool focuses on Runner Hygiene and asks the reader to isolate the key signal in GitHub. Windows-specific alternate stream metadata can silently contaminate proven...CI/CDAdvanced13 minProCICD-1460A provenance verify step fails only on the alpine runnerProvenance verification fails only on alpine-based CI runners after a base image refresh.CI/CDAdvanced13 minProCICD-1345A remote Terraform plan succeeds and one module source keeps failingA remote Terraform plan succeeds and one module source keeps failing focuses on Identity And Access and asks the reader to isolate the key signal in GitHub. Remote runners can be correctly authenticated for one Git transport an...CI/CDIntermediate13 minProCICD-1424An Argo CD ApplicationSet rollout skips one clusterAn Argo CD ApplicationSet rollout skips one cluster focuses on Deployment Governance and asks the reader to isolate the key signal in GitHub. ApplicationSet gaps often come from brittle matrix joins on labels that are not part of th...CI/CDAdvanced13 minProCICD-1444An Argo CD ApplicationSet skips one clusterAn Argo CD ApplicationSet skips one cluster focuses on Deployment Governance and asks the reader to isolate the key signal in GitHub. ApplicationSet gaps often come from join logic anchored to bootstrap metadata no one considered p...CI/CDAdvanced13 minProCICD-1434An Argo CD ApplicationSet stops rendering one regionAn Argo CD ApplicationSet stops rendering one region focuses on Deployment Governance and asks the reader to isolate the key signal in GitHub. GitOps gaps often come from brittle joins on metadata produced by legacy bootstrap flows.CI/CDAdvanced13 minProCICD-1454An Argo CD sync wave looks correct and still deadlocksA GitOps rollout hangs only after a namespace policy mutator was introduced into the cluster.CI/CDAdvanced13 minProLINUX-1448An OpenSSH certificate login works on one bastion and fails on anotherCertificate auth fails only on one bastion that sources principals from a Windows-oriented helper.LinuxAdvanced13 minProCICD-1291A generated workflow fails only in one repoA repo adopts a shared deployment template and only later discovers cloud auth fails in the copied version.CI/CDIntermediate14 minProCICD-1347A GitHub Actions OIDC exchange fails only on scheduled runsAn organization standardizes deployment workflows and later discovers cloud auth fails only for schedules while push-based deploys continue working.CI/CDIntermediate14 minProCICD-1414A GitOps promotion pipeline signs manifests correctly and the admission...A GitOps promotion pipeline signs manifests correctly and the admission... focuses on Deployment Governance and asks the reader to isolate the key signal in GitHub. Signature verification failures can come from serializer drift...CI/CDAdvanced14 minProCICD-1305A module registry login works for terraform init but provider plugin downloads failA self-hosted runner can authenticate one Terraform phase and then immediately fails in a later plugin or module fetch step.CI/CDIntermediate14 minProCICD-1386A reusable workflow signs artifacts successfully and verification failsArtifact signing is introduced and later verification fails only on outputs emitted by one pool of self-hosted runners.CI/CDAdvanced14 minProSECURITY-1280A scanner still finds a revoked secretAn incident response rotation is complete and secret alerts keep resurfacing from old downloadable support outputs.SecurityIntermediate14 minProSECURITY-1294A secret was rotated everywhere but scanners keep finding itSecret rotation is complete and alerts continue from old CI logs or artifacts tied to a previous variable name.SecurityIntermediate14 minProCICD-1310A self-hosted runner wrapper update breaks relative volume mountsA self-hosted deployment job fails after a runner service or wrapper upgrade without any change to the compose file itself.CI/CDIntermediate14 minProCICD-1406A supply-chain attestation verifies on hosted runners and fails on one self...A supply-chain attestation verifies on hosted runners and fails on one self... focuses on Runner Hygiene and asks the reader to isolate the key signal in GitHub. Supply-chain verification can break on locale and formatting drift e...CI/CDAdvanced14 minProCICD-1404An Argo CD sync wave rollout never reaches the final jobAn Argo CD sync wave rollout never reaches the final job focuses on Deployment Governance and asks the reader to isolate the key signal in GitHub. Hook ordering bugs often appear when tooling mixes numeric and string comparisons for seemingly ident...CI/CDAdvanced14 minProCICD-024Manual approval gate skips production environment reviewManual approval gate skips production environment review is a hands-on troubleshooting drill. A workflow was expected to pause before production, but a condition mismatch causes the approval gate to be skipped. GitHub GitHub Actions Workflows needs to be checked by narrowing s...CI/CDBeginner14 minPro