fix(trigger): publish worker env from Secrets Manager instead of the build machine #30510
waleedlatif1ci.yml
on: pull_request
Detect Version
Migrate Dev DB
/
Apply Database Migrations
Detect Desktop Changes
Matrix: Build AMD64
Matrix: Build ARM64 (GHCR Only)
Matrix: Test and Build / test-shard
Test and Build
/
Lint and Test
1m 56s
Test and Build
/
Build App
2m 32s
Check Docs Changes
Matrix: Build Dev ECR
Deploy Trigger.dev (Dev)
Matrix: Create GHCR Manifests
Process Docs
/
Process Documentation Embeddings
Prune Desktop Prereleases
0s
Matrix: Attest Images
Desktop Release
/
Build, Sign, Notarize
Annotations
6 errors and 9 warnings
|
Test and Build / Lint and Test
Process completed with exit code 1.
|
|
lib/core/config/trigger-env-sync.test.ts > resolveTriggerEnvVars > falls back to constants instead of rejecting when the secret cannot be read:
apps/sim/lib/core/config/trigger-env-sync.ts#L155
Error: Failed to read /production/sim/env-vars: AccessDeniedException. SIM_TRIGGER_ENV_SYNC_REQUIRED is set, so this deploy must not publish a partial worker environment.
❯ unavailable lib/core/config/trigger-env-sync.ts:155:11
❯ Module.resolveTriggerEnvVars lib/core/config/trigger-env-sync.ts:127:12
❯ lib/core/config/trigger-env-sync.test.ts:134:22
|
|
lib/core/config/trigger-env-sync.test.ts > resolveTriggerEnvVars > publishes constants only for an unmapped environment, without reading a secret:
apps/sim/lib/core/config/trigger-env-sync.ts#L155
Error: No secret is mapped for Trigger.dev environment "dev". SIM_TRIGGER_ENV_SYNC_REQUIRED is set, so this deploy must not publish a partial worker environment.
❯ unavailable lib/core/config/trigger-env-sync.ts:155:11
❯ Module.resolveTriggerEnvVars lib/core/config/trigger-env-sync.ts:120:12
❯ lib/core/config/trigger-env-sync.test.ts:127:28
|
|
lib/core/config/trigger-env-sync.test.ts > resolveTriggerEnvVars > clears nothing when the secret could not be read, having no authority to clear against:
apps/sim/lib/core/config/trigger-env-sync.ts#L155
Error: Failed to read /production/sim/env-vars: AccessDeniedException. SIM_TRIGGER_ENV_SYNC_REQUIRED is set, so this deploy must not publish a partial worker environment.
❯ unavailable lib/core/config/trigger-env-sync.ts:155:11
❯ Module.resolveTriggerEnvVars lib/core/config/trigger-env-sync.ts:127:12
❯ lib/core/config/trigger-env-sync.test.ts:95:22
|
|
Test and Build / Lint and Test
@sim/app#test: command (/home/runner/_work/sim/sim/apps/sim) /home/runner/.bun/bin/bun run test exited (1)
|
|
Test and Build / Lint and Test
Process completed with exit code 1.
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
- Step: unknown (failed)
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
- Step: unknown (failed)
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|
|
Test and Build / Lint and Test
Skipping sticky disk commit due to previous step failures
|
|
Test and Build / Lint and Test
- Step: unknown (failed)
|
|
Test and Build / Lint and Test
Found 2 failed/cancelled steps in previous workflow steps
|