38.Docker and CI pipeline extraction

Name: Dembrandt
Author: Dembrandt

Developer

Overview

Chromium fails in Docker and most CI environments without --no-sandbox. Add this flag to any pipeline step that runs Dembrandt in a container.

Headless Chromium requires kernel-level sandboxing that is unavailable in most Docker containers and CI environments. Without --no-sandbox, the extraction crashes on startup. The flag disables the browser sandbox, which is safe in isolated container environments where the OS-level isolation already provides equivalent protection. Combine with --json-only to pipe the output directly into a file or another pipeline step without writing to disk.

Basic CI extraction

Terminal

dembrandt app.company.com --no-sandbox --json-only > tokens.json

Save output in CI

Terminal

dembrandt app.company.com --no-sandbox --save-output

GitHub Actions step

- name: Extract design tokens

run: |

npx dembrandt ${{ env.SITE_URL }} --no-sandbox --json-only > tokens.json

- name: Upload tokens

uses: actions/upload-artifact@v4

with:

name: design-tokens

path: tokens.json

Output

Successful extraction in Docker or CI. No sandbox crash.

More in Automation

39.Track token drift 40.CI/CD drift detection 41.Design drift detection in GitHub Actions

Browse all

All recipes →

43 workflows