name: github-actions-commit-health-audit description: Audit GitHub Actions reliability by commit SHA to surface risky commits causing repeated workflow failures across branches. version: 1.0.0 metadata: {"openclaw":{"requires":{"bins":["bash","python3"]}}}

GitHub Actions Commit Health Audit

小葱技能7w4.net有更新，你可以访问看下。

Use this skill to find commits that repeatedly fail CI so teams can prioritize rollback, revert, or targeted fixes.

What this skill does

• Reads GitHub Actions run JSON exports
• Groups runs by repository + commit SHA
• Scores commit risk using failure rate, failed-run volume, and workflow spread
• Flags warning/critical commit hotspots
• Emits text or JSON output for CI checks and triage dashboards

Inputs

Optional: - RUN_GLOB (default: artifacts/github-actions/*.json) - TOP_N (default: 20) - OUTPUT_FORMAT (text or json, default: text) - MIN_RUNS (default: 2) - BRANCH_MATCH (regex, optional) - BRANCH_EXCLUDE (regex, optional) - WORKFLOW_MATCH (regex, optional) - WORKFLOW_EXCLUDE (regex, optional) - REPO_MATCH (regex, optional) - REPO_EXCLUDE (regex, optional) - SHA_MATCH (regex, optional) - SHA_EXCLUDE (regex, optional) - FAIL_WARN_PERCENT (default: 25) - FAIL_CRITICAL_PERCENT (default: 50) - WARN_SCORE (default: 35) - CRITICAL_SCORE (default: 60) - FAIL_ON_CRITICAL (0 or 1, default: 0)

Collect run JSON

gh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,headSha,createdAt,updatedAt,startedAt,url,repository \
  > artifacts/github-actions/run-<run-id>.json

Run

Text report:

RUN_GLOB='artifacts/github-actions/*.json' \
MIN_RUNS=3 \
bash skills/github-actions-commit-health-audit/scripts/commit-health-audit.sh

JSON output with fail gate:

RUN_GLOB='artifacts/github-actions/*.json' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-commit-health-audit/scripts/commit-health-audit.sh

Run with bundled fixtures:

RUN_GLOB='skills/github-actions-commit-health-audit/fixtures/*.json' \
bash skills/github-actions-commit-health-audit/scripts/commit-health-audit.sh

Output contract

• Exit 0 in report mode (default)
• Exit 1 when FAIL_ON_CRITICAL=1 and one or more commits are critical
• Text mode prints summary + ranked commit-risk groups
• JSON mode prints summary + scored groups + critical commit details

这是一款实用性强、配置灵活的 GitHub Actions 审计工具，能有效帮助团队发现频繁导致 CI 失败的“问题提交”。它的过滤选项丰富、支持多种输出格式，使用体验良好。代码结构清晰，错误处理到位，运行稳定可靠。主要缺点是文档中缺少对评分规则的解释，评分阈值对普通用户来说不够直观，初期配置时可能需要反复尝试才能找到合适的设置。总体而言质量良好，值得在 CI/CD 流程中部署使用。