GitHub Actions Mainline Health Audit

👤 daniellummis 📦 v1.4.0 ⭐ 4.4 ⬇️ 798 下载
🔒 IT运维与安全 免费

📖 技能介绍


name: github-actions-mainline-health-audit description: Audit GitHub Actions mainline branch reliability by scoring failure rate, consecutive failures, and stale-success risk for critical workflows. version: 1.4.0 metadata: {"openclaw":{"requires":{"bins":["bash","python3"]}}}


GitHub Actions Mainline Health Audit

Use this skill to detect unstable workflows on protected branches (main/master/release) before they silently degrade delivery confidence.

What this skill does

  • Reads GitHub Actions run JSON exports
  • Filters to mainline/protected branches (configurable regex)
  • Groups by repository + workflow + branch + event
  • Scores risk using:
  • failure rate
  • current consecutive failure streak
  • days since last successful run
  • Flags warning/critical groups based on configurable thresholds
  • Emits text or JSON output for CI checks and ops dashboards

Inputs

小葱技能站7w4.net发现了升级插件。

Optional: - RUN_GLOB (default: artifacts/github-actions/*.json) - TOP_N (default: 20) - OUTPUT_FORMAT (text or json, default: text) - MIN_RUNS (default: 2) - MAINLINE_BRANCH_MATCH (default: ^(main|master|release.*)$) - WORKFLOW_MATCH (regex, optional) - WORKFLOW_EXCLUDE (regex, optional) - EVENT_MATCH (regex, optional) - EVENT_EXCLUDE (regex, optional) - REPO_MATCH (regex, optional) - REPO_EXCLUDE (regex, optional) - HEAD_SHA_MATCH (regex, optional) - HEAD_SHA_EXCLUDE (regex, optional) - CONCLUSION_MATCH (regex, optional) - CONCLUSION_EXCLUDE (regex, optional) - RUN_ID_MATCH (regex, optional) - RUN_ID_EXCLUDE (regex, optional) - RUN_URL_MATCH (regex, optional) - RUN_URL_EXCLUDE (regex, optional) - FAIL_WARN_PERCENT (default: 20) - FAIL_CRITICAL_PERCENT (default: 40) - STALE_SUCCESS_DAYS (default: 7) - WARN_SCORE (default: 30) - CRITICAL_SCORE (default: 55) - FAIL_ON_CRITICAL (0 or 1, default: 0)

Collect run JSON

gh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,headSha,createdAt,updatedAt,startedAt,url,repository \
  > artifacts/github-actions/run-<run-id>.json

Run

Text report:

RUN_GLOB='artifacts/github-actions/*.json' \
MAINLINE_BRANCH_MATCH='^(main|release/.*)$' \
HEAD_SHA_MATCH='^[a-f0-9]{7,40}$' \
CONCLUSION_EXCLUDE='^(success)$' \
RUN_ID_MATCH='^50(0[1-5])$' \
MIN_RUNS=3 \
bash skills/github-actions-mainline-health-audit/scripts/mainline-health-audit.sh

JSON output with fail gate:

RUN_GLOB='artifacts/github-actions/*.json' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-mainline-health-audit/scripts/mainline-health-audit.sh

Run with bundled fixtures:

RUN_GLOB='skills/github-actions-mainline-health-audit/fixtures/*.json' \
bash skills/github-actions-mainline-health-audit/scripts/mainline-health-audit.sh

Output contract

  • Exit 0 in report mode (default)
  • Exit 1 when FAIL_ON_CRITICAL=1 and one or more groups are critical
  • Text mode prints summary + ranked mainline-risk groups
  • JSON mode prints summary + scored groups + critical group details

🤖 AI 评测

这个 Skill 质量不错,功能实用,能有效帮助检测 GitHub Actions 主线分支上的不稳定工作流。它的一大优点是配置灵活,可以按需过滤不同维度的数据。风险评分逻辑合理,综合考虑了失败率、连续失败和静默失败风险。代码有完整的输入校验,错误处理到位。不过它依赖 bash 和 python3 环境,对于完全非技术用户来说配置门槛略高。总体而言,是一个值得信赖的工具类 Skill。

📊 多维度评分

适应性4.6
规范性4.1
有效性4.7
可靠性4.5
可信度4.4

📁 包含文件 (9 个)

📄 SKILL.md 3 KB
📄 _meta.json 155 B
📄 fixtures/run-5001.json 313 B
📄 fixtures/run-5002.json 313 B
📄 fixtures/run-5003.json 313 B
📄 fixtures/run-5004.json 343 B
📄 fixtures/run-5005.json 345 B
📄 fixtures/run-5006.json 331 B
📄 scripts/mainline-health-audit.sh 16.4 KB