← 返回
安全合规 中文

GitHub Actions Rerun Effectiveness Audit

Audit GitHub Actions rerun dependency and success-after-rerun effectiveness to highlight workflows wasting CI time.
审计 GitHub Actions 的重跑依赖关系及重跑后成功率,以识别浪费 CI 时间的工作流。
daniellummis
安全合规 clawhub v1.0.0 1 版本 100000 Key: 无需
★ 0
Stars
📥 495
下载
💾 9
安装
1
版本
#latest

概述

GitHub Actions Rerun Effectiveness Audit

Use this skill to measure how often workflows require reruns and whether reruns are actually recovering failures.

What this skill does

  • Reads GitHub Actions run JSON exports
  • Tracks rerun episodes using workflow run id + attempt history
  • Measures rerun rate, rerun success rate, and extra rerun attempts
  • Estimates wasted rerun minutes from attempt durations
  • Emits severity (ok, warn, critical) for CI policy gates

Inputs

Optional:

  • RUN_GLOB (default: artifacts/github-actions/*.json)
  • TOP_N (default: 20)
  • OUTPUT_FORMAT (text or json, default: text)
  • GROUP_BY (workflow or workflow-branch, default: workflow)
  • FAILURE_CONCLUSIONS (comma-separated, default: failure,cancelled,timed_out,startup_failure,action_required)
  • SUCCESS_CONCLUSIONS (comma-separated, default: success)
  • MIN_RUNS (minimum workflow runs required, default: 4)
  • WARN_RERUN_RATE (0..1, default: 0.2)
  • CRITICAL_RERUN_RATE (0..1, default: 0.35)
  • WARN_RERUN_SUCCESS_RATE (0..1, default: 0.5)
  • CRITICAL_RERUN_SUCCESS_RATE (0..1, default: 0.25)
  • WARN_WASTED_MINUTES (default: 20)
  • CRITICAL_WASTED_MINUTES (default: 60)
  • WORKFLOW_MATCH / WORKFLOW_EXCLUDE (regex, optional)
  • BRANCH_MATCH / BRANCH_EXCLUDE (regex, optional)
  • EVENT_MATCH / EVENT_EXCLUDE (regex, optional)
  • REPO_MATCH / REPO_EXCLUDE (regex, optional)
  • ACTOR_MATCH / ACTOR_EXCLUDE (regex, optional)
  • FAIL_ON_CRITICAL (0 or 1, default: 0)

Collect run JSON

gh run view <run-id> --attempt <attempt> \
  --json databaseId,runAttempt,workflowName,event,headBranch,headSha,conclusion,createdAt,updatedAt,runStartedAt,url,repository,actor,triggeringActor \
  > artifacts/github-actions/run-<run-id>-attempt-<attempt>.json

Run

Text report:

RUN_GLOB='artifacts/github-actions/*.json' \
bash skills/github-actions-rerun-effectiveness-audit/scripts/rerun-effectiveness-audit.sh

JSON output + fail gate:

RUN_GLOB='artifacts/github-actions/*.json' \
OUTPUT_FORMAT=json \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-rerun-effectiveness-audit/scripts/rerun-effectiveness-audit.sh

Run against bundled fixtures:

RUN_GLOB='skills/github-actions-rerun-effectiveness-audit/fixtures/*.json' \
bash skills/github-actions-rerun-effectiveness-audit/scripts/rerun-effectiveness-audit.sh

Output contract

  • Exit 0 in report mode (default)
  • Exit 1 when FAIL_ON_CRITICAL=1 and one or more groups are critical
  • Text mode prints summary + ranked workflow groups
  • JSON mode prints summary + ranked groups + critical groups

版本历史

共 1 个版本

  • v1.0.0 当前
    2026-03-30 16:43 安全 安全

安全检测

腾讯云安全 (Keen)

安全,无风险
查看报告

腾讯云安全 (Sanbu)

安全,无风险
查看报告

🔗 相关推荐

security-compliance

Skill Vetter

spclaudehome
AI智能体技能安全预审工具。安装ClawdHub、GitHub等来源技能前,检查风险信号、权限范围及可疑模式。
★ 1,210 📥 265,994
security-compliance

OpenClaw Backup

alex3alex
备份与恢复 OpenClaw 数据。适用于创建备份、设置自动备份计划、从备份恢复或管理备份轮转。处理 ~/.openclaw 目录归档并包含适当的排除规则。
★ 89 📥 30,568
developer-tools

GitHub Actions Failure Matrix

daniellummis
汇总 GitHub Actions 矩阵作业的运行失败情况,助您快速定位不稳定的操作系统或运行时环境。
★ 0 📥 621