GitHub Actions PR Gate Health Audit — 技能

技能详情（站内镜像，无评论）

Audit pull-request and merge-queue GitHub Actions reliability by scoring failure rate, queue latency, and stale-success risk for merge gates.

开发与 DevOps

作者：Daniel Lummis @daniellummis

许可证：MIT-0

MIT-0 ·免费使用、修改和重新分发。无需归因。

版本：v1.0.0

统计：⭐ 0 · 166 · 0 current installs · 0 all-time installs

⭐ 0

安装量（当前） 0

🛡 VirusTotal ：良性 · OpenClaw ：良性

Package：daniellummis/github-actions-pr-gate-health-audit

安全扫描（ClawHub）

VirusTotal ：良性
OpenClaw ：良性

OpenClaw 评估

The skill is internally consistent with its stated purpose (local analysis of GitHub Actions run JSON exports); it reads and scores run artifacts and does not request secrets or perform network exfiltration, though the docs reference the GitHub CLI without declaring it as a required binary.

目的

Name/description claim to analyze GitHub Actions run JSONs; the included script reads JSON files, computes failure/queue/staleness metrics, and emits text/JSON reports. Required binaries (bash, python3) match the actual implementation. No unrelated credentials or system paths are requested.

说明范围

SKILL.md documents a convenient step using the 'gh' CLI to export runs (gh run view ...). The runtime script itself only reads local JSON files (RUN_GLOB) and does not invoke the network. The manifest does not declare 'gh' as a required binary or any auth requirement; if you follow the suggested 'gh' collect step, you will need the GitHub CLI and its authentication (not declared). Otherwise, you must supply the run JSON artifacts beforehand.

安装机制

This is instruction-only with an included shell+python script; there is no install spec, no downloads, and nothing will be written to disk beyond reading the JSON artifacts and whatever output the script produces.

证书

The skill declares no required environment variables or credentials and the script uses only optional input variables (RUN_GLOB, OUTPUT_FORMAT, thresholds, regex filters). No secrets are requested and the script does not access other env vars or config files.

持久

always is false and the skill does not request persistent presence or modify agent-wide settings. It does not store credentials or alter other skills.

综合结论

This tool analyzes local GitHub Actions run JSON files and appears to do only that. Before installing/using it, note: (1) SKILL.md shows an example using the 'gh' CLI to collect run JSONs — the script does not call 'gh' itself and the manifest does not list 'gh' as required, so you must either run 'gh' yourself (which requires the GitHub CLI and auth) or collect artifacts by other means; (2) review the RUN_GLOB location you provide so it only …

安装（复制给龙虾 AI）

将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「GitHub Actions PR Gate Health Audit」。简介：Audit pull-request and merge-queue GitHub Actions reliability by scoring failur…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/daniellummis/github-actions-pr-gate-health-audit/SKILL.md
（来源：yingzhi8.cn 技能库）

SKILL.md

打开原始 SKILL.md（GitHub raw）

---
name: github-actions-pr-gate-health-audit
description: Audit pull-request and merge-queue GitHub Actions reliability by scoring failure rate, queue latency, and stale-success risk for merge gates.
version: 1.0.0
metadata: {"openclaw":{"requires":{"bins":["bash","python3"]}}}
---

# GitHub Actions PR Gate Health Audit

Use this skill to detect unreliable pull-request merge gates before they block developers or hide degraded CI health.

## What this skill does
- Reads GitHub Actions run JSON exports
- Filters to PR/merge-gate events by default (`pull_request`, `pull_request_target`, `merge_group`)
- Groups by repository + workflow + event
- Scores risk using:
  - failure rate
  - consecutive current failures
  - average queue wait before run start
  - days since last successful run
- Flags warning/critical groups via configurable thresholds
- Emits text or JSON output for CI gates and operational dashboards

## Inputs
Optional:
- `RUN_GLOB` (default: `artifacts/github-actions/*.json`)
- `TOP_N` (default: `20`)
- `OUTPUT_FORMAT` (`text` or `json`, default: `text`)
- `MIN_RUNS` (default: `2`)
- `EVENT_MATCH` (default: `^(pull_request|pull_request_target|merge_group)$`)
- `WORKFLOW_MATCH` (regex, optional)
- `WORKFLOW_EXCLUDE` (regex, optional)
- `REPO_MATCH` (regex, optional)
- `REPO_EXCLUDE` (regex, optional)
- `FAIL_WARN_PERCENT` (default: `15`)
- `FAIL_CRITICAL_PERCENT` (default: `30`)
- `QUEUE_WARN_SECONDS` (default: `120`)
- `QUEUE_CRITICAL_SECONDS` (default: `300`)
- `SUCCESS_STALE_DAYS` (default: `3`)
- `WARN_SCORE` (default: `25`)
- `CRITICAL_SCORE` (default: `45`)
- `FAIL_ON_CRITICAL` (`0` or `1`, default: `0`)

## Collect run JSON

```bash
gh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,headSha,createdAt,runStartedAt,updatedAt,url,repository 
  > artifacts/github-actions/run-<run-id>.json
```

## Run

Text report:

```bash
RUN_GLOB='artifacts/github-actions/*.json' 
EVENT_MATCH='^(pull_request|merge_group)$' 
MIN_RUNS=3 
bash skills/github-actions-pr-gate-health-audit/scripts/pr-gate-health-audit.sh
```

JSON output with fail gate:

```bash
RUN_GLOB='artifacts/github-actions/*.json' 
OUTPUT_FORMAT=json 
FAIL_ON_CRITICAL=1 
bash skills/github-actions-pr-gate-health-audit/scripts/pr-gate-health-audit.sh
```

Run with bundled fixtures:

```bash
RUN_GLOB='skills/github-actions-pr-gate-health-audit/fixtures/*.json' 
bash skills/github-actions-pr-gate-health-audit/scripts/pr-gate-health-audit.sh
```

## Output contract
- Exit `0` in report mode (default)
- Exit `1` when `FAIL_ON_CRITICAL=1` and one or more groups are critical
- Text mode prints summary + ranked PR gate risk groups
- JSON mode prints summary + scored groups + critical group details