GitHub Actions Commit Health Audit — 技能

技能详情（站内镜像，无评论）

Audit GitHub Actions reliability by commit SHA to surface risky commits causing repeated workflow failures across branches.

开发与 DevOps

作者：Daniel Lummis @daniellummis

许可证：MIT-0

MIT-0 ·免费使用、修改和重新分发。无需归因。

版本：v1.0.0

统计：⭐ 0 · 149 · 0 current installs · 0 all-time installs

⭐ 0

安装量（当前） 0

🛡 VirusTotal ：良性 · OpenClaw ：良性

Package：daniellummis/github-actions-commit-health-audit

安全扫描（ClawHub）

VirusTotal ：良性
OpenClaw ：良性

OpenClaw 评估

The skill's files and runtime instructions are coherent with its stated purpose: it reads GitHub Actions run JSON files, groups and scores commits by failure patterns, and emits reports — it does not request unrelated credentials or perform network activity in the included code.

目的

The name/description match the implementation: the script reads run JSON files, aggregates by repository+SHA, computes failure rates and a heuristic score, and emits text/JSON reports. Required binaries (bash, python3) are appropriate for the bundled shell + python implementation. Minor note: the SKILL.md shows an example using the 'gh' CLI to produce run JSON exports, but 'gh' is not declared in the required binaries list; this is an omission…

说明范围

Runtime instructions and the script operate on local JSON files (RUN_GLOB) and environment inputs documented in SKILL.md. The code parses only the provided JSON artifacts, applies regex filters, and computes scores. It does not reference unexpected system paths or other environment variables beyond those documented. The SKILL.md does suggest using 'gh run view' to collect artifacts (a separate step) — that command would be executed by the user…

安装机制

There is no install spec (instruction-only with a shipped script), so nothing is downloaded or written to disk by an installer. The script is included in the bundle; runtime execution will only run local code using bash/python3.

证书

The skill declares no required environment variables or credentials and the script only uses the documented optional env inputs (RUN_GLOB, TOP_N, OUTPUT_FORMAT, etc.). There is no request for unrelated secrets or configuration.

持久

The skill does not request permanent or elevated privileges (always is false). It does not modify other skills or system-wide configuration in the provided files; it simply reads local artifact JSON files and writes reports/exit codes as expected.

综合结论

This skill appears to do what it says: analyze local GitHub Actions run JSON exports and report risky commits. Before installing/using it: 1) Note SKILL.md shows using the GitHub CLI ('gh run view') to collect run JSONs — ensure you have 'gh' available if you want to use that collection step (the script itself does not invoke 'gh'). 2) Run the bundled fixtures first (RUN_GLOB pointing at skills/.../fixtures/*.json) to verify output and behavio…

安装（复制给龙虾 AI）

将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「GitHub Actions Commit Health Audit」。简介：Audit GitHub Actions reliability by commit SHA to surface risky commits causing…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/daniellummis/github-actions-commit-health-audit/SKILL.md
（来源：yingzhi8.cn 技能库）

SKILL.md

打开原始 SKILL.md（GitHub raw）

---
name: github-actions-commit-health-audit
description: Audit GitHub Actions reliability by commit SHA to surface risky commits causing repeated workflow failures across branches.
version: 1.0.0
metadata: {"openclaw":{"requires":{"bins":["bash","python3"]}}}
---

# GitHub Actions Commit Health Audit

Use this skill to find commits that repeatedly fail CI so teams can prioritize rollback, revert, or targeted fixes.

## What this skill does
- Reads GitHub Actions run JSON exports
- Groups runs by repository + commit SHA
- Scores commit risk using failure rate, failed-run volume, and workflow spread
- Flags warning/critical commit hotspots
- Emits text or JSON output for CI checks and triage dashboards

## Inputs
Optional:
- `RUN_GLOB` (default: `artifacts/github-actions/*.json`)
- `TOP_N` (default: `20`)
- `OUTPUT_FORMAT` (`text` or `json`, default: `text`)
- `MIN_RUNS` (default: `2`)
- `BRANCH_MATCH` (regex, optional)
- `BRANCH_EXCLUDE` (regex, optional)
- `WORKFLOW_MATCH` (regex, optional)
- `WORKFLOW_EXCLUDE` (regex, optional)
- `REPO_MATCH` (regex, optional)
- `REPO_EXCLUDE` (regex, optional)
- `SHA_MATCH` (regex, optional)
- `SHA_EXCLUDE` (regex, optional)
- `FAIL_WARN_PERCENT` (default: `25`)
- `FAIL_CRITICAL_PERCENT` (default: `50`)
- `WARN_SCORE` (default: `35`)
- `CRITICAL_SCORE` (default: `60`)
- `FAIL_ON_CRITICAL` (`0` or `1`, default: `0`)

## Collect run JSON

```bash
gh run view <run-id> --json databaseId,workflowName,event,conclusion,headBranch,headSha,createdAt,updatedAt,startedAt,url,repository 
  > artifacts/github-actions/run-<run-id>.json
```

## Run

Text report:

```bash
RUN_GLOB='artifacts/github-actions/*.json' 
MIN_RUNS=3 
bash skills/github-actions-commit-health-audit/scripts/commit-health-audit.sh
```

JSON output with fail gate:

```bash
RUN_GLOB='artifacts/github-actions/*.json' 
OUTPUT_FORMAT=json 
FAIL_ON_CRITICAL=1 
bash skills/github-actions-commit-health-audit/scripts/commit-health-audit.sh
```

Run with bundled fixtures:

```bash
RUN_GLOB='skills/github-actions-commit-health-audit/fixtures/*.json' 
bash skills/github-actions-commit-health-audit/scripts/commit-health-audit.sh
```

## Output contract
- Exit `0` in report mode (default)
- Exit `1` when `FAIL_ON_CRITICAL=1` and one or more commits are critical
- Text mode prints summary + ranked commit-risk groups
- JSON mode prints summary + scored groups + critical commit details