← Back to Skills Marketplace
daniellummis

GitHub Actions Failure Owner Audit

by Daniel Lummis · GitHub ↗ · v1.2.0
cross-platform ✓ Security Clean
309
Downloads
0
Stars
2
Active Installs
3
Versions
Install in OpenClaw
/install github-actions-failure-owner-audit
Description
Audit failing GitHub Actions runs by actor ownership to expose who/workflow combinations generate the most CI noise and wasted minutes.
README (SKILL.md)

GitHub Actions Failure Owner Audit

Use this skill to attribute GitHub Actions failures to owners (actors) so teams can route CI stabilization work by impact instead of guesswork.

What this skill does

  • Reads one or more GitHub Actions run JSON exports (gh api output or per-run JSON files)
  • Focuses on failure-like conclusions by default (failure, cancelled, timed_out, action_required, startup_failure)
  • Groups by repository + actor (or repository + actor + workflow)
  • Scores hotspots by failed run counts and total failed runtime minutes
  • Supports text and JSON output for triage meetings and automation

Inputs

Optional:

  • RUN_GLOB (default: artifacts/github-actions-runs/*.json)
  • TOP_N (default: 20)
  • OUTPUT_FORMAT (text or json, default: text)
  • GROUP_BY (actor, actor-workflow, owner, or owner-workflow, default: actor)
  • OWNER_MAP_FILE (optional JSON mapping file to map actor regex → owner/team)
  • WARN_FAILURE_RUNS (default: 3)
  • CRITICAL_FAILURE_RUNS (default: 6)
  • WARN_FAILURE_MINUTES (default: 30)
  • CRITICAL_FAILURE_MINUTES (default: 90)
  • FAIL_ON_CRITICAL (0 or 1, default: 0)
  • REPO_MATCH / REPO_EXCLUDE (regex, optional)
  • WORKFLOW_MATCH / WORKFLOW_EXCLUDE (regex, optional)
  • BRANCH_MATCH / BRANCH_EXCLUDE (regex, optional)
  • ACTOR_MATCH / ACTOR_EXCLUDE (regex, optional)
  • CONCLUSION_MATCH / CONCLUSION_EXCLUDE (regex, optional)

Collect run JSON

Single repository paginated export:

gh api repos/\x3Cowner>/\x3Crepo>/actions/runs --paginate \
  > artifacts/github-actions-runs/\x3Cowner>-\x3Crepo>.json

Run

Default ownership triage:

RUN_GLOB='artifacts/github-actions-runs/*.json' \
bash skills/github-actions-failure-owner-audit/scripts/failure-owner-audit.sh

Workflow-scoped ownership triage with stricter thresholds:

RUN_GLOB='artifacts/github-actions-runs/*.json' \
GROUP_BY='actor-workflow' \
WARN_FAILURE_RUNS=2 \
CRITICAL_FAILURE_RUNS=4 \
WARN_FAILURE_MINUTES=20 \
CRITICAL_FAILURE_MINUTES=60 \
bash skills/github-actions-failure-owner-audit/scripts/failure-owner-audit.sh

JSON output for dashboards/alerts:

RUN_GLOB='artifacts/github-actions-runs/*.json' \
OUTPUT_FORMAT='json' \
FAIL_ON_CRITICAL=1 \
bash skills/github-actions-failure-owner-audit/scripts/failure-owner-audit.sh

Filter to a repo and release branches only:

RUN_GLOB='artifacts/github-actions-runs/*.json' \
REPO_MATCH='^flowcreatebot/' \
BRANCH_MATCH='^(main|release/)' \
ACTOR_EXCLUDE='(dependabot|renovate)' \
bash skills/github-actions-failure-owner-audit/scripts/failure-owner-audit.sh

Run with bundled fixtures:

RUN_GLOB='skills/github-actions-failure-owner-audit/fixtures/*.json' \
bash skills/github-actions-failure-owner-audit/scripts/failure-owner-audit.sh

Owner/team mapping (first matching regex wins):

{
  "^dependabot\\[bot]$": "automation",
  "^renovate\\[bot]$": "automation",
  "^alice$": "platform"
}
RUN_GLOB='artifacts/github-actions-runs/*.json' \
GROUP_BY='owner-workflow' \
OWNER_MAP_FILE='skills/github-actions-failure-owner-audit/examples/owner-map.sample.json' \
bash skills/github-actions-failure-owner-audit/scripts/failure-owner-audit.sh

Output contract

  • Exit 0 in reporting mode (default)
  • Exit 1 if FAIL_ON_CRITICAL=1 and at least one ownership group is critical
  • In text mode: prints summary and top ownership hotspots
  • In json mode: prints summary, top groups, all groups, and critical groups
Usage Guidance
This skill appears to do what it says: parse GitHub Actions run JSON exports and report owner/actor hotspots. Before running: 1) Export runs yourself via 'gh api' (which will use your existing gh auth) rather than pointing RUN_GLOB at unexpected locations. 2) Confirm RUN_GLOB and OWNER_MAP_FILE point only to intended JSON files (the script will read any path you provide). 3) Review the included scripts if you need to ensure no local-sensitive paths are referenced in your environment. 4) Try with the provided fixtures first to verify output and behavior (the README shows this). If you need autonomous agent invocation, consider the risks of letting an agent run file-processing tools without restrictions, but the skill itself does not request extra credentials or network exfiltration.
Capability Analysis
Type: OpenClaw Skill Name: github-actions-failure-owner-audit Version: 1.2.0 The skill is a reporting tool designed to audit GitHub Actions failure logs for ownership and impact analysis. It processes local JSON files using a Python script (scripts/failure-owner-audit.sh) to aggregate run statistics without performing any network requests or sensitive data exfiltration. The logic is consistent with its stated purpose and lacks indicators of malicious intent or high-risk obfuscation.
Capability Assessment
Purpose & Capability
Name and description describe auditing GitHub Actions run JSONs; the skill only requires bash and python3 to parse local JSON exports and an optional owner-map file. Nothing in the files requests unrelated cloud credentials or services.
Instruction Scope
SKILL.md and the script consistently instruct collecting GitHub Actions run JSONs (via gh api or local exports) and then running the bundled script. The script reads files matched by RUN_GLOB and an optional OWNER_MAP_FILE and applies regex filters — all behavior is consistent with the stated audit purpose. Note: RUN_GLOB/OWNER_MAP_FILE are user-controllable, so the tool will read any files the user points it at (expected for a file-processing tool).
Install Mechanism
No install spec; skill is instruction-only with an included script. This is low-risk: nothing is downloaded or written during install.
Credentials
No required environment variables or credentials are declared. The script uses user-provided environment variables (RUN_GLOB, OWNER_MAP_FILE, filters) appropriate for configuring a local audit. It does not attempt to read other environment variables or secret files.
Persistence & Privilege
The skill is not always-enabled and does not request permanent presence or modify other skills or system-wide configs. It runs only when invoked by the user/agent.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install github-actions-failure-owner-audit
  3. After installation, invoke the skill by name or use /github-actions-failure-owner-audit
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.2.0
Add event and run-scope regex filters (EVENT_*, RUN_ID_*, RUN_URL_*) for targeted ownership incident triage.
v1.1.0
Add optional OWNER_MAP_FILE team mapping and owner-based grouping modes (owner/owner-workflow) for triaging CI failures by team ownership.
v1.0.0
Initial release: audit GitHub Actions failures by actor or workflow-actor ownership. - Processes exported GitHub Actions run JSON files to identify failure hotspots. - Groups and scores failed runs by repository, actor, or workflow-actor combinations. - Flexible filtering by repository, workflow, branch, actor, and conclusion via regex inputs. - Multiple output formats (text/JSON) and configurable thresholds for warnings and critical alerts. - Enables targeted CI stabilization by surfacing top owners generating the most CI failures and wasted minutes. - CLI-focused usage with support for paginated exports and bundled fixtures.
Metadata
Slug github-actions-failure-owner-audit
Version 1.2.0
License
All-time Installs 2
Active Installs 2
Total Versions 3
Frequently Asked Questions

What is GitHub Actions Failure Owner Audit?

Audit failing GitHub Actions runs by actor ownership to expose who/workflow combinations generate the most CI noise and wasted minutes. It is an AI Agent Skill for Claude Code / OpenClaw, with 309 downloads so far.

How do I install GitHub Actions Failure Owner Audit?

Run "/install github-actions-failure-owner-audit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is GitHub Actions Failure Owner Audit free?

Yes, GitHub Actions Failure Owner Audit is completely free (open-source). You can download, install and use it at no cost.

Which platforms does GitHub Actions Failure Owner Audit support?

GitHub Actions Failure Owner Audit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created GitHub Actions Failure Owner Audit?

It is built and maintained by Daniel Lummis (@daniellummis); the current version is v1.2.0.

💬 Comments