The GitHub Actions job "prek" on airflow-steward.git/ci-runner-audit has failed.
Run started by GitHub user snazy (triggered by snazy).

Head commit for run:
784156191ac885e3b288b166907e4ca3d3ef5692 / Robert Stupp <[email protected]>
feat(skills): add CI runner audit skill

Why:
Maintainers need a repeatable, evidence-based way to audit GitHub
Actions runner compatibility across one repository, a repo set, an
Apache project, or the full Apache GitHub org. Runner label support and
macOS runner architectures change over time, and ad-hoc scans are easy
to overstate when broad architecture heuristics produce false positives.

What changed:
- Add the magpie-ci-runner-audit skill with read-only workflows for
  retired GitHub-hosted runner labels and macOS runner/tool architecture
  mismatch triage.
- Add a deterministic scanner script that supports --repo, --repo-file,
  and --owner scopes and writes TSV evidence files.
- Wire the skill into the framework self-adoption symlinks for Claude
  Code and GitHub skill loaders.
- Register ci-runner-audit under capability:triage.
- Add a behavioral eval suite covering scope selection, prompt-injection
  resistance, high-confidence vs broad-candidate reporting, and avoiding
  security overclaims.

Safety and behavior:
The skill is read-only. It does not edit workflows, open pull requests,
post comments, apply labels, or mutate remote state. Broad macOS
architecture candidates are explicitly reported as false-positive-prone
triage input; setup-action architecture mismatches and retired runner
labels are the high-confidence outputs.

Validation:
- python3 -m py_compile skills/ci-runner-audit/scripts/scan_ci_runners.py
- PYTHONPATH=tools/skill-evals/src python3 -m skill_evals.runner 
tools/skill-evals/evals/ci-runner-audit/
- PYTHONPATH=tools/skill-and-tool-validator/src python3 -c 'import 
skill_and_tool_validator; raise SystemExit(skill_and_tool_validator.main())'
- tools/dev/check-placeholders.sh

Notes:
The skill-and-tool validator reports existing soft warnings in unrelated
skills/security-issue-import-via-forwarder and
skills/setup-isolated-setup-verify; this change does not add new
validator warnings.

Generated-by: Codex

Report URL: https://github.com/apache/airflow-steward/actions/runs/26910915609

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to