Skip to content

workflow: weekly dead-repo audit#150

Merged
ksimback merged 1 commit intomainfrom
workflow-audit-repos
May 1, 2026
Merged

workflow: weekly dead-repo audit#150
ksimback merged 1 commit intomainfrom
workflow-audit-repos

Conversation

@ksimback
Copy link
Copy Markdown
Owner

@ksimback ksimback commented May 1, 2026

Summary

New .github/workflows/audit-repos.yml — weekly cron (Mondays 09:00 UTC) that pings each entry in data/repos.json against the GitHub API and detects:

  • Dead (HTTP 404 — owner or repo deleted)
  • Archived
  • Disabled

If any are found, opens or updates a single [Audit] tracking issue listing them. Idempotent across runs (reuses the existing open audit issue).

Why

PR #107 made lib/github.js fail-loud on GraphQL NOT_FOUND so build-pages no longer silently commits empty pages — the right call. Side effect: one deleted third-party repo blocks the entire build pipeline, and there's no proactive monitor.

The Web3CZ/Web3Hermes incident on 2026-05-01 burned 2+ days of failed build-pages runs (4/30 cron, 5/1 cron, every merge-triggered run for #79, #146, #147) before triage caught it. By that point all 12 newly-added repos were silently absent from the live site.

This audit surfaces dead entries proactively so a maintainer can remove them before the next build breaks.

Cost

~110 authenticated REST calls per Monday. Well within rate limits (5,000/hr authenticated). Completes in <30s.

Companion changes

  • Created repo-audit label on the repo so the workflow has somewhere to attach the issue.

Test plan

🤖 Generated with Claude Code

Pings each entry in data/repos.json against the GitHub API every
Monday 09:00 UTC. If any return 404 (owner or repo deleted), are
flagged archived, or flagged disabled, opens or updates a single
[Audit] tracking issue listing them.

Why: PR #107 made lib/github.js fail-loud on GraphQL NOT_FOUND so
build-pages no longer commits empty pages. Side effect: one deleted
third-party repo blocks the entire build pipeline silently. The
Web3CZ/Web3Hermes incident on 2026-05-01 burned 2+ days of failed
build-pages runs before triage caught it.

This audit surfaces dead entries proactively so a maintainer can
remove them before the next build breaks. Idempotent: reuses the
existing open [Audit] issue and just updates title/body if the set
of flagged repos changes week-over-week.

Cost: ~110 authenticated REST calls per Monday — well within rate
limits, completes in <30s.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@vercel
Copy link
Copy Markdown

vercel Bot commented May 1, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
hermes-ecosystem Building Building Preview May 1, 2026 5:15pm

Request Review

@ksimback ksimback merged commit 83e73e5 into main May 1, 2026
2 checks passed
@ksimback ksimback deleted the workflow-audit-repos branch May 1, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant