Skip to content

Analyzing and fixing GitHub Actions failures #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ChazGo merged 2 commits into from
Sep 7, 2026
Merged

Analyzing and fixing GitHub Actions failures #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9882a4d
Guard pr-ci-sweeper.yml to run only on canonical repo
Copilot Sep 6, 2026
faac35f
Guard remaining scheduled workflows to canonical repo
Copilot Sep 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions .github/workflows/dated-todo-sweep.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,9 @@ jobs:
analyze:
# Manual runs may select a ref; secrets are available only when that ref is
# the trusted default branch. Scheduled runs already target that branch.
if: github.event_name != 'workflow_dispatch' || github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
# Forks lack OPENAI_API_KEY / GH_APP_PRIVATE_KEY(_FALLBACK), so scope the
# whole schedule to the canonical repo instead of failing every run.
if: github.repository == 'openclaw/openclaw' && (github.event_name != 'workflow_dispatch' || github.ref == format('refs/heads/{0}', github.event.repository.default_branch))
outputs:
sweep-date: ${{ steps.sweep-date.outputs.date }}
runs-on: ubuntu-24.04
Expand Down Expand Up @@ -75,7 +77,7 @@ jobs:
retention-days: 7

upsert:
if: github.event_name != 'workflow_dispatch' || github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
if: github.repository == 'openclaw/openclaw' && (github.event_name != 'workflow_dispatch' || github.ref == format('refs/heads/{0}', github.event.repository.default_branch))
needs: analyze
runs-on: ubuntu-24.04
timeout-minutes: 10
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/openclaw-performance.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -196,6 +196,8 @@ jobs:
secret_eligible=false
cache_write_allowed=false
if [[
"$GITHUB_REPOSITORY" == "openclaw/openclaw"
]] && [[
"$GITHUB_EVENT_NAME" == "schedule" ||
"$GITHUB_EVENT_NAME" == "workflow_dispatch"
]] && [[
Expand Down
4 changes: 4 additions & 0 deletions .github/workflows/pr-ci-sweeper.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,10 @@ permissions: {}

jobs:
sweep:
# This sweep authenticates as a GitHub App installed only on the canonical
# repo; forks lack GH_APP_PRIVATE_KEY(_FALLBACK), so the scheduled run would
# otherwise fail every hour with no actionable fix available to the fork owner.
if: github.repository == 'openclaw/openclaw'
permissions:
contents: read
runs-on: ubuntu-24.04
Expand Down
13 changes: 8 additions & 5 deletions .github/workflows/stale.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,8 +37,11 @@ env:
permissions: {}

jobs:
# These jobs authenticate as GitHub Apps installed only on the canonical
# repo; forks lack GH_APP_PRIVATE_KEY(_FALLBACK), so every job below is
# scoped to openclaw/openclaw to avoid failing on every scheduled run.
stale:
if: ${{ github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true }}
if: ${{ github.repository == 'openclaw/openclaw' && (github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true) }}
permissions:
issues: write
pull-requests: write
Expand Down Expand Up @@ -247,7 +250,7 @@ jobs:
That channel is the escape hatch for high-quality PRs that get auto-closed.

stale-bug-verification:
if: ${{ github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true }}
if: ${{ github.repository == 'openclaw/openclaw' && (github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true) }}
permissions:
issues: write
runs-on: ubuntu-24.04
Expand Down Expand Up @@ -431,7 +434,7 @@ jobs:
.write();

backfill-stale-closures:
if: ${{ github.event_name == 'workflow_dispatch' && inputs.backfill_stale_closures == true }}
if: ${{ github.repository == 'openclaw/openclaw' && github.event_name == 'workflow_dispatch' && inputs.backfill_stale_closures == true }}
permissions:
issues: write
pull-requests: write
Expand Down Expand Up @@ -684,7 +687,7 @@ jobs:

audit-bug-closure-reasons:
needs: stale
if: ${{ github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true }}
if: ${{ github.repository == 'openclaw/openclaw' && (github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true) }}
permissions:
issues: read
runs-on: ubuntu-24.04
Expand Down Expand Up @@ -784,7 +787,7 @@ jobs:

lock-closed-issues:
needs: stale
if: ${{ github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true }}
if: ${{ github.repository == 'openclaw/openclaw' && (github.event_name != 'workflow_dispatch' || inputs.backfill_stale_closures != true) }}
permissions:
issues: write
runs-on: blacksmith-16vcpu-ubuntu-2404
Expand Down
Loading