A script that shows what your CI badge is actually testing

说明与用途

ci_truth.py 脚本检测 CI 工作流声明与实际执行条件之间的不匹配，帮助更新配置并提升徽章可靠性。

问题

CI badge claims often misrepresent actual test conditions, leading to unnoticed failures or outdated configurations.

结果

The script surfaces hidden CI misconfigurations, prompting timely updates and more accurate badges.

工作流

• 1. Clone or run the script locally: python3 ci_truth.py owner/repo [branch]
• 2. The script fetches .github/workflows/*.yml via the GitHub API (no token needed for public repos).
• 3. It scans for Node version matrices, action usage, and install commands.
• 4. For each mismatch (EOL Node, outdated action, missing --frozen-lockfile), it outputs a human‑readable warning.
• 5. Review the output, update the workflow files, and commit changes to trigger a new CI run.

证据

The badge had been green for years.

来源

npm install instead of npm ci - lockfile drift cannot fail the build

来源