I built a scanner for CI checks that can't fail

Описание и применение

Сканер Muraqib выявляет скрытые ошибки в CI‑рабочих процессах GitHub Actions, позволяя исправлять их и обеспечивать надёжную отчётность о сбоях.

Задача

CI workflows often contain steps that silently succeed even when critical errors occur, masking real problems and preventing timely alerts.

Результат

The scanner detects hidden failure modes in CI workflows, enabling teams to correct them and ensure that CI truly reports failures, improving reliability and security.

Рабочий процесс

• Clone the repository
• Run npx muraqib doctor against the repo
• Review the output for any of the four failure patterns
• Fix any identified issues (remove continue-on-error, add secret checks, adjust timeout settings)
• Re-run the CI to confirm the changes
• Commit and push the updated workflow files

Доказательства

74% had at least one step that cannot fail no matter what it finds.

Источник

Muraqib runs npx muraqib doctor against a repo's CI setup and looks for exactly that failure mode

Источник