I built a scanner for CI checks that can't fail

说明与用途

Muraqib 扫描器识别 GitHub Actions CI 工作流中的隐藏错误模式，帮助修复并确保可靠的错误报告。

问题

CI workflows often contain steps that silently succeed even when critical errors occur, masking real problems and preventing timely alerts.

结果

The scanner detects hidden failure modes in CI workflows, enabling teams to correct them and ensure that CI truly reports failures, improving reliability and security.

工作流

• Clone the repository
• Run npx muraqib doctor against the repo
• Review the output for any of the four failure patterns
• Fix any identified issues (remove continue-on-error, add secret checks, adjust timeout settings)
• Re-run the CI to confirm the changes
• Commit and push the updated workflow files

证据

74% had at least one step that cannot fail no matter what it finds.

来源

Muraqib runs npx muraqib doctor against a repo's CI setup and looks for exactly that failure mode

来源