austenstone/actions

Reviews a GitHub Actions estate across workflows or repositories, including duplication, reusable-workflow contracts, migration debt, required-check safety, monorepo blast radius, and governance. Use when: reviewing CI architecture, standardizing workflows, choosing reusable workflows vs composite actions, reducing duplicated pipelines, designing monorepo CI, or planning cross-repository Actions refactors. Load actions-workflow-toolkit first.

Diagnoses GitHub.com Actions workflows or jobs that are absent, waiting, queued, skipped, failed, cancelled, or timed out. Use when: why did this workflow not run, why is this job pending or queued, why was a job skipped, debug this failed run, who cancelled it, why did it time out, why is a required check stuck, or trace a runtime failure through reusable workflows, environments, permissions, outputs, and runner access. Excludes broad security/architecture reviews, speculative capacity claims, workflow mutation, reruns, cancellations, dispatches, approvals, and non-GitHub Actions CI.

Makes GitHub Actions workflows faster and cheaper by separating queue delay, execution wall clock, rounded job minutes, rerun waste, and billed cost before proposing a bounded change. Use when: CI is slow, reduce Actions minutes or cost, diagnose queueing or flakes, improve caches, tune matrices, right-size runners, or reduce unnecessary runs. Use actions-workflow-toolkit for native commands and live documentation links.

Reviews GitHub Actions workflows with actionlint and zizmor, then ranks findings by exploitable data flow and proposes behavior-aware fixes. Use when: reviewing Actions security, privileged triggers, expression or environment-file injection, token permissions, action pinning, vulnerable actions, reusable-workflow secrets, OIDC boundaries, artifacts, or self-hosted runners.

Shared procedures for using gh, actionlint, and zizmor directly on GitHub.com Actions. Use when: inspect or validate workflow YAML, inspect an exact run attempt, inventory a bounded workflow scope, trace a reusable workflow contract, interpret Actions cost, or find canonical GitHub documentation. Load relevant references with actions-debug or a review skill. Excludes broad unsolicited scans, workflow mutation, reruns, dispatches, approvals, and runner administration.