Issue & PR triage
Loading...
Showing 23 of 23 issues
| Issue | Title | Author | Age | Action | Impact ↓ | Actionability | Quick Win | Summary |
|---|---|---|---|---|---|---|---|---|
|
starflow issue #185 |
lint-python.yaml: pull-requests permission from #184 causes startup_failure... | lengau | 37d | needs triage | 72 | 85 | 26 | PR #184's pull-requests: read in lint-python.yaml breaks every downstream QA caller with startup_failure, since reusable workflows can only narrow caller permissions. craft-parts/craft-application QA broken; untriaged. |
|
starflow pr #201 |
feat: add test-pr skill for testing PRs across downstream repos | lengau | 15d | needs review | 65 | 75 | 27 | Adds a test-pr agent skill to automate downstream CI integration testing across 17 team repositories. CI passing, awaiting maintainer review with no unresolved comments. |
|
starflow issue #85 |
Create a workflow for testing dev environments | mr-cal | 420d | keep open | 55 | 85 | 19 | Triaged enhancement (JIRA CRAFT-4739) to add test-dev-environment.yaml and self-test-dev-environment.yaml running make setup/lint/format/test/docs in clean LXD across 3 distros x amd64/arm64. Still unimplemented: no such workflow files exist under .github/workflows. |
|
starflow pr #204 |
ci: add RTD release workflow | jahn-junior | 7d | keep open | 50 | 30 | 10 | Adds a GitHub Actions workflow to automate ReadTheDocs version management and redirects for releases. CI passing, awaiting author response to 2 review comments. |
|
starflow issue #100 |
Use the pristine-ubuntu action on hosted runners | lengau | 327d | keep open | 48 | 78 | 22 | Maintainer task: use lengau/pristine-ubuntu-action on GitHub-hosted Ubuntu runners to stop runner image updates breaking CI. Still unimplemented; PR #101 open 300 days with failing checks. |
|
starflow issue #28 |
Use osv-scanner to scan `uv.lock` files | lengau | 689d | keep open | 45 | 68 | 17 | Enhancement: make the scan-python reusable workflow scan uv.lock directly with osv-scanner. Blocker google/osv-scanner#1406 reported resolved in a May 2025 comment, but it is still unimplemented — the workflow deletes uv.lock whenever uv-export is enabled. |
|
starflow pr #101 |
Add pristine-ubuntu-action to hosted runners | Copilot | 327d | keep open | 45 | 20 | 6 | Adds lengau/pristine-ubuntu-action@v0 as the first step of setup-python-runner/action.yaml, gated to GitHub-hosted Linux runners, to stop runner-image updates from breaking CI (fixes #100). Idle 300 days, no reviews, many self-test checks failing. |
|
starflow pr #186 |
fix: add retry logic for snap installs across CI workflows | lengau | 37d | needs review | 42 | 76 | 21 | Maintainer-authored CI-only PR adding retry/backoff around snap installs (astral-uv, osv-scanner, codespell, ruff, shellcheck) in lint-python/scan-python/scan-golang, plus actionlint/prettier/shellcheck fixes. All checks green except macos-14. |
|
starflow pr #127 |
feat: Create workflow for testing dev environments | me6262 | 202d | keep open | 40 | 15 | 4 | Adds a 61-line GitHub Actions workflow spinning up LXD containers to exercise makefile commands. WIP for #85; author confirms it fails on missing packages, Canonical CLA check failing, no reviewers and no activity for 174 days. |
|
starflow pr #155 |
feat: new secscan action | bepri | 129d | needs review | 40 | 35 | 4 | Adds a reusable secscan action to run OSV/CVE scans on new tags or monthly against latest/stable. All CI checks green, but 17 review threads are unresolved and the cited snapcraft#6303 trial was closed unmerged after scan jobs failed. |
|
starflow issue #200 |
shellcheck-actions.sh misses .github/workflows and currently exits non-zero | lengau | 15d | keep open | 40 | 85 | 17 | shellcheck-actions.sh has a shallow glob pattern missing .github/workflows and fails on setup-python-runner/action.yaml, breaking make lint-code on main. |
|
starflow pr #189 |
ci: Add starbase smoketest workflow | lengau | 28d | needs review | 38 | 68 | 13 | Adds .github/workflows/smoketest.yaml (130 lines) that pushes bot/smoketest/starflow-<n> to canonical/starbase, opens a draft PR there and comments the link; needs a STARBASE_TOKEN fine-grained PAT. All CI green (incl. zizmor), verified live via starbase#607-609, 1 unresolved comment, awaiting maintainer review. |
|
starflow issue #48 |
Add publisher worflows | upils | 601d | keep open | 38 | 58 | 10 | Maintainer task to move/adapt a generic release-publish.yaml reusable workflow from the craft libs into starflow. Not yet implemented; no release-publish workflow exists in .github/workflows. One comment questions the value of release-drafter. |
|
starflow pr #116 |
docs: Add a how-to for publishing an app's snap | lengau | 252d | needs review | 35 | 60 | 18 | Adds a how-to guide for publishing an app's snap, currently covering the debcraft edge flow, plus how-to index update. Approved by one reviewer with 4 unresolved review comments; all CI checks pass. |
|
starflow pr #86 |
feat: Workflow for testing setup | lengau | 419d | close superseded | 30 | 12 | 2 | Adds a 70-line setup-testing Actions workflow across two files, but main already contains the equivalent self-test workflow from #58. Inactive for 392 days with no reviews or comments, it remains open while eight Linux matrix checks fail. |
|
starflow issue #174 |
test-python.yaml needs actions:read permission, but will break downstream | bepri | 45d | keep open | 30 | 78 | 11 | Zizmor flags test-python.yaml as excessive-permissions: it calls `gh api .../actions/jobs` (needs actions:read) but declares no permissions block. Adding it would break all downstream callers, so it awaits a cross-repo rollout. |
|
starflow issue #118 |
Contributors script sometimes adds @unknown to the thank-you section. | lengau | 237d | keep open | 30 | 62 | 12 | starflow's tools/contributors.py emits a bogus '@unknown' entry in the thank-you section when a contributor's GitHub username can't be resolved; reported by a maintainer with a reproducer command, labeled Type: Bug, still open and unfixed. |
|
starflow pr #78 |
feat(test-python): Add Python 3.14 to the defaults | lengau | 437d | keep open | 28 | 22 | 6 | Draft re-application of merged-then-reverted PR #75: adds Python 3.14 to the default test-python matrix (2 lines). Blocked on PyO3 0.26; one CI job (Fast tests, noble) failing; no review activity in 409 days. |
|
starflow pr #6 |
feat: Security scanner | lengau | 764d | keep open | 25 | 20 | 4 | Maintainer-authored PR adding a secscan-API security scanner workflow (+106/-0, 2 files). Author states it does not work yet pending runner access; no reviewers, no CI, no activity for ~665 days. |
|
starflow pr #198 |
docs: add an application release checklist | lengau | 15d | needs review | 25 | 40 | 8 | Adds a release checklist reference page with patch/minor release procedures and per-app quick links. Also fixes docs/conf.py to include reference in published docs. Has 20 unresolved review comments and 0 reviewers. |
|
starflow pr #208 |
feat: apt and snap package caching | bepri | 2d | ? | ? | ? | ||
|
starflow pr #205 |
fix(ci): lint workflow run steps in shellcheck-actions.sh | ayushpratap27 | 2d | ? | ? | ? | ||
|
starflow pr #209 |
ci: add workflow to summarize workflow failures | mr-cal-bot | 0d | ? | ? | ? |