magpie-repo-health

Plugin magpie-repo-health from marketplace apache-magpie in apache/magpie. Commands read from the repo's manifest — today.

Skills (8)

• audit-finding-fix

  For a batch of findings from a non-security audit tool (`<audit-tool>` — ruff / flake8 / mypy / pylint / CodeQL / Apache Verum / Apache Caer / equivalent; full list in the body) against `<upstream>`, draft the smallest fix per finding, re-running the tool after each batch to confirm clearance. Produ

• ci-runner-audit

  Read-only audit of GitHub Actions runner compatibility for one repository, a repository set, one Apache project, or the full Apache org. Finds obsolete GitHub-hosted runner labels and macOS runner/tool architecture mismatches. Produces TSV evidence; never edits workflows, opens PRs, or posts comment

• dependency-license-audit

  Read-only license audit of a dependency tree. Detects the manager(s), resolves each dependency's license from ecosystem metadata, and classifies it against a configured policy (ASF A/B/X or allowlist), surfacing incompatible, forbidden, and unknown-license dependencies. Never modifies manifests or l

• dependency-vulnerability-audit

  Read-only dependency vulnerability audit for one repository or a local checkout. Detects the project's dependency manager(s), runs the appropriate audit tool, surfaces patchable findings grouped by severity, and proposes upgrades for maintainer review. Never modifies manifests or lock files and neve

• flaky-test-triage

  Read-only flaky-test detection from GitHub Actions run history for one repository: parses run outcomes over a configurable window, computes per-job failure rates, and separates intermittent failures from deterministically broken ones. Produces a prioritised triage list without modifying tests, workf

• license-compliance-audit

  Read-only license compliance audit for one repository or checkout: LICENSE present, NOTICE complete when the declared license requires it, and source files carrying SPDX-License-Identifier headers consistent with that license. Produces a grouped report with proposed remedies for review; never modifi

• workflow-optimization

  Read-only review of one repository's GitHub Actions workflows and recent run history against the ASF Infra workflow-optimization practices. Produces a prioritised plan to cut runner use; never edits workflows, opens PRs, or posts comments. Invoke when a maintainer asks to "optimize our CI workflows"

• workflow-security-audit

  Read-only GitHub Actions workflow security audit for one repository, a repository set, or a whole GitHub org. Runs `zizmor` to surface injection vulnerabilities, excessive permissions, unpinned external actions, and self-hosted-runner fork-secret leaks. Produces a grouped, prioritised report; never

Similar plugins