Complete GitHub Actions toolkit with generation and validation capabilities for workflows, custom actions, and CI/CD configurations
97
97%
Does it follow best practices?
Impact
Pending
No eval scenarios have been run
Advisory
Suggest reviewing before use
A new hire at a startup has written their first GitHub Actions workflow for a release pipeline. The workflow has multiple problems and won't run correctly on GitHub. A senior engineer needs to audit it, document every issue found, categorize each by type, and deliver a corrected version along with clear explanations the new hire can learn from.
Review the workflow below, identify and explain every error, and produce a corrected version. Make sure the report clearly maps each error to its category (scheduling, runner, syntax, security, action version, job dependency, etc.) and includes the corrected code for each fix.
Produce:
release.yml with all issues fixedaudit-report.md with a table that lists each error found, its category/type, the explanation, and the corrected code snippetThe following file is provided as input. Extract it before beginning.
=============== FILE: inputs/release.yml =============== name: Release Pipeline
on: schedule: - cron: '0 0 * * 8' push: branches: [main]
jobs: test: runs-on: ubuntu-lastest steps: - uses: actions/checkout@v3 - run: | echo "Testing PR: ${{ github.event.pull_request.title }}" npm test
publish: needs: tset runs-on: ubuntu-latest steps: - uses: actions/checkout@v3 - run: npm publish env: NPM_TOKEN: ${{ secrets.NPM_TOKEN }}