Conversation
…self-hosted
Companion to the claude-code-review default flip. An audit of every
`uses: nkg/github-actions/.github/workflows/*` call across HordiaLabs,
Sproncy and Regularmusic -- 201 calls in total -- found 54 that take a
hosted default, and with Actions credits exhausted those jobs no longer
start at all.
43 of the 54 are claude-code-review. The other 11 are these three
reusables, all in Sproncy:
secret-scan.yml 6 GitHub-runners, agent-skills, sproncy-schemas,
sproncy-secrets-dashboard, sproncy-transcription,
sproncy-website-scrapers
dependabot-auto-merge.yml 4 sproncy-schemas, sproncy-secrets-dashboard,
sproncy-transcription, sproncy-website-scrapers
lint-workflows.yml 1 agent-skills
Every other consumer of these three already passes `runs-on` explicitly, so
this changes behaviour only for the stubs that relied on the default -- and
all 11 pin `@v3`, so they pick the change up as soon as release.yml moves the
floating major tag. No per-repo edits needed.
The other 24 reusables keep their `["ubuntu-latest"]` default: nothing
currently depends on it, so flipping them would be churn without a consumer.
Public repos should pass '["ubuntu-latest"]' -- fork PRs on a self-hosted
pool are the hazard GitHub warns about, and the descriptions now say so. No
public repo consumes any of these today; checked the three orgs plus nkg/*.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Companion to #88. That one covers
claude-code-review.yml; this covers everything else that still relies on a hosted default.The audit
Every
uses: nkg/github-actions/.github/workflows/*call across HordiaLabs, Sproncy and Regularmusic — 201 calls — checked for whether the calling job passesruns-on:claude-code-review.ymlsecret-scan.ymldependabot-auto-merge.ymllint-workflows.yml54 calls across 43 repos. With credits exhausted, none of them start — each fails ~2s after queueing with "The job was not started because recent account payments have failed or your spending limit needs to be increased".
The 11 non-review ones are all in Sproncy:
secret-scan.yml— GitHub-runners, agent-skills, sproncy-schemas, sproncy-secrets-dashboard, sproncy-transcription, sproncy-website-scrapersdependabot-auto-merge.yml— sproncy-schemas, sproncy-secrets-dashboard, sproncy-transcription, sproncy-website-scraperslint-workflows.yml— agent-skillsWhy flip the default rather than patch six repos
Every other consumer of these three already passes
runs-onexplicitly, so the default only reaches stubs that omitted it — and all 11 pin@v3, so they pick this up the momentrelease.ymlmoves the floating major tag. One change, no per-repo edits, no Dependabot wait. (Contrast #88, where 10 of the 43 are SHA-pinned and will lag until their pins bump.)The other 24 reusables keep
["ubuntu-latest"]— nothing currently depends on their default, so flipping them would be churn without a consumer.Public repos
Descriptions now read "Defaults to the self-hosted pool. Public/open-source repos opt out by passing
["ubuntu-latest"]", matchingclaude.yml. The opt-out matters for more than free minutes: fork PRs on a self-hosted pool are the hazard GitHub warns about. No public repo consumes any of these three today — checked the three orgs andnkg/*.🤖 Generated with Claude Code
https://claude.ai/code/session_015wGZqkEacSGCx8watYCm1b