fleet-cleaning-ci

Identify and remove orphaned CI YAMLs, disable automated-security-fixes, and purge stale workflow records.

125|42|Updated May 19, 2025
One-click install
npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-cleaning-ci
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fleet-cleaning-ci
Source: https://github.com/SocketDev/socket-mcp/tree/main/.agents/skills/fleet-cleaning-ci
Command: npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-cleaning-ci

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit + clean redundant CI surface on a Socket fleet repo. Three target classes: orphan workflow YAML files, GitHub-Dependabot auto-fix PRs, and stale workflow run history. Deletes the YAML files, disables Dependabot automated-security-fixes via gh api, and reports anything that needs a manual UI toggle. Once-and-never-again sweep meant to leave a repo clean.

Core Features & Use Cases

  • Orphan workflow cleanup: removes legacy per-repo YAMLs that were superseded by a centralized ci.yml.
  • Security-prioritization adjustments: disables automated security fixes via GitHub API to prevent automated PRs while retaining vulnerability alerts.
  • Stale-run cleanup: deletes outdated workflow run records from the Actions sidebar to reflect the current CI shape.

Quick Start

Run the inventory phase on a repository to identify orphan CI files, disabled Dependabot security, and stale workflow records, then apply the proposed changes.

Frequently Asked Questions about fleet-cleaning-ci

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I clean up orphaned GitHub Actions workflow YAML files across multiple repositories?

To clean up orphaned GitHub Actions workflow YAML files, you can inventory a repository or fleet to identify legacy files and safely remove them using gated actions. This ensures only superseded workflow configurations are deleted.

How do I disable Dependabot automated security fixes while keeping vulnerability alerts active?

You can disable Dependabot automated security fixes via the GitHub API to stop automated PRs while retaining vulnerability alerts. This adjustment is applied during the CI cleanup sweep across the fleet.

What is the best way to purge stale workflow run history from the GitHub Actions sidebar?

Purging stale workflow run history involves deleting outdated workflow run records via the GitHub API. A read-only inventory identifies stale runs, and gated actions execute the deletions to reflect the current CI shape.

Do I need special GitHub API permissions to delete outdated CI configurations and workflow records?

Yes, you need repository CI configuration access and GitHub API permissions to perform deletions and updates. The cleanup process uses a read-only inventory phase first, then requires elevated permissions to apply the proposed changes.

Can I run a CI cleanup inventory in read-only mode before applying any deletions?

Yes, you can run a read-only inventory to identify orphan CI files, disabled Dependabot security, and stale workflow records. Gated actions ensure you review and approve all proposed changes before any deletions or updates occur.

Can I apply CI cleanup actions across an entire fleet of repositories at once?

Yes, you can apply CI cleanup actions across an entire fleet or a single repository. The inventory identifies orphaned YAMLs, Dependabot auto-fixes, and stale runs, then gated actions implement the changes repeatably across the fleet.