Query GitHub Archive data in BigQuery to verify repository activity claims.
npx skills add https://github.com/gadievron/raptor --skill github-archive
Please help me install this Agent Skill. Skill: github-archive Source: https://github.com/gadievron/raptor/tree/main/.claude/skills/oss-forensics/github-archive Command: npx skills add https://github.com/gadievron/raptor --skill github-archive
Investigators often struggle to verify GitHub activity claims and reconstruct timelines when direct sources are incomplete or deleted. This skill provides access to tamper-proof GitHub Archive data via BigQuery to establish an immutable, time-stamped record of public GitHub events since 2011. It enables you to confirm actions, attribute events to actors, and recover deleted content across repositories.
Use this skill to verify a claim about repository activity by querying GitHub Archive data for a target repository and actor, then analyze PullRequestEvent, IssuesEvent, and related events to build a timeline.
High-intent search queries and answers about installing and using this skill.
GitHub Archive captures all public GitHub events since 2011 in an immutable, tamper-proof record queryable via BigQuery. Query the archive by repository and actor to confirm PR, issue, commit, and workflow events with exact timestamps, establishing verifiable evidence of who did what and when.
Yes. GitHub Archive preserves deleted PRs, issues, branches, tags, and repositories with full event history. For incident response, query PullRequestEvent, IssuesEvent, and PushEvent to correlate actions across repositories and build a complete attack timeline even after content removal.
You need familiarity with the gharchive-style schema and SQL query techniques like JSON_EXTRACT_SCALAR to parse event payloads. Access to a Google Cloud BigQuery project with permissions to query the GitHub Archive dataset is required to extract and analyze event records.
Query GitHub Archive by actor login and repository name, then filter events by type and timestamp. Cross-repository analysis reveals patterns of actor behavior, allowing you to correlate actions and identify coordinated activity or attacker infrastructure across organizations.
Use GitHub Archive for forensic investigations when you need immutable, historical evidence immune to tampering or deletion, require events older than GitHub's API retention windows, or must analyze patterns across many repositories and actors efficiently via SQL.
roberttmadsen13-delQuery GitHub Archive data via BigQuery to extract forensic metadata from event payloads.
redhat-etInvestigate platform incidents by gathering evidence and generating root cause documentation.
albertdobmeyerAnalyze application logs to surface errors, exceptions, and root causes.
deonmenezesQuery GitHub Archive data in BigQuery to extract forensic evidence for security investigations.
