P0 infra: GitHub Actions frozen above the repo — zero runs on all 30 open PRs (org-level switch or billing; not a workflow regression)
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 3/100
- Issue type
- Bug
- Clarity
- Mostly clear
- Activity status
- Active
- Tech stack
- github, github-actions
- Domain
- devops
Research direction
This is an org-console outage, not a code change: no commit in the repository can fix it. The payload points to https://github.com/organizations/OpenTollGate/settings/actions and the billing page as the places an owner must check. A newcomer should not start here; the only useful step is to confirm the outage is still present on a new push.
Written by the indexing model from the issue text.
Description
Diagnosed from the #665 CI-sweep follow-up (zero check runs on all 30 open PRs). TL;DR: the workflows are innocent — the event→run pipeline is frozen at the ORG level. No commit to this repository can fix it; it needs one org-console action by an owner.
@felixfelix-bot — flagging for the owner lane: this blocks the entire approval queue's CI backing (PR-REVIEW.md's CI-rollup step has nothing to roll up).
Evidence (all first-party, this session)
| Probe | Result |
|---|---|
| PRs #775/#779 (+ sample of the 30 open) | 0 check runs |
Fresh trivial PR from a fresh branch (#789, the commissioned probe; head 04d8887) |
0 suites, 0 runs at +75 s and +135 s |
Push to main (tip 4614ac2, pushed 2026-10-08) |
3 github-actions suites in queued, no runs behind them |
| Org-level dynamic workflows (Dependabot / Dependency Graph) | runs created, queued, never start — since at least 2026-10-05 |
Last real pull_request/push runs of any workflow |
2026-08-27 |
What it is NOT (each checked)
- Not the
on: pull_requestconfigs. All five workflows onmaincarry correct triggers (test.yml'sbranches: [main, master, develop]matches every open PR; gitleaks has barepull_request:; build-package haspull_request:with only apaths-ignore: **.mdthat cannot suppress gitleaks or test.yml). A path-filter break also cannot explain zero runs on PUSH events, nor Dependabot queueing forever. - Not the four suspected change-sets. #759 (+5/−1 gitleaks config), #740 (no workflow-file changes), #710/#713 (build-package job edits + a 3-line test.yml addition) — none touch event gating, and
main's currenton:blocks post-date all of them and are intact. - Not repo settings.
/actions/permissions→enabled: true, allowed_actions: all; all workflowsstate: active; default branchmaincarries the workflows;runs-on: ubuntu-latesteverywhere (public repo, free hosted runners — no self-hosted fleet to go dark); noconcurrency:zombies (zeroin_progressruns exist; only build-package/router-test even declare groups).
What it IS
Runs are neither created (PR/push workflows: suites bookkeep, runs never spawn) nor started (dynamic: created, queued for days). With every repo-level control verified green, the remaining causes are above the repo — in order of likelihood:
- Org-level Actions policy is Off/Restrictive —
https://github.com/organizations/OpenTollGate/settings/actions. The repo'senabled: trueis overridden by the org switch. Timeline fits: Actions was deliberately disabled for the ngit migration (documented in.ngit/README.md, runs stop 2026-08-27); the fork consolidation (#758) re-homed the org ~2026-10-05; the REPO switch came back on — the ORG switch (or the org's billing state) did not. The org API is admin-gated (403 from the diagnostic account), so this could not be read programmatically. - Org billing hold / suspension on the free plan — same signature (runs accepted, nothing executes); check
https://github.com/organizations/OpenTollGate/settings/billing.
The fix (owner console actions, ~2 minutes)
- Org Settings → Actions → General: set Actions permissions: Allow (and "All actions and reusable workflows" or the previous policy), or explicitly enable for this repository.
- Check Billing & Plans for a hold.
- Cancel the stale queued Dependabot runs (some are 4+ days old), then push any commit or re-run a workflow — the probe steps in this issue reproduce in seconds if it is still broken.
- Confirm on the tracker: any open PR should immediately grow its check suite.
Probe artifacts
Probe PR #789 (closed; branch deleted) — the full transcript is in its close comment. No in-repo changes were made or are needed; when Actions returns, every open PR will get checks on its next push (or via re-run from the PR page for unchanged heads).
- Dominant language
- Go
- Stars
- 12
- Forks
- 14
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 237
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from OpenTollGate/tollgate-module-basic-go
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
OpenTollGate/tollgate-module-basic-go#833 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
OpenTollGate/tollgate-module-basic-go#813 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
OpenTollGate/tollgate-module-basic-go#804 ·
Maintainers usually reply within 1 day
-
go-battery needs an ndsctl on PATH: TestPurchaseSessionGuardHoldsThroughTheOutcomeUnknownWindow fails on bare hosts (passes with stub)Possibly taken @Amperstrand claimed this 1 day ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
OpenTollGate/tollgate-module-basic-go#726 · 2 comments ·
Maintainers usually reply within 1 day
-
rebrand-literal-gutter: uhttpd section-vocabulary check trips on a COMMENT (uhttpd.luci in 92-tollgate-admin-setup:178)Possibly taken @Amperstrand claimed this 1 day ago. Open
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
OpenTollGate/tollgate-module-basic-go#723 ·
Maintainers usually reply within 1 day
All issues in OpenTollGate/tollgate-module-basic-go
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 63/100
Maintainers usually reply within 1 day
-
product/backlog
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
TencentBlueKing/bk-nodemgr#3645 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
modelcontextprotocol/go-sdk#1387 ·
Maintainers usually reply within 1 day
-
docs(prompt): filer socket fragment hardcodes an issue-intent cap of 8 that Chore runs overrideOpenagent-butler-finding chore
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
jordansmall/spindrift#5128 ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 84/100
Maintainers usually reply within 2 days