ci: bot report workflows match any open issue by label and title, so a user-opened issue can capture the weekly report

Open Beginner friendly
#169 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
85/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
github-actions, yaml
Domain
ci-cd

Research direction

Read the issue lookup commands in .github/workflows/links.yml, .github/workflows/reverify.yml, and .github/workflows/thumbs.yml. Verify each lookup only selects bot-authored issues, and that a user-opened issue with a matching title and label is ignored.

Written by the indexing model from the issue text.

Description

hardening priority: low

Why it matters

The weekly link check, the monthly re-verify batch and the thumbnail report each find "their" issue by label and title prefix only. Any GitHub user can open an issue that matches. The bot then writes its report into that user's issue instead of the real one (currently #162). Report history ends up split, and the issue's author can rewrite the text the maintainer relies on.

Evidence

  • .github/workflows/links.yml:42: gh issue list --state open --label correction ..., then a title startswith("Link check:") filter.
  • .github/workflows/reverify.yml:41 and .github/workflows/thumbs.yml:62 use the same pattern.

.github/ISSUE_TEMPLATE/correction.yml applies the correction label automatically, and the title is free text.

Suggested approach

Add --author app/github-actions to each lookup, so only bot-authored issues match.

Done when

All three workflows filter by author. A user-opened issue with a matching title and label is ignored.

Dominant language
JavaScript
Stars
58
Forks
15
Avg merge
1d 14h
Merged PRs (30d)
11

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from TMHSDigital/Free-Game-Dev-Assets

All issues in TMHSDigital/Free-Game-Dev-Assets

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.