tiennm99 733e19fa3e feat(audit): skip archived repos unless asked for them
Archived repos leave the default scope. Nothing on them is actionable without
unarchiving -- the alerts endpoint 403s, PRs are unmergeable on a read-only
repo, Actions are frozen -- so on an account that is 195/221 archived they were
almost all of the output and none of the work. -include-archived restores the
FROZEN tier and the previous behaviour exactly.

Skipping them does not clear them. The summary reports archived_skipped with a
note that their exposure is unknown rather than zero, and the report makes no
claim that they are clean, because "0 findings" over 26 of 221 repos otherwise
reads as a healthy account. Open Dependabot PRs stranded on skipped repos are
counted in that note, since unarchiving makes them mergeable.

-limit now applies after filtering, so it means "N audited repos" instead of
"N before filtering" -- previously -limit 50 audited about six active repos here.
That needs the full inventory rather than a server-side isArchived filter: the
exact excluded counts are the disclosure, and filtering server-side would hide
the number being reported. Costs one extra inventory page.

A repo that is both a fork and archived is attributed to one reason only, so
archived_skipped and forks_excluded never double-count it.

The parity gate keeps auditing archived repos. They are the main source of STUCK
states, so excluding them would leave the classifier's least-exercised branch
uncompared.
2026-07-26 09:50:47 +07:00
2026-07-25 22:29:33 +07:00
2026-07-25 22:29:33 +07:00
S
Description
My agent skills
Readme Apache-2.0
180 KiB
Languages
Go 100%