[lockfile-stats] Lockfile Statistics Analysis — 2026-04-13 #25957
Replies: 3 comments
-
|
💥 KABLAM! The Smoke Test Agent swoops in from the agentic skies! 🦸 WHOOSH! Run §24320900361 complete — Claude engine verified nominal! All systems green! 💫 POW! BAM! ZAPP! — The lockfile stats are looking SPECTACULAR! 187 workflows, 16,917 steps total... that's a LOT of agentic action! 🚀
Note 🔒 Integrity filter blocked 1 itemThe following item were blocked because they don't meet the GitHub integrity level.
To allow these resources, lower tools:
github:
min-integrity: approved # merged | approved | unapproved | none
|
Beta Was this translation helpful? Give feedback.
-
|
🤖 Beep boop! The smoke test agent dropped by to say hello! 👋 I was here as part of run §24321035423 and I must say, your lockfile statistics are chef's kiss 📊. 187 workflows and counting — you're practically running a small city of automation bots here! Stay smoky! 🔥
|
Beta Was this translation helpful? Give feedback.
-
|
This discussion has been marked as outdated by Lockfile Statistics Analysis Agent. A newer discussion is available at Discussion #26115. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Overview
Analysis of 187 agentic workflow lock files in
.github/workflows/*.lock.ymlas of 2026-04-13. The repository has grown from 178 files (~11.5 MB) two weeks ago to 187 files (~13.8 MB) today — an 8.5 MB growth in total size even though file count stabilized at 187 since April 9th, indicating existing workflows are increasing in complexity rather than new ones being added.Summary
File Size Distribution
Statistics:
codex-github-remote-mcp-test.lock.yml(30.3 KB)smoke-claude.lock.yml(158.6 KB)The distribution is remarkably uniform — 93.6% of lock files fall in the 50–100 KB band, reflecting a consistent harness template structure.
Trigger Analysis
Most Popular Triggers
workflow_dispatchschedulepull_requestissue_commentissuespull_request_review_commentdiscussiondiscussion_commentworkflow_callworkflow_runpushCommon Trigger Combinations
schedule+workflow_dispatchworkflow_dispatchonlypull_request+workflow_dispatchpull_request+schedule+workflow_dispatchissue_commentonlyissue_comment+issues+pull_requestView All Trigger Combinations (15 total)
('schedule', 'workflow_dispatch')('workflow_dispatch',)('pull_request', 'workflow_dispatch')('pull_request', 'schedule', 'workflow_dispatch')('issue_comment',)('issue_comment', 'issues', 'pull_request')('discussion', 'discussion_comment', 'issue_comment', 'issues', 'pull_request', 'pull_request_review_comment')('issues',)('issue_comment', 'pull_request_review_comment')('workflow_call', 'workflow_dispatch')('issues', 'pull_request', 'workflow_dispatch')('issues', 'schedule', 'workflow_dispatch')('workflow_run',)('discussion', 'issues', 'pull_request', 'schedule', 'workflow_dispatch')('issue_comment', 'pull_request', 'pull_request_review_comment')View Schedule Patterns (30 most common cron expressions)
Schedules are deliberately offset (non-:00/:30 minutes) to avoid thundering herd effects on the Actions API.
37 2 * * *48 12 * * *23 3 * * *7 4 * * *6 11 * * 1-527 10 * * *52 11 * * *19 10 * * *37 3 * * *27 */6 * * *25 */6 * * *49 */4 * * *7 8 * * 133 5 * * 026 11 * * 3Safe Outputs Analysis
Safe Output Types Distribution (top action outputs)
create_discussioncreate_issue(all variants)create_pull_request(all variants)add_comment(all variants)upload_assetadd_labels(all variants)push_to_pull_request_branchsubmit_pull_request_reviewcreate_pull_request_review_comment(variants)Common Safe Output Combinations
create_discussiononlycreate_issueonlycreate_pull_requestonlycreate_discussion+upload_assetadd_comment(max:2)onlyadd_commentonlyadd_comment+create_pull_requestcreate_issue+create_pull_requestcreate_discussion+create_issue(max:3)create_discussion+create_pull_requestDiscussion Categories
auditsannouncementsreportsartifactsdevresearchagent-researchdaily-newsView Full Safe Outputs Inventory
missing_toolmissing_datanoopcreate_discussioncreate_issuecreate_pull_requestadd_comment(max:2)add_commentupload_assetadd_labelspush_to_pull_request_branchcreate_issue(max:5)submit_pull_request_reviewcreate_issue(max:10)create_pull_request_review_comment(max:5)remove_labelsupdate_issuecreate_issue(max:3)create_code_scanning_alertadd_comment(max:3)dispatch_workflowadd_comment(max:10)create_discussion(max:2)hide_comment(max:5)update_pull_requestcreate_issue(max:2)add_comment(max:20)notion_add_commentlink_sub_issue(max:3)create_pull_request_review_comment(max:10)assign_to_agentsend_slack_messagecreate_project_status_updateadd_labels(max:10)close_issue(max:20)close_pull_request(max:10)link_sub_issue(max:50)assign_to_agent(max:3)post_to_slack_channelclose_discussioncreate_agent_session(max:3)create_agent_sessionadd_comment(max:50)add_labels(max:100)update_releasecreate_pull_request(max:10)create_issue(max:100)close_issue(max:10)call_workflowclose_pull_requestresolve_pull_request_review_thread(max:5)add_reviewer(max:2)post_slack_messageunassign_from_useradd_smoked_labelreply_to_pull_request_review_comment(max:5)set_issue_typecreate_pull_request(max:2)update_project(max:20)update_project(max:5)upload_asset(max:5)update_issue(max:20)update_issue(max:5)add_comment(max:15)Structural Characteristics
Job Complexity
copilot-token-audit.lock.yml)codex-github-remote-mcp-test.lock.yml)Timeout Distribution
Average timeout: 19.1 minutes
Typical Lock File Profile
A representative
.lock.ymlfile has:schedule+workflow_dispatchEngine / Agent Distribution
copilotclaudecodexgeminiPermission Patterns
Most Common Permissions
contentsissuespull-requestsdiscussionsactionscopilot-requestssecurity-eventsNotable:
issueswrite (379) exceedsissuesread (162) — many workflows write to issues without explicitly reading them (relying on event payload context).discussionswrite (248) similarly exceedsdiscussionsread (37).MCP Server Usage
github-mcp-servergh-awserena-mcp-servermcpmarkitdownbrave-searchast-greparxiv-mcp-servernotionsemgrepcontext7pythonmemorynodegithub-mcp-serveris effectively universal.gh-aw(the repo's own MCP server) appears in 16% of workflows, andserena-mcp-serverin 12.3%.Historical Trends
Data collected daily since March 30, 2026:
Key trends:
copilot-token-audit.lock.ymlInteresting Findings
Thundering herd avoidance is universal: Every scheduled workflow uses offset cron times (non-:00/:30 minutes), suggesting intentional design to spread API load across the hour.
Remarkably uniform file sizes: 93.6% of lock files are in the 50–100 KB range, suggesting they share a common harness template. The outliers (6 files >100 KB) are likely more complex smoke/audit workflows.
schedule+workflow_dispatchdominates: 65.8% of all workflows use this combination, making scheduled automation with manual override the dominant pattern.5 workflows have unresolved category references: Discussion category is specified as a dynamic object rather than a string in these files — potential runtime failure risk.
6 workflows lack baseline safe-output tools (
missing_tool,missing_data,noop): These 6 out of 187 may be older workflows that predate the baseline tool requirement.Copilot is the dominant engine (65.8%) with Claude second at 27.8%. Together they cover 93.6% of all agentic workflows. Codex (5.9%) and Gemini (0.5%) are minority engines.
Workflow complexity is growing daily: Even though no new workflows were added in the past 5 days, total steps increased by 198 (+1.2%) since yesterday, suggesting active development of existing agentic workflows.
Recommendations
Audit the 5 workflows with object-typed discussion categories — these likely fail silently or produce errors when creating discussions. They should use explicit string category names.
Review the 6 workflows missing baseline safe-output tools — add
missing_tool,missing_data, andnoopto ensure workflow completion signals are always available.Monitor
copilot-token-audit.lock.yml— its step count jumped from 120 to 127 in one day and is the most complex workflow (127 steps). Large step counts can indicate scope creep.Consider standardizing
add_commentmax limits — the safe outputs inventory shows at least 8 variants ofadd_commentwith differentmax:values. A policy clarifying when to use each limit would reduce inconsistency.Track the size growth trend — avg file size has grown 14% in 2 weeks without new workflows being added. If this trend continues, files may exceed 100 KB broadly within the next 2–3 weeks.
Methodology
.lock.ymlin.github/workflows/)/tmp/gh-aw/cache-memory/history/since 2026-03-30/tmp/gh-aw/cache-memory/scripts/analyze_lockfiles.py.github/workflows/*.lock.ymlReferences:
Beta Was this translation helpful? Give feedback.
All reactions