feat(skill): ci-expedition — diagnose CI failures by signature

[POWERFULMOVES]

What

Adds a project skill .claude/skills/ci-expedition/SKILL.md that turns 'CI is red again' into a 30-second decode-by-signature triage.

Why

The 2026-06-05/06 GHCR cascade (#1717/#1718/#1719/#1721/#1726/#1728/#1729) was five distinct failure modes wearing one red badge: uncompilable-workflow startup_failure, Actions-allowlist startup_failure, Trivy disk-no-space, concurrency/runner cancel, and real dep CVEs. Each was re-diagnosed from scratch. This skill captures the signatures + matching fixes so the next dive is a prepped expedition, not an excavation.

Contents

• Signature table (startup_failure -> YAML break vs allowlist; Trivy failure -> disk vs cancel vs real CVE) with the exact gh/python one-liners to classify.
• Reading the real Trivy CVE table via the job-log API; verifying an embedded Go version in a prebuilt binary (the esbuild->go1.26.1 trap).
• Build-source map + dep-CVE remediation loop (fork bump -> gitlink -> re-run).
• Verify-then-merge cadence; guard-safe runner-hygiene recipe (deletes scoped scratch only; never prunes data volumes).
• Anti-patterns.

Pairs with memories reference_ghcr_ci_failure_playbook, feedback_no_docker_volume_prune, feedback_pr_trim_classifier_not_authoritative. Skill-only — no code or workflow changes.

Generated with Claude Code

Summary by CodeRabbit

• Documentation
  • Added comprehensive CI failure diagnosis guide with step-by-step triage workflows, failure classification methodology, dependency remediation guidance, log extraction procedures, and verification cadence to streamline troubleshooting and issue resolution.

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 1090d7d5-a535-4994-9966-f802c9d9e43c

📥 Commits

Reviewing files that changed from the base of the PR and between ea47a48 and 66b86c2.

📒 Files selected for processing (1)

• .claude/skills/ci-expedition/SKILL.md

---

📝 Walkthrough

Walkthrough

This PR introduces a new ci-expedition playbook document that provides a complete diagnostic framework for PMOVES CI/GHCR red failures. The document teaches signature-based failure classification, Trivy CVE extraction from logs, dependency remediation procedures, verification workflows, safe runner hygiene commands, and explicit anti-patterns to avoid.

Changes

CI Failure Diagnosis Playbook

Layer / File(s)

Summary

Complete ci-expedition triage and remediation guide .claude/skills/ci-expedition/SKILL.md

Single playbook document teaching: signature-based failure classification (YAML, allowlist, cancellation, disk-full, real CVEs), Trivy table extraction from job logs, Go version verification in binaries, build-source mapping for CI images, fork→gitlink remediation loops, PR verification cadence, safe host-side runner disk reclaim commands without destructive prune operations, documented anti-patterns, and citations to related workflows and references.

🎯 1 (Trivial) | ⏱️ ~3 minutes

🐰 A playbook for the CI maze,
Where failures once caused endless haze.
Now signature-based triage flows,
Safe disk commands and remedies grow—
Red runners bloom with golden prose! 🌱✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description covers What and Why sections adequately, but is missing required Testing section and incomplete on Required Checks and Review Coordination checkboxes from the template.	Add the Testing section with commands/output, complete all Required Checks and Review Coordination checkboxes, and optionally add Follow-up Tasks and Reviewer Notes sections as appropriate.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly summarizes the main change: adding a CI diagnostics skill focused on signature-based triage. It is concise, specific, and accurately reflects the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/ci-expedition-skill

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d2d9111f21

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".