';
html += '
Merge Success
';
@@ -1476,7 +1478,7 @@
Why calculate PR costs?
html += '
Projected Annual Waste
';
html += '
';
const annualWasteRounded = Math.round(annualWasteCost);
- const annualWasteFormatted = '$' + annualWasteRounded.toLocaleString('en-US');
+ const annualWasteFormatted = `$${annualWasteRounded.toLocaleString('en-US')}`;
html += `${annualWasteFormatted}`;
html += '
';
const annualCostPerHead = salary * benefitsMultiplier;
@@ -1498,20 +1500,20 @@
Why calculate PR costs?
// Format savings with appropriate precision
let savingsText;
if (r2rSavings >= 1000000) {
- savingsText = '$' + (r2rSavings / 1000000).toFixed(1) + 'M';
+ savingsText = `$${(r2rSavings / 1000000).toFixed(1)}M`;
} else if (r2rSavings >= 1000) {
- savingsText = '$' + (r2rSavings / 1000).toFixed(0) + 'K';
+ savingsText = `$${(r2rSavings / 1000).toFixed(0)}K`;
} else {
- savingsText = '$' + r2rSavings.toFixed(0);
+ savingsText = `$${r2rSavings.toFixed(0)}`;
}
const efficiencyDelta = modeledEfficiency - currentEfficiency;
// Format target merge time
- let targetText = targetMergeHours.toFixed(1) + 'h';
+ const targetText = `${targetMergeHours.toFixed(1)}h`;
let html = '
';
- html += '
\uD83D\uDCA1 Pro-Tip: Boost team throughput by
' + efficiencyDelta.toFixed(1) + '% and save
' + savingsText + '/yr by reducing merge times to <' + targetText + ' with ';
+ html += `
\uD83D\uDCA1 Pro-Tip: Boost team throughput by
${efficiencyDelta.toFixed(1)}% and save
${savingsText}/yr by reducing merge times to <${targetText} with `;
html += '
Ready to Review. ';
html += 'Free for open-source repositories, $6/user/org for private repos.';
html += '
';
@@ -1527,21 +1529,21 @@
Why calculate PR costs?
// Format savings with appropriate precision
let savingsText;
if (modeledSavings >= 1000000) {
- savingsText = '$' + (modeledSavings / 1000000).toFixed(1) + 'M';
+ savingsText = `$${(modeledSavings / 1000000).toFixed(1)}M`;
} else if (modeledSavings >= 1000) {
- savingsText = '$' + (modeledSavings / 1000).toFixed(0) + 'K';
+ savingsText = `$${(modeledSavings / 1000).toFixed(0)}K`;
} else {
- savingsText = '$' + modeledSavings.toFixed(0);
+ savingsText = `$${modeledSavings.toFixed(0)}`;
}
const efficiencyDelta = modeledEfficiency - currentEfficiency;
let throughputText = '';
if (efficiencyDelta > 0) {
- throughputText = ' (+' + efficiencyDelta.toFixed(1) + '% throughput)';
+ throughputText = ` (+${efficiencyDelta.toFixed(1)}% throughput)`;
}
let html = '
';
- html += '💡 Merge Time Modeling: If you lowered your average merge time to 1.5h, you would save ~' + savingsText + '/yr in engineering overhead' + throughputText + '.';
+ html += `💡 Merge Time Modeling: If you lowered your average merge time to 1.5h, you would save ~${savingsText}/yr in engineering overhead${throughputText}.`;
html += '
';
return html;
}
@@ -1674,7 +1676,9 @@
Why calculate PR costs?
// Total
let totalHours = b.author.total_hours + b.delay_cost_detail.total_delay_hours;
if (b.participants) {
- b.participants.forEach(p => totalHours += p.total_hours);
+ for (const p of b.participants) {
+ totalHours += p.total_hours;
+ }
}
output += ' ═══════════════════════════════════════════════════════════════\n';
output += ` Total ${formatCurrency(b.total_cost).padStart(12)} ${formatTimeUnit(totalHours)}\n\n`;
@@ -1934,7 +1938,7 @@
Why calculate PR costs?
return output;
}
- function formatExtrapolatedTotal(e, days) {
+ function formatExtrapolatedTotal(e, _days) {
let output = '';
// Calculate LOC for header and lines
@@ -1979,13 +1983,13 @@
Why calculate PR costs?
}
// Delay Costs
- let delayCostsHeader = ' Delay Costs (human PRs avg ' + formatTimeUnit(e.avg_human_pr_duration_hours || 0) + ' open';
+ let delayCostsHeader = ` Delay Costs (human PRs avg ${formatTimeUnit(e.avg_human_pr_duration_hours || 0)} open`;
if ((e.bot_prs || 0) > 0) {
- delayCostsHeader += ', bot PRs avg ' + formatTimeUnit(e.avg_bot_pr_duration_hours || 0);
+ delayCostsHeader += `, bot PRs avg ${formatTimeUnit(e.avg_bot_pr_duration_hours || 0)}`;
}
delayCostsHeader += ')';
- output += delayCostsHeader + '\n';
- output += ' ' + '─'.repeat(delayCostsHeader.length - 2) + '\n';
+ output += `${delayCostsHeader}\n`;
+ output += ` ${'─'.repeat(delayCostsHeader.length - 2)}\n`;
if ((e.delivery_delay_cost || 0) > 0) {
output += formatItemLine("Workstream blockage", e.delivery_delay_cost, formatTimeUnit(e.delivery_delay_hours), `(${e.human_prs || 0} PRs)`);
@@ -2134,11 +2138,11 @@
Why calculate PR costs?
const sampleSize = document.getElementById('repoSampleSize').value;
const days = document.getElementById('repoDays').value;
if (sampleSize) {
- request.sample_size = parseInt(sampleSize);
+ request.sample_size = parseInt(sampleSize, 10);
queryParams.set('sample', sampleSize);
}
if (days) {
- request.days = parseInt(days);
+ request.days = parseInt(days, 10);
queryParams.set('days', days);
}
} else {
@@ -2151,11 +2155,11 @@
Why calculate PR costs?
const sampleSize = document.getElementById('orgSampleSize').value;
const days = document.getElementById('orgDays').value;
if (sampleSize) {
- request.sample_size = parseInt(sampleSize);
+ request.sample_size = parseInt(sampleSize, 10);
queryParams.set('sample', sampleSize);
}
if (days) {
- request.days = parseInt(days);
+ request.days = parseInt(days, 10);
queryParams.set('days', days);
}
}
@@ -2201,7 +2205,9 @@
Why calculate PR costs?
b.delay_cost_detail.automated_updates_cost + b.delay_cost_detail.pr_tracking_cost;
let totalHours = b.author.total_hours + b.delay_cost_detail.total_delay_hours;
if (b.participants) {
- b.participants.forEach(p => totalHours += p.total_hours);
+ for (const p of b.participants) {
+ totalHours += p.total_hours;
+ }
}
const efficiencyPct = totalHours > 0 ? 100.0 * (totalHours - preventableHours) / totalHours : 100.0;
const { grade, message } = efficiencyGrade(efficiencyPct);
@@ -2216,7 +2222,7 @@
Why calculate PR costs?
html += '
';
html += '
Cost Breakdown
';
- html += '
' + formatBreakdown(data) + '
';
+ html += `
${formatBreakdown(data)}
`;
html += '
';
resultDiv.innerHTML = html;
@@ -2261,7 +2267,7 @@
Why calculate PR costs?
if (isRetryable && attempt < maxRetries) {
// Exponential backoff with jitter: 1s, 2s, 4s, 8s, 16s, 32s, 64s, up to 120s
- const baseDelay = Math.min(1000 * Math.pow(2, attempt - 1), 120000);
+ const baseDelay = Math.min(1000 * 2 ** (attempt - 1), 120000);
// Add jitter: random value between 0% and 25% of base delay
const jitter = Math.random() * 0.25 * baseDelay;
const delay = Math.floor(baseDelay + jitter);
@@ -2284,14 +2290,15 @@
Why calculate PR costs?
}
}
- async function attemptStreamingRequest(endpoint, request, resultDiv, attempt, maxRetries) {
+ async function attemptStreamingRequest(endpoint, request, resultDiv, _attempt, _maxRetries) {
// EventSource doesn't support POST, so we need a different approach
// We'll use fetch to initiate, but handle it as a proper SSE stream
return new Promise((resolve, reject) => {
- let progressContainer;
+ let _progressContainer;
let lastActivityTime = Date.now();
let timeoutId;
let reader; // Declare reader in outer scope to prevent race condition
+ const submitBtn = document.querySelector('button[type="submit"]');
// Set up activity timeout (10 seconds of no data = connection lost)
// Server sends updates every ~5s, so 10s allows for network latency
@@ -2302,7 +2309,7 @@
Why calculate PR costs?
const elapsed = Date.now() - lastActivityTime;
if (elapsed >= 10000) {
if (reader) {
- reader.cancel().catch(() => {}); // Ignore cancel errors
+ reader.cancel().catch(() => { /* intentionally ignored */ });
}
reject(new Error('Stream timeout: no data received for 10 seconds'));
}
@@ -2354,7 +2361,7 @@
Why calculate PR costs?
if (data.type === 'error' && !data.pr) {
// Global error
if (timeoutId) clearTimeout(timeoutId);
- reader.cancel().catch(() => {}); // Ignore cancel errors
+ reader.cancel().catch(() => { /* intentionally ignored */ });
reject(new Error(data.error));
return;
}
@@ -2363,7 +2370,7 @@
Why calculate PR costs?
// Final result - show both average and extrapolated in separate sections
const mode = document.querySelector('input[name="mode"]:checked').value;
const e = data.result;
- const days = document.getElementById(mode + 'Days').value || '90';
+ const days = document.getElementById(`${mode}Days`).value || '90';
// Get source name
let sourceName;
@@ -2398,7 +2405,7 @@
Why calculate PR costs?
const extEfficiencyPct = e.total_hours > 0 ? 100.0 * (e.total_hours - extPreventableHours) / e.total_hours : 100.0;
// Use grades computed by backend (single source of truth)
const extEfficiency = { grade: e.efficiency_grade, message: e.efficiency_message };
- const annualMultiplier = 365.0 / parseInt(days);
+ const annualMultiplier = 365.0 / parseInt(days, 10);
const annualWasteHours = extPreventableHours * annualMultiplier;
const annualWasteCost = extPreventableCost * annualMultiplier;
@@ -2456,12 +2463,12 @@
Why calculate PR costs?
const avgDeliveryDelayCost = e.delivery_delay_cost / totalPRs;
const avgCodeChurnHours = e.code_churn_hours / totalPRs;
const avgDeliveryDelayHours = e.delivery_delay_hours / totalPRs;
- const avgTotalCost = e.total_cost / totalPRs;
+ const _avgTotalCost = e.total_cost / totalPRs;
const avgTotalHours = e.total_hours / totalPRs;
const avgPreventableHours = avgCodeChurnHours + avgDeliveryDelayHours + avgCodeChurnHours + (e.automated_updates_hours / totalPRs) + (e.pr_tracking_hours / totalPRs);
- const avgPreventableCost = avgCodeChurnCost + avgDeliveryDelayCost + avgCodeChurnCost + (e.automated_updates_cost / totalPRs) + (e.pr_tracking_cost / totalPRs);
+ const _avgPreventableCost = avgCodeChurnCost + avgDeliveryDelayCost + avgCodeChurnCost + (e.automated_updates_cost / totalPRs) + (e.pr_tracking_cost / totalPRs);
const avgEfficiencyPct = avgTotalHours > 0 ? 100.0 * (avgTotalHours - avgPreventableHours) / avgTotalHours : 100.0;
- const avgEfficiency = efficiencyGrade(avgEfficiencyPct);
+ const _avgEfficiency = efficiencyGrade(avgEfficiencyPct);
// Add workflow timeline if available (only when using turnserver)
if (data.seconds_in_state) {
@@ -2477,13 +2484,13 @@
Why calculate PR costs?
// Extrapolated total section
html += '
';
html += `
${days}-day Estimated Costs
`;
- html += '
' + formatExtrapolatedTotal(e, days) + '
';
+ html += `
${formatExtrapolatedTotal(e, days)}
`;
html += '
';
// Average PR section
html += '
';
html += `
Average PR (sampled over ${days} day period)
`;
- html += '
' + formatAveragePR(e) + '
';
+ html += `
${formatAveragePR(e)}
`;
html += '
';
resultDiv.innerHTML = html;
diff --git a/pkg/cost/analyze.go b/pkg/cost/analyze.go
index a807b37..a02820c 100644
--- a/pkg/cost/analyze.go
+++ b/pkg/cost/analyze.go
@@ -75,21 +75,21 @@ func AnalyzePRs(ctx context.Context, req *AnalysisRequest) (*AnalysisResult, err
// Sequential processing
if concurrency == 1 {
- for i, pr := range req.Samples {
- prURL := fmt.Sprintf("https://github.com/%s/%s/pull/%d", pr.Owner, pr.Repo, pr.Number)
+ for i := range req.Samples {
+ prURL := fmt.Sprintf("https://github.com/%s/%s/pull/%d", req.Samples[i].Owner, req.Samples[i].Repo, req.Samples[i].Number)
if req.Logger != nil {
req.Logger.InfoContext(ctx, "Processing sample PR",
- "repo", fmt.Sprintf("%s/%s", pr.Owner, pr.Repo),
- "number", pr.Number,
+ "repo", fmt.Sprintf("%s/%s", req.Samples[i].Owner, req.Samples[i].Repo),
+ "number", req.Samples[i].Number,
"progress", fmt.Sprintf("%d/%d", i+1, len(req.Samples)))
}
- prData, err := req.Fetcher.FetchPRData(ctx, prURL, pr.UpdatedAt)
+ prData, err := req.Fetcher.FetchPRData(ctx, prURL, req.Samples[i].UpdatedAt)
if err != nil {
if req.Logger != nil {
req.Logger.WarnContext(ctx, "Failed to fetch PR data, skipping",
- "pr_number", pr.Number, "error", err)
+ "pr_number", req.Samples[i].Number, "error", err)
}
skipped++
continue
@@ -103,11 +103,10 @@ func AnalyzePRs(ctx context.Context, req *AnalysisRequest) (*AnalysisResult, err
var wg sync.WaitGroup
semaphore := make(chan struct{}, concurrency)
- for i, pr := range req.Samples {
- wg.Add(1)
- go func(index int, prInfo PRSummaryInfo) {
- defer wg.Done()
-
+ for i := range req.Samples {
+ index := i
+ prInfo := req.Samples[i]
+ wg.Go(func() {
// Acquire semaphore slot
semaphore <- struct{}{}
defer func() { <-semaphore }()
@@ -137,7 +136,7 @@ func AnalyzePRs(ctx context.Context, req *AnalysisRequest) (*AnalysisResult, err
mu.Lock()
breakdowns = append(breakdowns, breakdown)
mu.Unlock()
- }(i, pr)
+ })
}
wg.Wait()
diff --git a/pkg/cost/cost.go b/pkg/cost/cost.go
index bf6c8a0..ad012ca 100644
--- a/pkg/cost/cost.go
+++ b/pkg/cost/cost.go
@@ -272,18 +272,11 @@ func Calculate(data PRData, cfg Config) Breakdown {
delayDays := delayHours / 24.0
// Find the last event timestamp to determine time since last activity
- var lastEventTime time.Time
+ lastEventTime := data.CreatedAt
if len(data.Events) > 0 {
- // Find the most recent event
- lastEventTime = data.Events[0].Timestamp
- for _, event := range data.Events {
- if event.Timestamp.After(lastEventTime) {
- lastEventTime = event.Timestamp
- }
- }
- } else {
- // No events, use CreatedAt
- lastEventTime = data.CreatedAt
+ lastEventTime = slices.MaxFunc(data.Events, func(a, b ParticipantEvent) int {
+ return a.Timestamp.Compare(b.Timestamp)
+ }).Timestamp
}
// Calculate time since last event (using endTime)
@@ -676,13 +669,9 @@ func calculateParticipantCosts(data PRData, cfg Config, hourlyRate float64) []Pa
for actor, events := range eventsByActor {
// Check if this person is a reviewer (has review or review_comment events)
- isReviewer := false
- for _, event := range events {
- if event.Kind == "review" || event.Kind == "review_comment" {
- isReviewer = true
- break
- }
- }
+ isReviewer := slices.ContainsFunc(events, func(e ParticipantEvent) bool {
+ return e.Kind == "review" || e.Kind == "review_comment"
+ })
// Calculate review cost (LOC-based, once per reviewer)
var reviewHours float64
@@ -827,14 +816,14 @@ func calculateSessionCosts(events []ParticipantEvent, cfg Config) (githubHours,
// Between sessions: context out + context in, capped by gap
for i := range len(sessionGroups) - 1 {
- lastEventOfSession := sorted[sessionGroups[i].end].Timestamp
- firstEventOfNextSession := sorted[sessionGroups[i+1].start].Timestamp
- gap := firstEventOfNextSession.Sub(lastEventOfSession)
+ prev := sorted[sessionGroups[i].end].Timestamp
+ next := sorted[sessionGroups[i+1].start].Timestamp
+ gap := next.Sub(prev)
// Maximum context switch is contextOut + contextIn
- maxContextSwitch := contextOut + contextIn
- if gap >= maxContextSwitch {
- contextTime += maxContextSwitch
+ maxSwitch := contextOut + contextIn
+ if gap >= maxSwitch {
+ contextTime += maxSwitch
} else {
// Cap at gap - split proportionally based on out/in ratio
// This maintains the asymmetry (16.55 min out vs 3 min in)
@@ -845,9 +834,5 @@ func calculateSessionCosts(events []ParticipantEvent, cfg Config) (githubHours,
// Last session: context out
contextTime += contextOut
- githubHours = githubTime.Hours()
- contextHours = contextTime.Hours()
- sessionCount := len(sessionGroups)
-
- return githubHours, contextHours, sessionCount
+ return githubTime.Hours(), contextTime.Hours(), len(sessionGroups)
}
diff --git a/pkg/cost/cost_test.go b/pkg/cost/cost_test.go
index 1621a25..2d3de6d 100644
--- a/pkg/cost/cost_test.go
+++ b/pkg/cost/cost_test.go
@@ -443,16 +443,7 @@ func TestCalculateWithRealPR13(t *testing.T) {
t.Skipf("Skipping real PR test: %v", err)
}
- // Extract JSON from the last line (prx outputs logs then JSON)
- lines := strings.Split(string(data), "\n")
- var jsonLine string
- for i := len(lines) - 1; i >= 0; i-- {
- if strings.HasPrefix(lines[i], "{") {
- jsonLine = lines[i]
- break
- }
- }
-
+ // Parse JSON (may be multi-line or single-line)
var prxData struct {
Events []struct {
Timestamp string `json:"timestamp"`
@@ -468,7 +459,7 @@ func TestCalculateWithRealPR13(t *testing.T) {
} `json:"pull_request"`
}
- if err := json.Unmarshal([]byte(jsonLine), &prxData); err != nil {
+ if err := json.Unmarshal(data, &prxData); err != nil {
t.Fatalf("Failed to parse PR data: %v", err)
}
diff --git a/pkg/cost/extrapolate.go b/pkg/cost/extrapolate.go
index c4caaf4..6f624fa 100644
--- a/pkg/cost/extrapolate.go
+++ b/pkg/cost/extrapolate.go
@@ -191,7 +191,7 @@ type ExtrapolatedBreakdown struct {
// The function computes the average cost per PR from the samples, then multiplies
// by the total PR count to estimate population-wide costs.
//
-//nolint:revive,maintidx // Complex calculation function benefits from cohesion
+//nolint:revive,maintidx,gocognit // Complex calculation function benefits from cohesion
func ExtrapolateFromSamples(breakdowns []Breakdown, totalPRs, totalAuthors, actualOpenPRs int, daysInPeriod int, cfg Config, prs []PRSummaryInfo, repoVisibility map[string]bool) ExtrapolatedBreakdown {
// Count unique repositories and their visibility
uniqueRepos := make(map[string]bool)
diff --git a/pkg/github/fetch.go b/pkg/github/fetch.go
index a1e8aea..7931217 100644
--- a/pkg/github/fetch.go
+++ b/pkg/github/fetch.go
@@ -88,7 +88,6 @@ func PRDataFromPRX(prData *prx.PullRequestData) cost.PRData {
// Returns:
// - cost.PRData with all information needed for cost calculation
func FetchPRData(ctx context.Context, prURL string, token string, updatedAt time.Time) (cost.PRData, error) {
- // Parse the PR URL to extract owner, repo, and PR number
owner, repo, number, err := parsePRURL(prURL)
if err != nil {
slog.Error("Failed to parse PR URL", "url", prURL, "error", err)
@@ -97,46 +96,33 @@ func FetchPRData(ctx context.Context, prURL string, token string, updatedAt time
slog.Debug("Parsed PR URL", "owner", owner, "repo", repo, "number", number)
- // Get cache directory from user's cache directory
- userCacheDir, err := os.UserCacheDir()
- if err != nil {
- slog.Warn("Failed to get cache directory, using non-cached client", "error", err)
- // Fallback to non-cached client
- client := prx.NewClient(token)
- prData, err := client.PullRequest(ctx, owner, repo, number)
- if err != nil {
- slog.Error("GitHub API call failed", "owner", owner, "repo", repo, "pr", number, "error", err)
- return cost.PRData{}, fmt.Errorf("failed to fetch PR data: %w", err)
+ // Try to use cache client if possible, fall back to non-cached client
+ var prData *prx.PullRequestData
+ cacheDir := ""
+ if userCacheDir, err := os.UserCacheDir(); err == nil {
+ cacheDir = filepath.Join(userCacheDir, "prcost")
+ if err := os.MkdirAll(cacheDir, 0o700); err != nil {
+ slog.Warn("Failed to create cache directory, using non-cached client", "error", err)
+ cacheDir = ""
}
- result := PRDataFromPRX(prData)
- return result, nil
+ } else {
+ slog.Warn("Failed to get cache directory, using non-cached client", "error", err)
}
- cacheDir := filepath.Join(userCacheDir, "prcost")
- if err := os.MkdirAll(cacheDir, 0o700); err != nil {
- slog.Warn("Failed to create cache directory, using non-cached client", "error", err)
- // Fallback to non-cached client
- client := prx.NewClient(token)
- prData, err := client.PullRequest(ctx, owner, repo, number)
- if err != nil {
- slog.Error("GitHub API call failed", "owner", owner, "repo", repo, "pr", number, "error", err)
- return cost.PRData{}, fmt.Errorf("failed to fetch PR data: %w", err)
+ if cacheDir != "" {
+ client, cErr := prx.NewCacheClient(token, cacheDir)
+ if cErr != nil {
+ slog.Error("Failed to create cache client", "error", cErr)
+ return cost.PRData{}, fmt.Errorf("failed to create cache client: %w", cErr)
}
- result := PRDataFromPRX(prData)
- return result, nil
- }
-
- // Create prx cache client for disk-based caching
- client, err := prx.NewCacheClient(token, cacheDir)
- if err != nil {
- slog.Error("Failed to create cache client", "error", err)
- return cost.PRData{}, fmt.Errorf("failed to create cache client: %w", err)
+ slog.Debug("Calling GitHub API via prx cache client",
+ "owner", owner, "repo", repo, "pr", number, "updated_at", updatedAt.Format(time.RFC3339))
+ prData, err = client.PullRequest(ctx, owner, repo, number, updatedAt)
+ } else {
+ client := prx.NewClient(token)
+ prData, err = client.PullRequest(ctx, owner, repo, number)
}
- // Fetch PR data using prx (prx has built-in retry logic and caching)
- // Pass updatedAt for effective cache validation
- slog.Debug("Calling GitHub API via prx cache client", "owner", owner, "repo", repo, "pr", number, "updated_at", updatedAt.Format(time.RFC3339))
- prData, err := client.PullRequest(ctx, owner, repo, number, updatedAt)
if err != nil {
slog.Error("GitHub API call failed", "owner", owner, "repo", repo, "pr", number, "error", err)
return cost.PRData{}, fmt.Errorf("failed to fetch PR data: %w", err)
@@ -148,7 +134,6 @@ func FetchPRData(ctx context.Context, prURL string, token string, updatedAt time
"author", prData.PullRequest.Author,
"total_events", len(prData.Events))
- // Convert to cost.PRData
result := PRDataFromPRX(prData)
slog.Debug("Converted PR data", "human_events", len(result.Events))
return result, nil
diff --git a/pkg/github/query.go b/pkg/github/query.go
index 164efcc..39b1853 100644
--- a/pkg/github/query.go
+++ b/pkg/github/query.go
@@ -3,15 +3,48 @@ package github
import (
"bytes"
"context"
+ "crypto/sha256"
+ "encoding/hex"
"encoding/json"
"fmt"
"log/slog"
"net/http"
"sort"
+ "strconv"
"strings"
"time"
)
+// Cache is a simple interface for caching any type of data.
+// The server provides this via fido, with proper TTLs for each data type.
+type Cache interface {
+ Get(ctx context.Context, key string) (any, bool)
+ Set(ctx context.Context, key string, value any)
+}
+
+// Client provides cached access to GitHub GraphQL APIs.
+type Client struct {
+ cache Cache
+}
+
+// NewClient creates a GitHub client with caching.
+// If cache is nil, caching is disabled (queries will always hit GitHub).
+func NewClient(cache Cache) *Client {
+ return &Client{cache: cache}
+}
+
+// noopCache implements Cache but never caches anything.
+type noopCache struct{}
+
+func (noopCache) Get(context.Context, string) (any, bool) { return nil, false }
+func (noopCache) Set(context.Context, string, any) {}
+
+// NewClientWithoutCache creates a GitHub client that never caches.
+// Use this for CLI tools or one-off queries.
+func NewClientWithoutCache() *Client {
+ return &Client{cache: noopCache{}}
+}
+
// PRSummary holds minimal information about a PR for sampling and fetching.
type PRSummary struct {
UpdatedAt time.Time
@@ -73,7 +106,40 @@ func IsBot(authorType, authorLogin string) bool {
return false
}
-// FetchPRsFromRepo queries GitHub GraphQL API for all PRs in a repository
+// QueryHash computes a SHA256 hash of a GraphQL query string for cache key generation.
+// This ensures that cache keys change when query structure changes.
+func QueryHash(query string) string {
+ hash := sha256.Sum256([]byte(query))
+ return hex.EncodeToString(hash[:8]) // Use first 8 bytes (16 hex chars) for brevity
+}
+
+// CacheKey generates a cache key from a GraphQL query template and its parameters.
+// The key includes a hash of the query text so cache is invalidated when the query changes.
+//
+// Parameters:
+// - queryTemplate: The GraphQL query text (can include %s placeholders before fmt.Sprintf)
+// - params: Key-value pairs describing the query parameters (e.g., "org", "myorg", "days", "30")
+//
+// Returns: A cache key like "org=myorg:days=30:qh=a1b2c3d4".
+func CacheKey(queryTemplate string, params ...string) string {
+ if len(params)%2 != 0 {
+ panic("CacheKey requires even number of params (key-value pairs)")
+ }
+
+ // Build parameter portion of cache key
+ var keyParts []string
+ for i := 0; i < len(params); i += 2 {
+ keyParts = append(keyParts, fmt.Sprintf("%s=%v", params[i], params[i+1]))
+ }
+
+ // Add query hash to invalidate cache when query structure changes
+ queryHash := QueryHash(queryTemplate)
+ keyParts = append(keyParts, fmt.Sprintf("qh=%s", queryHash))
+
+ return strings.Join(keyParts, ":")
+}
+
+// FetchPRsFromRepo queries GitHub GraphQL API (with caching) for all PRs in a repository
// modified since the specified date.
//
// Uses an adaptive multi-query strategy for comprehensive time coverage:
@@ -81,18 +147,58 @@ func IsBot(authorType, authorLogin string) bool {
// 2. If hit limit, query old activity (updated ASC) - get ~500 more
// 3. Check gap between oldest "recent" and newest "old"
// 4. If gap > 1 week, query early period (created ASC) - get ~250 more
-//
-// Parameters:
-// - ctx: Context for the API call
-// - owner: GitHub repository owner
-// - repo: GitHub repository name
-// - since: Only include PRs updated after this time
-// - token: GitHub authentication token
-// - progress: Optional callback for progress updates (can be nil)
-//
-// Returns:
-// - Slice of PRSummary for all matching PRs (deduplicated)
-func FetchPRsFromRepo(ctx context.Context, owner, repo string, since time.Time, token string, progress ProgressCallback) ([]PRSummary, error) {
+func (c *Client) FetchPRsFromRepo(
+ ctx context.Context, owner, repo string, since time.Time, token string, progress ProgressCallback,
+) ([]PRSummary, error) {
+ // Define query template for cache key
+ queryTemplate := `
+ query($owner: String!, $name: String!, $cursor: String) {
+ repository(owner: $owner, name: $name) {
+ pullRequests(first: 100, after: $cursor, orderBy: {field: %s, direction: %s}) {
+ totalCount
+ pageInfo {
+ hasNextPage
+ endCursor
+ }
+ nodes {
+ number
+ createdAt
+ updatedAt
+ closedAt
+ state
+ merged
+ author {
+ login
+ __typename
+ }
+ }
+ }
+ }
+ }`
+
+ days := int(time.Since(since).Hours() / 24)
+ cacheKey := CacheKey(queryTemplate, "owner", owner, "repo", repo, "days", strconv.Itoa(days))
+
+ // Check cache
+ if cached, found := c.cache.Get(ctx, cacheKey); found {
+ if prs, ok := cached.([]PRSummary); ok {
+ return prs, nil
+ }
+ }
+
+ // Cache miss - fetch from GitHub
+ prs, err := fetchPRsFromRepo(ctx, owner, repo, since, token, progress)
+ if err != nil {
+ return nil, err
+ }
+
+ // Store in cache
+ c.cache.Set(ctx, cacheKey, prs)
+ return prs, nil
+}
+
+// fetchPRsFromRepo is the internal implementation.
+func fetchPRsFromRepo(ctx context.Context, owner, repo string, since time.Time, token string, progress ProgressCallback) ([]PRSummary, error) {
// Query 1: Recent activity (updated DESC) - get up to 1000 PRs
recent, hitLimit, err := fetchPRsFromRepoWithSort(ctx, repoSortParams{
owner: owner, repo: repo, since: since, token: token,
@@ -172,14 +278,19 @@ type repoSortParams struct {
}
// fetchPRsFromRepoWithSort queries GitHub GraphQL API with configurable sort order.
-// Returns PRs and a boolean indicating if the API limit (1000) was hit.
-func fetchPRsFromRepoWithSort(ctx context.Context, params repoSortParams) ([]PRSummary, bool, error) {
+// Returns PRs, a boolean indicating if the API limit (1000) was hit, and a query hash for caching.
+func fetchPRsFromRepoWithSort(
+ ctx context.Context, params repoSortParams,
+) (prs []PRSummary, hitLimit bool, err error) {
owner, repo := params.owner, params.repo
since, token := params.since, params.token
field, direction := params.field, params.direction
maxPRs, queryName := params.maxPRs, params.queryName
progress := params.progress
- query := fmt.Sprintf(`
+
+ // Build the GraphQL query - note we use %s placeholders for field/direction which vary
+ // but the hash is computed from the base structure to detect field changes (like adding __typename)
+ queryTemplate := `
query($owner: String!, $name: String!, $cursor: String) {
repository(owner: $owner, name: $name) {
pullRequests(first: 100, after: $cursor, orderBy: {field: %s, direction: %s}) {
@@ -202,12 +313,13 @@ func fetchPRsFromRepoWithSort(ctx context.Context, params repoSortParams) ([]PRS
}
}
}
- }`, field, direction)
+ }`
+ query := fmt.Sprintf(queryTemplate, field, direction)
var allPRs []PRSummary
var cursor *string
pageNum := 0
- hitLimit := false
+ hitLimit = false
for {
pageNum++
@@ -379,7 +491,7 @@ func deduplicatePRs(prs []PRSummary) []PRSummary {
return unique
}
-// FetchPRsFromOrg queries GitHub GraphQL Search API for all PRs across
+// FetchPRsFromOrg queries GitHub GraphQL Search API (with caching) for all PRs across
// an organization modified since the specified date.
//
// Uses an adaptive multi-query strategy for comprehensive time coverage:
@@ -387,17 +499,62 @@ func deduplicatePRs(prs []PRSummary) []PRSummary {
// 2. If hit limit, query old activity (updated asc) - get ~500 more
// 3. Check gap between oldest "recent" and newest "old"
// 4. If gap > 1 week, query early period (created asc) - get ~250 more
-//
-// Parameters:
-// - ctx: Context for the API call
-// - org: GitHub organization name
-// - since: Only include PRs updated after this time
-// - token: GitHub authentication token
-// - progress: Optional callback for progress updates (can be nil)
-//
-// Returns:
-// - Slice of PRSummary for all matching PRs (deduplicated)
-func FetchPRsFromOrg(ctx context.Context, org string, since time.Time, token string, progress ProgressCallback) ([]PRSummary, error) {
+func (c *Client) FetchPRsFromOrg(ctx context.Context, org string, since time.Time, token string, progress ProgressCallback) ([]PRSummary, error) {
+ // Define query template for cache key
+ queryTemplate := `
+ query($searchQuery: String!, $cursor: String) {
+ search(query: $searchQuery, type: ISSUE, first: 100, after: $cursor) {
+ issueCount
+ pageInfo {
+ hasNextPage
+ endCursor
+ }
+ nodes {
+ ... on PullRequest {
+ number
+ createdAt
+ updatedAt
+ closedAt
+ state
+ merged
+ author {
+ login
+ __typename
+ }
+ repository {
+ owner {
+ login
+ }
+ name
+ }
+ }
+ }
+ }
+ }`
+
+ days := int(time.Since(since).Hours() / 24)
+ cacheKey := CacheKey(queryTemplate, "org", org, "days", strconv.Itoa(days))
+
+ // Check cache
+ if cached, found := c.cache.Get(ctx, cacheKey); found {
+ if prs, ok := cached.([]PRSummary); ok {
+ return prs, nil
+ }
+ }
+
+ // Cache miss - fetch from GitHub
+ prs, err := fetchPRsFromOrg(ctx, org, since, token, progress)
+ if err != nil {
+ return nil, err
+ }
+
+ // Store in cache
+ c.cache.Set(ctx, cacheKey, prs)
+ return prs, nil
+}
+
+// fetchPRsFromOrg is the internal implementation.
+func fetchPRsFromOrg(ctx context.Context, org string, since time.Time, token string, progress ProgressCallback) ([]PRSummary, error) {
sinceStr := since.Format("2006-01-02")
// Query 1: Recent activity (updated desc) - get up to 1000 PRs
@@ -482,8 +639,10 @@ type orgSortParams struct {
}
// fetchPRsFromOrgWithSort queries GitHub Search API with configurable sort order.
-// Returns PRs and a boolean indicating if the API limit (1000) was hit.
-func fetchPRsFromOrgWithSort(ctx context.Context, params orgSortParams) ([]PRSummary, bool, error) {
+// Returns PRs, a boolean indicating if the API limit (1000) was hit, and a query hash for caching.
+func fetchPRsFromOrgWithSort(
+ ctx context.Context, params orgSortParams,
+) (prs []PRSummary, hitLimit bool, err error) {
org, sinceStr := params.org, params.sinceStr
token := params.token
field, direction := params.field, params.direction
@@ -493,7 +652,7 @@ func fetchPRsFromOrgWithSort(ctx context.Context, params orgSortParams) ([]PRSum
// Query format: org:myorg is:pr updated:>2025-07-25 sort:updated-desc
searchQuery := fmt.Sprintf("org:%s is:pr %s:>%s sort:%s-%s", org, field, sinceStr, field, direction)
- const query = `
+ const queryTemplate = `
query($searchQuery: String!, $cursor: String) {
search(query: $searchQuery, type: ISSUE, first: 100, after: $cursor) {
issueCount
@@ -527,7 +686,7 @@ func fetchPRsFromOrgWithSort(ctx context.Context, params orgSortParams) ([]PRSum
var allPRs []PRSummary
var cursor *string
pageNum := 0
- hitLimit := false
+ hitLimit = false
for {
pageNum++
@@ -540,7 +699,7 @@ func fetchPRsFromOrgWithSort(ctx context.Context, params orgSortParams) ([]PRSum
}
requestBody := map[string]any{
- "query": query,
+ "query": queryTemplate,
"variables": variables,
}
@@ -627,18 +786,18 @@ func fetchPRsFromOrgWithSort(ctx context.Context, params orgSortParams) ([]PRSum
"has_next_page", hasNextPage)
// Collect PRs from this page
- for _, node := range result.Data.Search.Nodes {
+ for i := range result.Data.Search.Nodes {
allPRs = append(allPRs, PRSummary{
- Owner: node.Repository.Owner.Login,
- Repo: node.Repository.Name,
- Number: node.Number,
- Author: node.Author.Login,
- AuthorType: node.Author.TypeName,
- CreatedAt: node.CreatedAt,
- UpdatedAt: node.UpdatedAt,
- ClosedAt: node.ClosedAt,
- State: node.State,
- Merged: node.Merged,
+ Owner: result.Data.Search.Nodes[i].Repository.Owner.Login,
+ Repo: result.Data.Search.Nodes[i].Repository.Name,
+ Number: result.Data.Search.Nodes[i].Number,
+ Author: result.Data.Search.Nodes[i].Author.Login,
+ AuthorType: result.Data.Search.Nodes[i].Author.TypeName,
+ CreatedAt: result.Data.Search.Nodes[i].CreatedAt,
+ UpdatedAt: result.Data.Search.Nodes[i].UpdatedAt,
+ ClosedAt: result.Data.Search.Nodes[i].ClosedAt,
+ State: result.Data.Search.Nodes[i].State,
+ Merged: result.Data.Search.Nodes[i].Merged,
})
// Check if we've hit the maxPRs limit
@@ -677,11 +836,11 @@ func deduplicatePRsByOwnerRepoNumber(prs []PRSummary) []PRSummary {
seen := make(map[key]bool)
var unique []PRSummary
- for _, pr := range prs {
- k := key{owner: pr.Owner, repo: pr.Repo, number: pr.Number}
+ for i := range prs {
+ k := key{owner: prs[i].Owner, repo: prs[i].Repo, number: prs[i].Number}
if !seen[k] {
seen[k] = true
- unique = append(unique, pr)
+ unique = append(unique, prs[i])
}
}
@@ -696,8 +855,8 @@ func deduplicatePRsByOwnerRepoNumber(prs []PRSummary) []PRSummary {
// CountBotPRs counts how many PRs in the list are authored by bots.
func CountBotPRs(prs []PRSummary) int {
count := 0
- for _, pr := range prs {
- if IsBot(pr.AuthorType, pr.Author) {
+ for i := range prs {
+ if IsBot(prs[i].AuthorType, prs[i].Author) {
count++
}
}
@@ -768,11 +927,11 @@ func SamplePRs(prs []PRSummary, sampleSize int) []PRSummary {
}
// Assign PRs to buckets
- for _, pr := range sorted {
+ for j := range sorted {
for i := range buckets {
- if (pr.UpdatedAt.After(buckets[i].startTime) || pr.UpdatedAt.Equal(buckets[i].startTime)) &&
- (pr.UpdatedAt.Before(buckets[i].endTime) || pr.UpdatedAt.Equal(buckets[i].endTime)) {
- buckets[i].prs = append(buckets[i].prs, pr)
+ if (sorted[j].UpdatedAt.After(buckets[i].startTime) || sorted[j].UpdatedAt.Equal(buckets[i].startTime)) &&
+ (sorted[j].UpdatedAt.Before(buckets[i].endTime) || sorted[j].UpdatedAt.Equal(buckets[i].endTime)) {
+ buckets[i].prs = append(buckets[i].prs, sorted[j])
break
}
}
@@ -792,13 +951,13 @@ func SamplePRs(prs []PRSummary, sampleSize int) []PRSummary {
// If some buckets were empty, fill with nearest unused PRs
if len(samples) < sampleSize {
- for _, pr := range sorted {
+ for j := range sorted {
if len(samples) >= sampleSize {
break
}
- if !used[pr.Number] {
- samples = append(samples, pr)
- used[pr.Number] = true
+ if !used[sorted[j].Number] {
+ samples = append(samples, sorted[j])
+ used[sorted[j].Number] = true
}
}
}
@@ -810,9 +969,9 @@ func SamplePRs(prs []PRSummary, sampleSize int) []PRSummary {
// Bot authors are excluded from the count.
func CountUniqueAuthors(prs []PRSummary) int {
uniqueAuthors := make(map[string]bool)
- for _, pr := range prs {
- if !IsBot(pr.AuthorType, pr.Author) {
- uniqueAuthors[pr.Author] = true
+ for i := range prs {
+ if !IsBot(prs[i].AuthorType, prs[i].Author) {
+ uniqueAuthors[prs[i].Author] = true
}
}
return len(uniqueAuthors)
@@ -854,18 +1013,37 @@ func CalculateActualTimeWindow(prs []PRSummary, requestedDays int) (actualDays i
return requestedDays, false
}
-// CountOpenPRsInRepo queries GitHub GraphQL API to get the total count of open PRs in a repository
-// that were created more than 24 hours ago (PRs open <24 hours don't count as tracking overhead yet).
-//
-// Parameters:
-// - ctx: Context for the API call
-// - owner: GitHub repository owner
-// - repo: GitHub repository name
-// - token: GitHub authentication token
-//
-// Returns:
-// - count: Number of open PRs created >24 hours ago
-func CountOpenPRsInRepo(ctx context.Context, owner, repo, token string) (int, error) {
+// CountOpenPRsInRepo queries GitHub GraphQL API (with caching) to get the total count
+// of open PRs in a repository that were created more than 24 hours ago.
+func (c *Client) CountOpenPRsInRepo(ctx context.Context, owner, repo, token string) (int, error) {
+ queryTemplate := `query($searchQuery: String!) {
+ search(query: $searchQuery, type: ISSUE, first: 0) {
+ issueCount
+ }
+ }`
+
+ cacheKey := CacheKey(queryTemplate, "owner", owner, "repo", repo)
+
+ // Check cache
+ if cached, found := c.cache.Get(ctx, cacheKey); found {
+ if count, ok := cached.(int); ok {
+ return count, nil
+ }
+ }
+
+ // Cache miss - fetch from GitHub
+ count, err := countOpenPRsInRepo(ctx, owner, repo, token)
+ if err != nil {
+ return 0, err
+ }
+
+ // Store in cache
+ c.cache.Set(ctx, cacheKey, count)
+ return count, nil
+}
+
+// countOpenPRsInRepo is the internal implementation (lowercase = package-private).
+func countOpenPRsInRepo(ctx context.Context, owner, repo, token string) (int, error) {
// Only count PRs created more than 24 hours ago
// Use search API which supports created date filtering
twentyFourHoursAgo := time.Now().Add(-24 * time.Hour).Format("2006-01-02T15:04:05Z")
@@ -944,10 +1122,38 @@ func CountOpenPRsInRepo(ctx context.Context, owner, repo, token string) (int, er
return count, nil
}
-// CountOpenPRsInOrg counts all open PRs across an entire GitHub organization with a single GraphQL query.
-// This is much more efficient than counting PRs repo-by-repo for organizations with many repositories.
-// Only counts PRs created more than 24 hours ago to exclude brand-new PRs.
-func CountOpenPRsInOrg(ctx context.Context, org, token string) (int, error) {
+// CountOpenPRsInOrg queries GitHub GraphQL API (with caching) to count all open PRs
+// across an entire organization. More efficient than counting repo-by-repo.
+// Only counts PRs created more than 24 hours ago.
+func (c *Client) CountOpenPRsInOrg(ctx context.Context, org, token string) (int, error) {
+ queryTemplate := `query($searchQuery: String!) {
+ search(query: $searchQuery, type: ISSUE, first: 0) {
+ issueCount
+ }
+ }`
+
+ cacheKey := CacheKey(queryTemplate, "org", org)
+
+ // Check cache
+ if cached, found := c.cache.Get(ctx, cacheKey); found {
+ if count, ok := cached.(int); ok {
+ return count, nil
+ }
+ }
+
+ // Cache miss - fetch from GitHub
+ count, err := countOpenPRsInOrg(ctx, org, token)
+ if err != nil {
+ return 0, err
+ }
+
+ // Store in cache
+ c.cache.Set(ctx, cacheKey, count)
+ return count, nil
+}
+
+// countOpenPRsInOrg is the internal implementation.
+func countOpenPRsInOrg(ctx context.Context, org, token string) (int, error) {
// Only count PRs created more than 24 hours ago
twentyFourHoursAgo := time.Now().Add(-24 * time.Hour).Format("2006-01-02T15:04:05Z")
@@ -1030,19 +1236,51 @@ type RepoVisibility struct {
IsPrivate bool
}
-// FetchOrgRepositoriesWithActivity fetches all repositories in an organization
-// that had activity (pushes) in the specified time period, along with their privacy status.
-// This is useful for determining which repositories were analyzed and whether they're public or private.
-//
-// Parameters:
-// - ctx: Context for the API call
-// - org: GitHub organization name
-// - since: Only include repos with activity after this time
-// - token: GitHub authentication token
-//
-// Returns:
-// - Map of repository name to RepoVisibility struct
-func FetchOrgRepositoriesWithActivity(ctx context.Context, org string, since time.Time, token string) (map[string]RepoVisibility, error) {
+// FetchOrgRepositoriesWithActivity queries GitHub GraphQL API (with caching) to fetch
+// all repositories in an organization that had activity in the specified time period,
+// along with their privacy status (public/private).
+func (c *Client) FetchOrgRepositoriesWithActivity(ctx context.Context, org string, since time.Time, token string) (map[string]RepoVisibility, error) {
+ queryTemplate := `
+ query($org: String!, $cursor: String) {
+ organization(login: $org) {
+ repositories(first: 100, after: $cursor, orderBy: {field: PUSHED_AT, direction: DESC}) {
+ pageInfo {
+ hasNextPage
+ endCursor
+ }
+ nodes {
+ name
+ isPrivate
+ pushedAt
+ }
+ }
+ }
+ }
+ `
+
+ days := int(time.Since(since).Hours() / 24)
+ cacheKey := CacheKey(queryTemplate, "org", org, "days", strconv.Itoa(days))
+
+ // Check cache
+ if cached, found := c.cache.Get(ctx, cacheKey); found {
+ if repoVis, ok := cached.(map[string]RepoVisibility); ok {
+ return repoVis, nil
+ }
+ }
+
+ // Cache miss - fetch from GitHub
+ repoVis, err := fetchOrgRepositoriesWithActivity(ctx, org, since, token)
+ if err != nil {
+ return nil, err
+ }
+
+ // Store in cache
+ c.cache.Set(ctx, cacheKey, repoVis)
+ return repoVis, nil
+}
+
+// fetchOrgRepositoriesWithActivity is the internal implementation.
+func fetchOrgRepositoriesWithActivity(ctx context.Context, org string, since time.Time, token string) (map[string]RepoVisibility, error) {
query := `
query($org: String!, $cursor: String) {
organization(login: $org) {
diff --git a/testdata/pr_13.json b/testdata/pr_13.json
index f4bf2d5..99bdea9 100644
--- a/testdata/pr_13.json
+++ b/testdata/pr_13.json
@@ -1,29 +1,93 @@
-2025/10/22 16:22:52 INFO cache miss: GraphQL pull request expired owner=machine-drivers repo=docker-machine-driver-hyperkit pr=13 cached_at=2025-10-22T16:12:58.375+02:00 reference_time=2025-10-22T16:22:52.168+02:00
-2025/10/22 16:22:52 INFO fetching pull request via GraphQL owner=machine-drivers repo=docker-machine-driver-hyperkit pr=13
-2025/10/22 16:22:52 INFO HTTP request starting method=POST url=https://api.github.com/graphql host=api.github.com
-2025/10/22 16:22:55 INFO HTTP response received status=200 url=https://api.github.com/graphql elapsed=3.7379905s
-2025/10/22 16:22:55 INFO GraphQL query completed cost=1 remaining=4988 limit=5000
-2025/10/22 16:22:55 INFO GitHub API request starting method=GET url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/22 16:22:55 INFO HTTP request starting method=GET url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" host=api.github.com
-2025/10/22 16:22:56 INFO HTTP response received status=403 url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" elapsed=835.236583ms
-2025/10/22 16:22:56 INFO GitHub API response received status="403 Forbidden" url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" elapsed=835.304333ms rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4986 X-RateLimit-Reset:1761143493 X-RateLimit-Resource:collaborators X-RateLimit-Used:14]"
-2025/10/22 16:22:56 ERROR GitHub API error status="403 Forbidden" status_code=403 url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" body="{\"message\":\"Must have push access to view repository collaborators.\",\"documentation_url\":\"https://docs.github.com/rest/collaborators/collaborators#list-repository-collaborators\",\"status\":\"403\"}" headers="map[Content-Type:[application/json; charset=utf-8] Date:[Wed, 22 Oct 2025 14:22:57 GMT] Server:[github.com] X-Accepted-Oauth-Scopes:[] X-Content-Type-Options:[nosniff] X-Frame-Options:[deny] X-Github-Api-Version-Selected:[2022-11-28] X-Github-Media-Type:[github.v3; format=json] X-Github-Request-Id:[0574:89405:CC015A:35D6176:68F8E8C1] X-Oauth-Client-Id:[178c6fc778ccc68e1d6a] X-Oauth-Scopes:[admin:public_key, gist, project, read:org, repo] X-Ratelimit-Limit:[5000] X-Ratelimit-Remaining:[4986] X-Ratelimit-Reset:[1761143493] X-Ratelimit-Resource:[collaborators] X-Ratelimit-Used:[14] X-Xss-Protection:[0]]"
-2025/10/22 16:22:56 WARN failed to fetch collaborators for write access check owner=machine-drivers repo=docker-machine-driver-hyperkit user=tstromberg error="github API error: 403 Forbidden"
-2025/10/22 16:22:56 INFO GitHub API request starting method=GET url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/22 16:22:56 INFO HTTP request starting method=GET url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" host=api.github.com
-2025/10/22 16:22:57 INFO HTTP response received status=403 url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" elapsed=864.379292ms
-2025/10/22 16:22:57 INFO GitHub API response received status="403 Forbidden" url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" elapsed=864.490875ms rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4985 X-RateLimit-Reset:1761143493 X-RateLimit-Resource:collaborators X-RateLimit-Used:15]"
-2025/10/22 16:22:57 ERROR GitHub API error status="403 Forbidden" status_code=403 url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/collaborators?affiliation=all&per_page=100" body="{\"message\":\"Must have push access to view repository collaborators.\",\"documentation_url\":\"https://docs.github.com/rest/collaborators/collaborators#list-repository-collaborators\",\"status\":\"403\"}" headers="map[Content-Type:[application/json; charset=utf-8] Date:[Wed, 22 Oct 2025 14:22:58 GMT] Server:[github.com] X-Accepted-Oauth-Scopes:[] X-Content-Type-Options:[nosniff] X-Frame-Options:[deny] X-Github-Api-Version-Selected:[2022-11-28] X-Github-Media-Type:[github.v3; format=json] X-Github-Request-Id:[0574:89405:CC0464:35D6DB3:68F8E8C1] X-Oauth-Client-Id:[178c6fc778ccc68e1d6a] X-Oauth-Scopes:[admin:public_key, gist, project, read:org, repo] X-Ratelimit-Limit:[5000] X-Ratelimit-Remaining:[4985] X-Ratelimit-Reset:[1761143493] X-Ratelimit-Resource:[collaborators] X-Ratelimit-Used:[15] X-Xss-Protection:[0]]"
-2025/10/22 16:22:57 WARN failed to fetch collaborators for write access check owner=machine-drivers repo=docker-machine-driver-hyperkit user=tstromberg error="github API error: 403 Forbidden"
-2025/10/22 16:22:57 INFO GitHub API request starting method=GET url=https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/rulesets headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/22 16:22:57 INFO HTTP request starting method=GET url=https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/rulesets host=api.github.com
-2025/10/22 16:22:58 INFO HTTP response received status=200 url=https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/rulesets elapsed=909.665375ms
-2025/10/22 16:22:58 INFO GitHub API response received status="200 OK" url=https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/rulesets elapsed=909.742417ms rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4911 X-RateLimit-Reset:1761144274 X-RateLimit-Resource:core X-RateLimit-Used:89]"
-2025/10/22 16:22:58 INFO fetched required checks from rulesets count=0 checks=[]
-2025/10/22 16:22:58 INFO GitHub API request starting method=GET url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/commits/7e53423cd01166d6731f244bbb9af75e54c2a955/check-runs?per_page=100" headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/22 16:22:58 INFO HTTP request starting method=GET url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/commits/7e53423cd01166d6731f244bbb9af75e54c2a955/check-runs?per_page=100" host=api.github.com
-2025/10/22 16:22:59 INFO HTTP response received status=200 url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/commits/7e53423cd01166d6731f244bbb9af75e54c2a955/check-runs?per_page=100" elapsed=1.048200458s
-2025/10/22 16:22:59 INFO GitHub API response received status="200 OK" url="https://api.github.com/repos/machine-drivers/docker-machine-driver-hyperkit/commits/7e53423cd01166d6731f244bbb9af75e54c2a955/check-runs?per_page=100" elapsed=1.048283417s rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4910 X-RateLimit-Reset:1761144274 X-RateLimit-Resource:core X-RateLimit-Used:90]"
-2025/10/22 16:22:59 INFO fetched check runs via REST count=0
-2025/10/22 16:22:59 INFO successfully fetched pull request via hybrid GraphQL+REST owner=machine-drivers repo=docker-machine-driver-hyperkit pr=13 event_count=10 api_calls_made="2 (vs 13+ with REST)"
-{"events":[{"timestamp":"2019-09-11T22:07:29Z","kind":"commit","actor":"sharifelgamal","body":"Moving minikube hyperkit changes upstream"},{"timestamp":"2019-09-11T22:14:46Z","kind":"commit","actor":"sharifelgamal","body":"remove minikube import"},{"timestamp":"2019-09-11T22:15:12Z","kind":"pr_opened","actor":"sharifelgamal","body":"```commit 48d2ace5ccb2ecbd91362d0807ef974532cfff6d\r\nAuthor: Thomas Stromberg \u003ctstromberg@google.com\u003e\r\nDate: Thu Aug 22 11:41:41 2019 -0700\r\n\r\n Remove broken default disk size test that didn't make sense\r\n\r\ncommit a817bffab1752e8956f68a88cf2548f2dc2932","write_access":-1},{"timestamp":"2019-09-11T22:16:36Z","kind":"cross_referenced","actor":"sharifelgamal"},{"timestamp":"2019-09-13T03:33:59Z","kind":"review","actor":"tstromberg","outcome":"approved","body":"Looks good. Could you test and confirm that this driver works for both`docker-machine` and `minikube`?","write_access":1,"question":true},{"timestamp":"2019-09-13T23:24:01Z","kind":"commit","actor":"sharifelgamal","body":"add missing files"},{"timestamp":"2019-09-14T00:04:35Z","kind":"comment","actor":"sharifelgamal","body":"I've verified that it works with `minikube` and `docker-machine` is documented as not working with hyperkit.","write_access":-1},{"timestamp":"2019-09-24T18:40:05Z","kind":"cross_referenced","actor":"dx9"},{"timestamp":"2019-10-02T23:15:42Z","kind":"cross_referenced","actor":"cequencer"},{"timestamp":"2025-07-16T14:55:18Z","kind":"review","actor":"tstromberg","outcome":"approved","write_access":1}],"pull_request":{"created_at":"2019-09-11T22:15:12Z","updated_at":"2025-07-16T14:55:18Z","approval_summary":{"approvals_with_write_access":0,"approvals_with_unknown_access":1,"approvals_without_write_access":0,"changes_requested":0},"check_summary":{"success":{},"failing":{},"pending":{},"cancelled":{},"skipped":{},"stale":{},"neutral":{}},"mergeable":null,"assignees":[],"reviewers":{"tstromberg":"approved"},"participant_access":{"cequencer":0,"dx9":0,"sharifelgamal":0,"tstromberg":1},"mergeable_state":"clean","mergeable_state_description":"PR is ready to merge","author":"sharifelgamal","body":"```commit 48d2ace5ccb2ecbd91362d0807ef974532cfff6d\r\nAuthor: Thomas Stromberg \u003ctstromberg@google.com\u003e\r\nDate: Thu Aug 22 11:41:41 2019 -0700\r\n\r\n Remove broken default disk size test that didn't make sense\r\n\r\ncommit a817bffab1752e8956f68a88cf2548f2dc2932","title":"Moving minikube hyperkit changes upstream","state":"open","head_sha":"7e53423cd01166d6731f244bbb9af75e54c2a955","number":13,"changed_files":11,"deletions":306,"additions":638,"author_write_access":-1,"author_bot":false,"merged":false,"draft":false}}
+{
+ "events": [
+ {
+ "timestamp": "2019-09-11T22:07:29Z",
+ "kind": "commit",
+ "actor": "sharifelgamal",
+ "body": "Moving minikube hyperkit changes upstream"
+ },
+ {
+ "timestamp": "2019-09-11T22:14:46Z",
+ "kind": "commit",
+ "actor": "sharifelgamal",
+ "body": "remove minikube import"
+ },
+ {
+ "timestamp": "2019-09-11T22:15:12Z",
+ "kind": "pr_opened",
+ "actor": "sharifelgamal",
+ "body": "```commit 48d2ace5ccb2ecbd91362d0807ef974532cfff6d\r\nAuthor: Thomas Stromberg \u003ctstromberg@google.com\u003e\r\nDate: Thu Aug 22 11:41:41 2019 -0700\r\n\r\n Remove broken default disk size test that didn't make sense\r\n\r\ncommit a817bffab1752e8956f68a88cf2548f2dc2932",
+ "write_access": -1
+ },
+ { "timestamp": "2019-09-11T22:16:36Z", "kind": "cross_referenced", "actor": "sharifelgamal" },
+ {
+ "timestamp": "2019-09-13T03:33:59Z",
+ "kind": "review",
+ "actor": "tstromberg",
+ "outcome": "approved",
+ "body": "Looks good. Could you test and confirm that this driver works for both`docker-machine` and `minikube`?",
+ "write_access": 1,
+ "question": true
+ },
+ {
+ "timestamp": "2019-09-13T23:24:01Z",
+ "kind": "commit",
+ "actor": "sharifelgamal",
+ "body": "add missing files"
+ },
+ {
+ "timestamp": "2019-09-14T00:04:35Z",
+ "kind": "comment",
+ "actor": "sharifelgamal",
+ "body": "I've verified that it works with `minikube` and `docker-machine` is documented as not working with hyperkit.",
+ "write_access": -1
+ },
+ { "timestamp": "2019-09-24T18:40:05Z", "kind": "cross_referenced", "actor": "dx9" },
+ { "timestamp": "2019-10-02T23:15:42Z", "kind": "cross_referenced", "actor": "cequencer" },
+ {
+ "timestamp": "2025-07-16T14:55:18Z",
+ "kind": "review",
+ "actor": "tstromberg",
+ "outcome": "approved",
+ "write_access": 1
+ }
+ ],
+ "pull_request": {
+ "created_at": "2019-09-11T22:15:12Z",
+ "updated_at": "2025-07-16T14:55:18Z",
+ "approval_summary": {
+ "approvals_with_write_access": 0,
+ "approvals_with_unknown_access": 1,
+ "approvals_without_write_access": 0,
+ "changes_requested": 0
+ },
+ "check_summary": {
+ "success": {},
+ "failing": {},
+ "pending": {},
+ "cancelled": {},
+ "skipped": {},
+ "stale": {},
+ "neutral": {}
+ },
+ "mergeable": null,
+ "assignees": [],
+ "reviewers": { "tstromberg": "approved" },
+ "participant_access": { "cequencer": 0, "dx9": 0, "sharifelgamal": 0, "tstromberg": 1 },
+ "mergeable_state": "clean",
+ "mergeable_state_description": "PR is ready to merge",
+ "author": "sharifelgamal",
+ "body": "```commit 48d2ace5ccb2ecbd91362d0807ef974532cfff6d\r\nAuthor: Thomas Stromberg \u003ctstromberg@google.com\u003e\r\nDate: Thu Aug 22 11:41:41 2019 -0700\r\n\r\n Remove broken default disk size test that didn't make sense\r\n\r\ncommit a817bffab1752e8956f68a88cf2548f2dc2932",
+ "title": "Moving minikube hyperkit changes upstream",
+ "state": "open",
+ "head_sha": "7e53423cd01166d6731f244bbb9af75e54c2a955",
+ "number": 13,
+ "changed_files": 11,
+ "deletions": 306,
+ "additions": 638,
+ "author_write_access": -1,
+ "author_bot": false,
+ "merged": false,
+ "draft": false
+ }
+}
diff --git a/testdata/pr_1753.json b/testdata/pr_1753.json
index 657dd66..7af7f61 100644
--- a/testdata/pr_1753.json
+++ b/testdata/pr_1753.json
@@ -1,17 +1,127 @@
-2025/10/22 16:11:01 INFO cache miss: GraphQL pull request expired owner=chainguard-dev repo=apko pr=1753 cached_at=2025-10-22T13:31:26.303+02:00 reference_time=2025-10-22T16:11:01.371+02:00
-2025/10/22 16:11:01 INFO fetching pull request via GraphQL owner=chainguard-dev repo=apko pr=1753
-2025/10/22 16:11:01 INFO HTTP request starting method=POST url=https://api.github.com/graphql host=api.github.com
-2025/10/22 16:11:05 INFO HTTP response received status=200 url=https://api.github.com/graphql elapsed=4.575621292s
-2025/10/22 16:11:05 INFO GraphQL query completed cost=1 remaining=4990 limit=5000
-2025/10/22 16:11:05 INFO GitHub API request starting method=GET url=https://api.github.com/repos/chainguard-dev/apko/rulesets headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/22 16:11:05 INFO HTTP request starting method=GET url=https://api.github.com/repos/chainguard-dev/apko/rulesets host=api.github.com
-2025/10/22 16:11:07 INFO HTTP response received status=200 url=https://api.github.com/repos/chainguard-dev/apko/rulesets elapsed=1.1206925s
-2025/10/22 16:11:07 INFO GitHub API response received status="200 OK" url=https://api.github.com/repos/chainguard-dev/apko/rulesets elapsed=1.120866375s rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4941 X-RateLimit-Reset:1761144274 X-RateLimit-Resource:core X-RateLimit-Used:59]"
-2025/10/22 16:11:07 INFO fetched required checks from rulesets count=0 checks=[]
-2025/10/22 16:11:07 INFO GitHub API request starting method=GET url="https://api.github.com/repos/chainguard-dev/apko/commits/fa40fc009a9b4af0a4048b1335858ecb0d0f1019/check-runs?per_page=100" headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/22 16:11:07 INFO HTTP request starting method=GET url="https://api.github.com/repos/chainguard-dev/apko/commits/fa40fc009a9b4af0a4048b1335858ecb0d0f1019/check-runs?per_page=100" host=api.github.com
-2025/10/22 16:11:08 INFO HTTP response received status=200 url="https://api.github.com/repos/chainguard-dev/apko/commits/fa40fc009a9b4af0a4048b1335858ecb0d0f1019/check-runs?per_page=100" elapsed=998.862959ms
-2025/10/22 16:11:08 INFO GitHub API response received status="200 OK" url="https://api.github.com/repos/chainguard-dev/apko/commits/fa40fc009a9b4af0a4048b1335858ecb0d0f1019/check-runs?per_page=100" elapsed=999.018375ms rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4940 X-RateLimit-Reset:1761144274 X-RateLimit-Resource:core X-RateLimit-Used:60]"
-2025/10/22 16:11:08 INFO fetched check runs via REST count=4
-2025/10/22 16:11:08 INFO successfully fetched pull request via hybrid GraphQL+REST owner=chainguard-dev repo=apko pr=1753 event_count=11 api_calls_made="3 (vs 13+ with REST)"
-{"events":[{"timestamp":"2025-07-13T21:07:57Z","kind":"pr_opened","actor":"lxea","body":"/bin/s6-svscan has been moved to `/usr/bin/s6-svscan` since Alpine 3.21 which results in errors when trying to run containers using service bundles with any repos after 3.20 \r\n\r\n```\r\nError: crun: executable file `/bin/s6-svscan` not found: No such file or","write_access":-1},{"timestamp":"2025-07-13T21:13:49Z","kind":"head_ref_force_pushed","actor":"lxea"},{"timestamp":"2025-07-13T21:15:21Z","kind":"commit","actor":"lxea","body":"Use /usr/bin/s6-svscan if it exists"},{"timestamp":"2025-07-13T21:15:26Z","kind":"head_ref_force_pushed","actor":"lxea"},{"timestamp":"2025-07-18T00:43:12Z","kind":"review","actor":"tstromberg","outcome":"approved","write_access":-1},{"timestamp":"2025-10-19T22:08:13Z","kind":"commit","actor":"lxea","body":"Merge branch 'chainguard-dev:main' into s6-svscan-edge"},{"timestamp":"2025-10-19T22:08:16Z","kind":"check_run","actor":"github","outcome":"success","body":"Enforce - Commit Signing","description":"Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ❌ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n","bot":true},{"timestamp":"2025-10-19T22:08:20Z","kind":"check_run","actor":"github","outcome":"success","body":"StepSecurity Required Checks","description":"StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n","bot":true},{"timestamp":"2025-10-19T22:08:23Z","kind":"check_run","actor":"github","outcome":"success","body":"StepSecurity Optional Checks","description":"StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n","bot":true},{"timestamp":"2025-10-19T22:08:37Z","kind":"check_run","actor":"github","outcome":"skipped","body":"StepSecurity Harden-Runner","description":"No Workflow Runs Found: No new Harden-Runner detections for this pull request.","bot":true},{"timestamp":"2025-10-20T06:25:55Z","kind":"review","actor":"tstromberg","outcome":"approved","body":"Still LGTM, but needs an approver with write access :(","write_access":-1}],"pull_request":{"created_at":"2025-07-13T21:07:57Z","updated_at":"2025-10-20T06:25:55Z","approval_summary":{"approvals_with_write_access":0,"approvals_with_unknown_access":1,"approvals_without_write_access":0,"changes_requested":0},"check_summary":{"success":{"Enforce - Commit Signing":"Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ❌ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n","StepSecurity Optional Checks":"StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n","StepSecurity Required Checks":"StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n"},"failing":{},"pending":{"CodeQL":"Expected — Waiting for status to be reported","analyze":"Expected — Waiting for status to be reported","build":"Expected — Waiting for status to be reported","lint":"Expected — Waiting for status to be reported","test":"Expected — Waiting for status to be reported"},"cancelled":{},"skipped":{"StepSecurity Harden-Runner":"No Workflow Runs Found: No new Harden-Runner detections for this pull request."},"stale":{},"neutral":{}},"mergeable":false,"assignees":[],"reviewers":{"tstromberg":"approved"},"participant_access":{"lxea":0,"tstromberg":0},"mergeable_state":"blocked","mergeable_state_description":"PR requires approval and has pending status checks","author":"lxea","body":"/bin/s6-svscan has been moved to `/usr/bin/s6-svscan` since Alpine 3.21 which results in errors when trying to run containers using service bundles with any repos after 3.20 \r\n\r\n```\r\nError: crun: executable file `/bin/s6-svscan` not found: No such file or","title":"Use /usr/bin/s6-svscan if it exists","state":"open","test_state":"passing","head_sha":"fa40fc009a9b4af0a4048b1335858ecb0d0f1019","number":1753,"changed_files":1,"deletions":0,"additions":3,"author_write_access":-1,"author_bot":false,"merged":false,"draft":false}}
+{
+ "events": [
+ {
+ "timestamp": "2025-07-13T21:07:57Z",
+ "kind": "pr_opened",
+ "actor": "lxea",
+ "body": "/bin/s6-svscan has been moved to `/usr/bin/s6-svscan` since Alpine 3.21 which results in errors when trying to run containers using service bundles with any repos after 3.20 \r\n\r\n```\r\nError: crun: executable file `/bin/s6-svscan` not found: No such file or",
+ "write_access": -1
+ },
+ { "timestamp": "2025-07-13T21:13:49Z", "kind": "head_ref_force_pushed", "actor": "lxea" },
+ {
+ "timestamp": "2025-07-13T21:15:21Z",
+ "kind": "commit",
+ "actor": "lxea",
+ "body": "Use /usr/bin/s6-svscan if it exists"
+ },
+ { "timestamp": "2025-07-13T21:15:26Z", "kind": "head_ref_force_pushed", "actor": "lxea" },
+ {
+ "timestamp": "2025-07-18T00:43:12Z",
+ "kind": "review",
+ "actor": "tstromberg",
+ "outcome": "approved",
+ "write_access": -1
+ },
+ {
+ "timestamp": "2025-10-19T22:08:13Z",
+ "kind": "commit",
+ "actor": "lxea",
+ "body": "Merge branch 'chainguard-dev:main' into s6-svscan-edge"
+ },
+ {
+ "timestamp": "2025-10-19T22:08:16Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "Enforce - Commit Signing",
+ "description": "Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ❌ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-19T22:08:20Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "StepSecurity Required Checks",
+ "description": "StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-19T22:08:23Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "StepSecurity Optional Checks",
+ "description": "StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-19T22:08:37Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "skipped",
+ "body": "StepSecurity Harden-Runner",
+ "description": "No Workflow Runs Found: No new Harden-Runner detections for this pull request.",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-20T06:25:55Z",
+ "kind": "review",
+ "actor": "tstromberg",
+ "outcome": "approved",
+ "body": "Still LGTM, but needs an approver with write access :(",
+ "write_access": -1
+ }
+ ],
+ "pull_request": {
+ "created_at": "2025-07-13T21:07:57Z",
+ "updated_at": "2025-10-20T06:25:55Z",
+ "approval_summary": {
+ "approvals_with_write_access": 0,
+ "approvals_with_unknown_access": 1,
+ "approvals_without_write_access": 0,
+ "changes_requested": 0
+ },
+ "check_summary": {
+ "success": {
+ "Enforce - Commit Signing": "Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ❌ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n",
+ "StepSecurity Optional Checks": "StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n",
+ "StepSecurity Required Checks": "StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n"
+ },
+ "failing": {},
+ "pending": {
+ "CodeQL": "Expected — Waiting for status to be reported",
+ "analyze": "Expected — Waiting for status to be reported",
+ "build": "Expected — Waiting for status to be reported",
+ "lint": "Expected — Waiting for status to be reported",
+ "test": "Expected — Waiting for status to be reported"
+ },
+ "cancelled": {},
+ "skipped": {
+ "StepSecurity Harden-Runner": "No Workflow Runs Found: No new Harden-Runner detections for this pull request."
+ },
+ "stale": {},
+ "neutral": {}
+ },
+ "mergeable": false,
+ "assignees": [],
+ "reviewers": { "tstromberg": "approved" },
+ "participant_access": { "lxea": 0, "tstromberg": 0 },
+ "mergeable_state": "blocked",
+ "mergeable_state_description": "PR requires approval and has pending status checks",
+ "author": "lxea",
+ "body": "/bin/s6-svscan has been moved to `/usr/bin/s6-svscan` since Alpine 3.21 which results in errors when trying to run containers using service bundles with any repos after 3.20 \r\n\r\n```\r\nError: crun: executable file `/bin/s6-svscan` not found: No such file or",
+ "title": "Use /usr/bin/s6-svscan if it exists",
+ "state": "open",
+ "test_state": "passing",
+ "head_sha": "fa40fc009a9b4af0a4048b1335858ecb0d0f1019",
+ "number": 1753,
+ "changed_files": 1,
+ "deletions": 0,
+ "additions": 3,
+ "author_write_access": -1,
+ "author_bot": false,
+ "merged": false,
+ "draft": false
+ }
+}
diff --git a/testdata/pr_1891.json b/testdata/pr_1891.json
index eecfb4b..003261a 100644
--- a/testdata/pr_1891.json
+++ b/testdata/pr_1891.json
@@ -1 +1,251 @@
-{"events":[{"timestamp":"2025-10-15T18:29:51Z","kind":"commit","actor":"markusthoemmes","body":"Only cut releases if we've seen material changes\n\nThis adjusts the weekly release process to only cut a release if something material has changed. This is to avoid version bloat on CI-only changes or README touchups."},{"timestamp":"2025-10-15T18:32:58Z","kind":"pr_opened","actor":"markusthoemmes","body":"This adjusts the weekly release process to only cut a release if something material has changed. This is to avoid version bloat on CI-only changes or README touchups.","write_access":-1},{"timestamp":"2025-10-15T18:33:09Z","kind":"check_run","actor":"github","outcome":"success","body":"StepSecurity Optional Checks","description":"StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n","bot":true},{"timestamp":"2025-10-15T18:33:09Z","kind":"check_run","actor":"github","outcome":"success","body":"StepSecurity Required Checks","description":"StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n","bot":true},{"timestamp":"2025-10-15T18:33:43Z","kind":"check_run","actor":"github","outcome":"success","body":"lint","bot":true,"required":true},{"timestamp":"2025-10-15T18:33:45Z","kind":"check_run","actor":"github","outcome":"success","body":"annotations","bot":true},{"timestamp":"2025-10-15T18:33:59Z","kind":"check_run","actor":"github","outcome":"success","body":"build-date-epoch","bot":true},{"timestamp":"2025-10-15T18:34:03Z","kind":"check_run","actor":"github","outcome":"success","body":"source-date-epoch","bot":true},{"timestamp":"2025-10-15T18:34:17Z","kind":"check_run","actor":"github","outcome":"success","body":"build-nginx-all-arches (x86_64)","bot":true},{"timestamp":"2025-10-15T18:34:22Z","kind":"check_run","actor":"github","outcome":"success","body":"build-nginx-all-arches (aarch64)","bot":true},{"timestamp":"2025-10-15T18:34:22Z","kind":"check_run","actor":"github","outcome":"success","body":"Test on_top_of_base example (x86_64)","bot":true},{"timestamp":"2025-10-15T18:34:29Z","kind":"check_run","actor":"github","outcome":"success","body":"CodeQL","description":"No new alerts in code changed by this pull request: [View all branch alerts](/chainguard-dev/apko/security/code-scanning?query=pr%3A1891+tool%3ACodeQL+is%3Aopen).","bot":true,"required":true},{"timestamp":"2025-10-15T18:34:29Z","kind":"check_run","actor":"github","outcome":"success","body":"Test on_top_of_base example (aarch64)","bot":true},{"timestamp":"2025-10-15T18:34:33Z","kind":"check_run","actor":"github","outcome":"success","body":"build-all-examples-amd64 (ubuntu-latest)","bot":true},{"timestamp":"2025-10-15T18:34:36Z","kind":"check_run","actor":"github","outcome":"success","body":"test","bot":true,"required":true},{"timestamp":"2025-10-15T18:34:37Z","kind":"check_run","actor":"github","outcome":"success","body":"Analyze (go)","bot":true},{"timestamp":"2025-10-15T18:34:49Z","kind":"check_run","actor":"github","outcome":"success","body":"analyze","bot":true,"required":true},{"timestamp":"2025-10-15T18:35:43Z","kind":"check_run","actor":"github","outcome":"success","body":"build-all-examples-amd64 (macos-latest)","bot":true},{"timestamp":"2025-10-15T18:36:10Z","kind":"check_run","actor":"github","outcome":"success","body":"build","bot":true,"required":true},{"timestamp":"2025-10-15T18:36:18Z","kind":"check_run","actor":"github","outcome":"success","body":"StepSecurity Harden-Runner","description":" No anomalous activity on CI/CD runners\n\n: No new Harden-Runner detections for this pull request.\n","bot":true},{"timestamp":"2025-10-16T08:23:14Z","kind":"review","actor":"xnox","outcome":"approved","write_access":2},{"timestamp":"2025-10-16T08:23:24Z","kind":"merged","actor":"xnox"},{"timestamp":"2025-10-16T08:23:25Z","kind":"closed","actor":"xnox"},{"timestamp":"2025-10-16T08:23:25Z","kind":"pr_merged","actor":"xnox"},{"timestamp":"2025-10-16T08:23:27Z","kind":"check_run","actor":"github","outcome":"success","body":"Enforce - Commit Signing","description":"Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ✅ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n","bot":true}],"pull_request":{"created_at":"2025-10-15T18:32:58Z","updated_at":"2025-10-16T08:23:25Z","closed_at":"2025-10-16T08:23:25Z","merged_at":"2025-10-16T08:23:24Z","approval_summary":{"approvals_with_write_access":1,"approvals_with_unknown_access":0,"approvals_without_write_access":0,"changes_requested":0},"check_summary":{"success":{"Analyze (go)":"success","CodeQL":"No new alerts in code changed by this pull request: [View all branch alerts](/chainguard-dev/apko/security/code-scanning?query=pr%3A1891+tool%3ACodeQL+is%3Aopen).","Enforce - Commit Signing":"Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ✅ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n","StepSecurity Harden-Runner":" No anomalous activity on CI/CD runners\n\n: No new Harden-Runner detections for this pull request.\n","StepSecurity Optional Checks":"StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n","StepSecurity Required Checks":"StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n","Test on_top_of_base example (aarch64)":"success","Test on_top_of_base example (x86_64)":"success","analyze":"success","annotations":"success","build":"success","build-all-examples-amd64 (macos-latest)":"success","build-all-examples-amd64 (ubuntu-latest)":"success","build-date-epoch":"success","build-nginx-all-arches (aarch64)":"success","build-nginx-all-arches (x86_64)":"success","lint":"success","source-date-epoch":"success","test":"success"},"failing":{},"pending":{},"cancelled":{},"skipped":{},"stale":{},"neutral":{}},"mergeable":null,"assignees":[],"reviewers":{"xnox":"approved"},"participant_access":{"markusthoemmes":0,"xnox":2},"mergeable_state":"unknown","mergeable_state_description":"Merge status is being calculated","author":"markusthoemmes","body":"This adjusts the weekly release process to only cut a release if something material has changed. This is to avoid version bloat on CI-only changes or README touchups.","title":"Only cut releases if we've seen material changes","merged_by":"xnox","state":"merged","test_state":"passing","head_sha":"96dbbaabc39f99b2ecde409f193d0a06112e7c51","number":1891,"changed_files":1,"deletions":2,"additions":26,"author_write_access":-1,"author_bot":false,"merged":true,"draft":false}}
+{
+ "events": [
+ {
+ "timestamp": "2025-10-15T18:29:51Z",
+ "kind": "commit",
+ "actor": "markusthoemmes",
+ "body": "Only cut releases if we've seen material changes\n\nThis adjusts the weekly release process to only cut a release if something material has changed. This is to avoid version bloat on CI-only changes or README touchups."
+ },
+ {
+ "timestamp": "2025-10-15T18:32:58Z",
+ "kind": "pr_opened",
+ "actor": "markusthoemmes",
+ "body": "This adjusts the weekly release process to only cut a release if something material has changed. This is to avoid version bloat on CI-only changes or README touchups.",
+ "write_access": -1
+ },
+ {
+ "timestamp": "2025-10-15T18:33:09Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "StepSecurity Optional Checks",
+ "description": "StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:33:09Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "StepSecurity Required Checks",
+ "description": "StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:33:43Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "lint",
+ "bot": true,
+ "required": true
+ },
+ {
+ "timestamp": "2025-10-15T18:33:45Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "annotations",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:33:59Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "build-date-epoch",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:03Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "source-date-epoch",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:17Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "build-nginx-all-arches (x86_64)",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:22Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "build-nginx-all-arches (aarch64)",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:22Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "Test on_top_of_base example (x86_64)",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:29Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "CodeQL",
+ "description": "No new alerts in code changed by this pull request: [View all branch alerts](/chainguard-dev/apko/security/code-scanning?query=pr%3A1891+tool%3ACodeQL+is%3Aopen).",
+ "bot": true,
+ "required": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:29Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "Test on_top_of_base example (aarch64)",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:33Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "build-all-examples-amd64 (ubuntu-latest)",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:36Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "test",
+ "bot": true,
+ "required": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:37Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "Analyze (go)",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:34:49Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "analyze",
+ "bot": true,
+ "required": true
+ },
+ {
+ "timestamp": "2025-10-15T18:35:43Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "build-all-examples-amd64 (macos-latest)",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-15T18:36:10Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "build",
+ "bot": true,
+ "required": true
+ },
+ {
+ "timestamp": "2025-10-15T18:36:18Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "StepSecurity Harden-Runner",
+ "description": " No anomalous activity on CI/CD runners\n\n: No new Harden-Runner detections for this pull request.\n",
+ "bot": true
+ },
+ {
+ "timestamp": "2025-10-16T08:23:14Z",
+ "kind": "review",
+ "actor": "xnox",
+ "outcome": "approved",
+ "write_access": 2
+ },
+ { "timestamp": "2025-10-16T08:23:24Z", "kind": "merged", "actor": "xnox" },
+ { "timestamp": "2025-10-16T08:23:25Z", "kind": "closed", "actor": "xnox" },
+ { "timestamp": "2025-10-16T08:23:25Z", "kind": "pr_merged", "actor": "xnox" },
+ {
+ "timestamp": "2025-10-16T08:23:27Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "Enforce - Commit Signing",
+ "description": "Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ✅ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n",
+ "bot": true
+ }
+ ],
+ "pull_request": {
+ "created_at": "2025-10-15T18:32:58Z",
+ "updated_at": "2025-10-16T08:23:25Z",
+ "closed_at": "2025-10-16T08:23:25Z",
+ "merged_at": "2025-10-16T08:23:24Z",
+ "approval_summary": {
+ "approvals_with_write_access": 1,
+ "approvals_with_unknown_access": 0,
+ "approvals_without_write_access": 0,
+ "changes_requested": 0
+ },
+ "check_summary": {
+ "success": {
+ "Analyze (go)": "success",
+ "CodeQL": "No new alerts in code changed by this pull request: [View all branch alerts](/chainguard-dev/apko/security/code-scanning?query=pr%3A1891+tool%3ACodeQL+is%3Aopen).",
+ "Enforce - Commit Signing": "Successfully verified commit signature.: | | CLAIM | DESCRIPTION |\n|----|-------------------------|-------------|\n| ✅ | Found Git signature | |\n| ✅ | Validated Git signature | |\n| ✅ | Validated Rekor entry | |\n| ✅ | Allowed by policy | |\n",
+ "StepSecurity Harden-Runner": " No anomalous activity on CI/CD runners\n\n: No new Harden-Runner detections for this pull request.\n",
+ "StepSecurity Optional Checks": "StepSecurity Optional Checks: Finished StepSecurity Optional Checks\n- **Pwn Request Vulnerabilities Check** - Checks for Pwn Request vulnerabilities in the PR via risky triggers\n",
+ "StepSecurity Required Checks": "StepSecurity Required Checks: Finished StepSecurity Required Checks\n- **Script Injection Check** - Checks for script injection vulnerabilities in the PR\n- **NPM Compromised Packages Check** - Checks for compromised npm package versions in the PR\n- **NPM Package Cooldown Check** - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases\n",
+ "Test on_top_of_base example (aarch64)": "success",
+ "Test on_top_of_base example (x86_64)": "success",
+ "analyze": "success",
+ "annotations": "success",
+ "build": "success",
+ "build-all-examples-amd64 (macos-latest)": "success",
+ "build-all-examples-amd64 (ubuntu-latest)": "success",
+ "build-date-epoch": "success",
+ "build-nginx-all-arches (aarch64)": "success",
+ "build-nginx-all-arches (x86_64)": "success",
+ "lint": "success",
+ "source-date-epoch": "success",
+ "test": "success"
+ },
+ "failing": {},
+ "pending": {},
+ "cancelled": {},
+ "skipped": {},
+ "stale": {},
+ "neutral": {}
+ },
+ "mergeable": null,
+ "assignees": [],
+ "reviewers": { "xnox": "approved" },
+ "participant_access": { "markusthoemmes": 0, "xnox": 2 },
+ "mergeable_state": "unknown",
+ "mergeable_state_description": "Merge status is being calculated",
+ "author": "markusthoemmes",
+ "body": "This adjusts the weekly release process to only cut a release if something material has changed. This is to avoid version bloat on CI-only changes or README touchups.",
+ "title": "Only cut releases if we've seen material changes",
+ "merged_by": "xnox",
+ "state": "merged",
+ "test_state": "passing",
+ "head_sha": "96dbbaabc39f99b2ecde409f193d0a06112e7c51",
+ "number": 1891,
+ "changed_files": 1,
+ "deletions": 2,
+ "additions": 26,
+ "author_write_access": -1,
+ "author_bot": false,
+ "merged": true,
+ "draft": false
+ }
+}
diff --git a/testdata/sprinkler_pr_37.json b/testdata/sprinkler_pr_37.json
index 073957e..867bf36 100644
--- a/testdata/sprinkler_pr_37.json
+++ b/testdata/sprinkler_pr_37.json
@@ -1,21 +1,69 @@
-2025/10/28 22:09:24 INFO cache miss: GraphQL pull request not in cache owner=codeGROOVE-dev repo=sprinkler pr=37
-2025/10/28 22:09:24 INFO fetching pull request via GraphQL owner=codeGROOVE-dev repo=sprinkler pr=37
-2025/10/28 22:09:24 INFO HTTP request starting method=POST url=https://api.github.com/graphql host=api.github.com
-2025/10/28 22:09:25 INFO HTTP response received status=200 url=https://api.github.com/graphql elapsed=1.018633041s
-2025/10/28 22:09:25 INFO GraphQL query completed cost=1 remaining=4971 limit=5000
-2025/10/28 22:09:25 INFO GitHub API request starting method=GET url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/collaborators?affiliation=all&per_page=100" headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/28 22:09:25 INFO HTTP request starting method=GET url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/collaborators?affiliation=all&per_page=100" host=api.github.com
-2025/10/28 22:09:25 INFO HTTP response received status=200 url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/collaborators?affiliation=all&per_page=100" elapsed=170.363583ms
-2025/10/28 22:09:25 INFO GitHub API response received status="200 OK" url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/collaborators?affiliation=all&per_page=100" elapsed=170.53075ms rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4997 X-RateLimit-Reset:1761706998 X-RateLimit-Resource:collaborators X-RateLimit-Used:3]"
-2025/10/28 22:09:25 INFO GitHub API request starting method=GET url=https://api.github.com/repos/codeGROOVE-dev/sprinkler/rulesets headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/28 22:09:25 INFO HTTP request starting method=GET url=https://api.github.com/repos/codeGROOVE-dev/sprinkler/rulesets host=api.github.com
-2025/10/28 22:09:25 INFO HTTP response received status=200 url=https://api.github.com/repos/codeGROOVE-dev/sprinkler/rulesets elapsed=208.483375ms
-2025/10/28 22:09:25 INFO GitHub API response received status="200 OK" url=https://api.github.com/repos/codeGROOVE-dev/sprinkler/rulesets elapsed=208.550458ms rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4975 X-RateLimit-Reset:1761706718 X-RateLimit-Resource:core X-RateLimit-Used:25]"
-2025/10/28 22:09:25 INFO fetched required checks from rulesets count=0 checks=[]
-2025/10/28 22:09:25 INFO GitHub API request starting method=GET url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/commits/03baab46ffa62f2d360eaaae7402bebe103639d8/check-runs?per_page=100" headers="map[Accept:application/vnd.github.v3+json Authorization:Bearer gho_...UIqb User-Agent:]"
-2025/10/28 22:09:25 INFO HTTP request starting method=GET url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/commits/03baab46ffa62f2d360eaaae7402bebe103639d8/check-runs?per_page=100" host=api.github.com
-2025/10/28 22:09:26 INFO HTTP response received status=200 url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/commits/03baab46ffa62f2d360eaaae7402bebe103639d8/check-runs?per_page=100" elapsed=197.456917ms
-2025/10/28 22:09:26 INFO GitHub API response received status="200 OK" url="https://api.github.com/repos/codeGROOVE-dev/sprinkler/commits/03baab46ffa62f2d360eaaae7402bebe103639d8/check-runs?per_page=100" elapsed=197.724458ms rate_limits="map[Retry-After: X-RateLimit-Limit:5000 X-RateLimit-Remaining:4974 X-RateLimit-Reset:1761706718 X-RateLimit-Resource:core X-RateLimit-Used:26]"
-2025/10/28 22:09:26 INFO fetched check runs via REST count=1
-2025/10/28 22:09:26 INFO successfully fetched pull request via hybrid GraphQL+REST owner=codeGROOVE-dev repo=sprinkler pr=37 event_count=6 api_calls_made="3 (vs 13+ with REST)"
-{"events":[{"timestamp":"2025-10-29T02:04:26Z","kind":"commit","actor":"Thomas Stromberg","body":"Add TestCheckEventRaceCondition"},{"timestamp":"2025-10-29T02:04:47Z","kind":"pr_opened","actor":"tstromberg","write_access":2},{"timestamp":"2025-10-29T02:05:04Z","kind":"merged","actor":"tstromberg"},{"timestamp":"2025-10-29T02:05:04Z","kind":"closed","actor":"tstromberg"},{"timestamp":"2025-10-29T02:05:04Z","kind":"pr_merged","actor":"tstromberg"},{"timestamp":"2025-10-29T02:05:10Z","kind":"check_run","actor":"github","outcome":"success","body":"Kusari Inspector","description":"Security Analysis Passed: No security issues found","bot":true}],"pull_request":{"created_at":"2025-10-29T02:04:47Z","updated_at":"2025-10-29T02:05:04Z","closed_at":"2025-10-29T02:05:04Z","merged_at":"2025-10-29T02:05:04Z","approval_summary":{"approvals_with_write_access":0,"approvals_with_unknown_access":0,"approvals_without_write_access":0,"changes_requested":0},"check_summary":{"success":{"Kusari Inspector":"Security Analysis Passed: No security issues found"},"failing":{},"pending":{},"cancelled":{},"skipped":{},"stale":{},"neutral":{}},"mergeable":null,"assignees":[],"participant_access":{"Thomas Stromberg":0,"tstromberg":2},"mergeable_state":"unknown","mergeable_state_description":"Merge status is being calculated","author":"tstromberg","body":"","title":"Add TestCheckEventRaceCondition","merged_by":"tstromberg","state":"merged","test_state":"passing","head_sha":"03baab46ffa62f2d360eaaae7402bebe103639d8","number":37,"changed_files":1,"deletions":0,"additions":324,"author_write_access":2,"author_bot":false,"merged":true,"draft":false}}
+{
+ "events": [
+ {
+ "timestamp": "2025-10-29T02:04:26Z",
+ "kind": "commit",
+ "actor": "Thomas Stromberg",
+ "body": "Add TestCheckEventRaceCondition"
+ },
+ {
+ "timestamp": "2025-10-29T02:04:47Z",
+ "kind": "pr_opened",
+ "actor": "tstromberg",
+ "write_access": 2
+ },
+ { "timestamp": "2025-10-29T02:05:04Z", "kind": "merged", "actor": "tstromberg" },
+ { "timestamp": "2025-10-29T02:05:04Z", "kind": "closed", "actor": "tstromberg" },
+ { "timestamp": "2025-10-29T02:05:04Z", "kind": "pr_merged", "actor": "tstromberg" },
+ {
+ "timestamp": "2025-10-29T02:05:10Z",
+ "kind": "check_run",
+ "actor": "github",
+ "outcome": "success",
+ "body": "Kusari Inspector",
+ "description": "Security Analysis Passed: No security issues found",
+ "bot": true
+ }
+ ],
+ "pull_request": {
+ "created_at": "2025-10-29T02:04:47Z",
+ "updated_at": "2025-10-29T02:05:04Z",
+ "closed_at": "2025-10-29T02:05:04Z",
+ "merged_at": "2025-10-29T02:05:04Z",
+ "approval_summary": {
+ "approvals_with_write_access": 0,
+ "approvals_with_unknown_access": 0,
+ "approvals_without_write_access": 0,
+ "changes_requested": 0
+ },
+ "check_summary": {
+ "success": { "Kusari Inspector": "Security Analysis Passed: No security issues found" },
+ "failing": {},
+ "pending": {},
+ "cancelled": {},
+ "skipped": {},
+ "stale": {},
+ "neutral": {}
+ },
+ "mergeable": null,
+ "assignees": [],
+ "participant_access": { "Thomas Stromberg": 0, "tstromberg": 2 },
+ "mergeable_state": "unknown",
+ "mergeable_state_description": "Merge status is being calculated",
+ "author": "tstromberg",
+ "body": "",
+ "title": "Add TestCheckEventRaceCondition",
+ "merged_by": "tstromberg",
+ "state": "merged",
+ "test_state": "passing",
+ "head_sha": "03baab46ffa62f2d360eaaae7402bebe103639d8",
+ "number": 37,
+ "changed_files": 1,
+ "deletions": 0,
+ "additions": 324,
+ "author_write_access": 2,
+ "author_bot": false,
+ "merged": true,
+ "draft": false
+ }
+}