opp-repl-github-actions — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited opp-repl-github-actions (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Fire workflow_dispatch events on the project's GitHub repository directly from opp_repl. Handy for triggering expensive CI suites (full fingerprint run, cluster tests) without leaving the REPL.
Upstream reference: https://github.com/omnetpp/opp_repl/blob/main/doc/github_actions.md
pip install "opp_repl[github]" (pulls requests).~/.ssh/github_repo_token(file permissions 600) with scopes repo and workflow.
.opp file includes GitHub fields:SimulationProject( name="inet", root_folder=".", ..., github_owner="inet-framework", github_repository="inet", github_workflows=[ "fingerprint-tests.yml", "statistical-tests.yml", "chart-tests.yml", ], )
dispatch_workflow("fingerprint-tests.yml")
dispatch_all_workflows()
dispatch_workflow("fingerprint-tests.yml", simulation_project=inet_project, ref="topic/my-feature")
Returns the HTTP response from GitHub. No CLI wrapper is bundled for this function; use the REPL or an ad-hoc python -c.
dispatch_workflow("fingerprint-tests.yml", ref="my-branch") tokick a longer CI run while you context-switch.
400 / 401 with ambiguous messages otherwise.
github_workflows lists YAML file names, not display names.Check .github/workflows/ in the repo.
workflow_dispatch must be declared in the workflow YAMLitself (on: [workflow_dispatch]), or the API returns 422.
dispatch_workflow() just TRIGGERS the run; results live onGitHub. If you need local verdicts, run the equivalent run_*_tests() instead.
opp-repl-opp-files — where github_* parameters go.opp-repl-*-tests skill — what workflows typically run.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.