
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@htekdev/actions-debugger
Advanced tools
65+ real GitHub Actions errors, queryable by agents. CLI + MCP server + Copilot skills + error database.
65+ real GitHub Actions errors, queryable by agents. CLI + MCP server + Copilot skills + error database.
Stop debugging the same CI failures over and over. This repo packages 65+ real-world GitHub Actions error scenarios — with regex-matchable patterns, root causes, and copy-paste fixes — into formats that both humans and AI agents can consume.
errors/ → Structured YAML error database (65+ entries)
src/ → CLI + MCP server (TypeScript)
.github/skills/ → Copilot CLI skills for CI debugging
.github/agents/ → Copilot agent definition
# Look up an error
npx @htekdev/actions-debugger lookup "Permission to org/repo.git denied"
# Search by keyword
npx @htekdev/actions-debugger search "OIDC" --category permissions-auth
# Diagnose a workflow file
npx @htekdev/actions-debugger diagnose .github/workflows/ci.yml
# Get fix suggestions
npx @htekdev/actions-debugger suggest-fix "artifact upload fails intermittently"
# List all categories
npx @htekdev/actions-debugger categories
# Text (default for TTY)
npx @htekdev/actions-debugger lookup "error message"
# JSON (default when piped, or explicit)
npx @htekdev/actions-debugger lookup "error message" --format json
# Markdown
npx @htekdev/actions-debugger lookup "error message" --format md
| Code | Meaning |
|---|---|
| 0 | Success / matches found |
| 1 | No matches found |
| 2 | Invalid input / parse error |
| 3 | Database load error |
npx @htekdev/actions-debugger
Add to your MCP client config:
{
"mcpServers": {
"actions-debugger": {
"command": "npx",
"args": ["@htekdev/actions-debugger"]
}
}
}
Client config locations:
~/Library/Application Support/Claude/claude_desktop_config.json (macOS) / %APPDATA%\Claude\claude_desktop_config.json (Windows).cursor/mcp.json (project) or ~/.cursor/mcp.json (global).vscode/mcp.json.github/mcp.json (repo-level)~/.codeium/windsurf/mcp_config.jsonCopy .github/skills/actions-debugging-cli/SKILL.md to your repo's .github/skills/ directory. Any agent with shell access can use the CLI — no MCP config needed.
> **Skill reference:** For CI debugging, use the `actions-debugging-cli` skill.
import { loadErrorDatabase, lookupError, diagnoseWorkflow } from "@htekdev/actions-debugger";
const db = await loadErrorDatabase();
// Lookup by error message
const matches = lookupError(db, "Permission to org/repo.git denied");
console.log(matches[0].fix);
// Analyze a workflow
const issues = diagnoseWorkflow(db, workflowYamlString);
| Tool | Description |
|---|---|
lookup_error | Match an error message against 65+ known issues |
diagnose_workflow | Static analysis of workflow YAML for common mistakes |
suggest_fix | Contextual fix suggestions from error context |
search_errors | Full-text search by keyword, category, severity |
list_categories | Browse error categories with counts |
| Category | Description |
|---|---|
yaml-syntax | YAML validation, key typos, expression errors |
silent-failures | No error shown, but wrong behavior |
runner-environment | Runner issues, disk space, Docker, PATH |
permissions-auth | GITHUB_TOKEN, OIDC, secrets, 403s |
caching-artifacts | Cache misses, artifact v4 changes, corruption |
triggers | Workflow not running, cron issues, dispatch |
concurrency-timing | Job cancellation, matrix, timeouts |
known-unsolved | Platform limitations with no fix |
See CONTRIBUTING.md for how to add new error entries. It's easy:
errors/{category}/ directoryerrors/_schema.jsonAll error scenarios sourced from: The Definitive GitHub Actions Debugging Guide
MIT — Hector Flores (htekdev)
FAQs
65+ real GitHub Actions errors, queryable by agents. CLI + MCP server + Copilot skills + error database.
The npm package @htekdev/actions-debugger receives a total of 37 weekly downloads. As such, @htekdev/actions-debugger popularity was classified as not popular.
We found that @htekdev/actions-debugger demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.