Analysis of Cleanup PR Artifacts workflow failure

[cratis-direct]

Summary

The Cleanup PR Artifacts workflow failure on Aug 4 (run #30917454422) was caused by the PAT_WORKFLOWS secret not being configured in the Lens repository at that time.

Root Cause Analysis

The workflow failed with "error parsing called workflow" at the GitHub Actions validation stage because:

1. The Cleanup PR Artifacts workflow calls a reusable workflow from Cratis/Workflows
2. The reusable workflow requires the PAT_WORKFLOWS secret (defined with required: true)
3. GitHub validates required secrets at workflow parse time, before any jobs are created
4. If the secret is not available in the repository or inherited from the organization, the workflow fails immediately with a "workflow file issue" error

Timeline:

• Aug 4, 14:09 UTC: Run failed - secret was not configured
• Aug 26, 08:28 UTC: PR #79 in Cratis/Workflows removed the reusable workflow (accidentally)
• Aug 26, 17:42 UTC: PR #80 in Cratis/Workflows restored the reusable workflow
• Aug 28: Successful runs - indicates PAT_WORKFLOWS secret was configured by this point

Status

The workflow is now functioning correctly (recent successful runs on Aug 28+). The secret is properly configured at the organization or repository level, allowing the workflow to execute successfully.

Recommendation

• Ensure PAT_WORKFLOWS is configured in the GitHub Actions secrets (repository or organization level)
• The secret must have read:packages and delete:packages scopes (for classic PAT) or Packages read/write (for fine-grained PAT)
• See Cratis/Workflows documentation for detailed setup: https://github.com/Cratis/Workflows#cleaning-up-pr-artifacts

[cratis-direct]

Documentation Fix

A commit has been created (commit 3875e4c) that adds documentation to the cleanup-pr-artifacts.yml workflow file, clearly explaining:

• The requirement for the PAT_WORKFLOWS secret
• Required scopes and permissions
• A link to the Cratis/Workflows setup documentation

This documentation will help prevent similar issues in the future by making it clear what configuration is needed for the workflow to function properly.

Commit: 3875e4c - "Document PAT_WORKFLOWS requirement for Cleanup PR Artifacts workflow"

Status: Ready for PR submission pending branch push completion.