[Bug] - [Dataflow analysis crashes on invalid or malformed GitHub Actions workflows]
Open
@nicallen is already working on this.
Since Feb 17, 2026.
bug
github_actions
- Dominant language
- Python
- Stars
- 210
- Forks
- 36
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 2
Description
Description
When running Macaron's dataflow analysis on a repository that contains an invalid or malformed GitHub Action workflow file, Macaron should not crash (e.g., on uncaught KeyError), and instead log it as a debug information and continue with the analysis of the other workflows. Otherwise, this leads to incomplete analysis and premature termination.
Related #1305
Expected Behavior
The expected behavior is for Macaron to handle such exceptions gracefully, logging relevant error messages, and continue analysis on the remaining valid workflows.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.