twitter / twitter/communitynotes
GitHub Advanced Security Jobs Fail to Start - Account Locked Due to Billing
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 1.9k
- Forks
- 350
- Avg merge
- 6m
- Merged PRs (30d)
- 2
Description
Describe the bug
The GitHub Advanced Security analysis jobs (specifically "Analyze (python)" and "Analyze (actions)") failed to start, reporting that the GitHub account is locked due to a billing issue. This prevents crucial security scanning from being performed on the repository.
To Reproduce
Steps to reproduce the behavior:
- Precondition: Ensure the GitHub account linked to this repository is in a "locked due to billing" state.
- Push a commit to the
mainbranch of this repository (or trigger a workflow run that utilizes GitHub Advanced Security). - Observe the
github-advanced-security[bot]status check for the latest commit failing in the Actions tab. - Open the failed workflow run (e.g., "Analyze (python)" or "Analyze (actions)").
- See the error message in the job logs.
Expected behavior
Ideally, when a GitHub account is locked due to billing and impacts GitHub Advanced Security:
- Proactive Warning: GitHub should provide a clear, prominent warning in the repository settings or Actions tab before a workflow run even attempts to execute Advanced Security scans, indicating the account lock.
- Actionable Error Message: If an Advanced Security job attempts to run, the error message in the workflow logs should clearly state the issue and, critically, provide a direct link to the billing portal or customer support to resolve the account lock.
- Graceful Handling: The security analysis workflow should gracefully indicate its inability to run without displaying a generic "job not started" message, perhaps with a more specific GitHub-level error.
Screenshots
Environment
- Repository: /twitter/communitynotes
- GitHub Actions: Workflow triggered by commit
16ce621onmainbranch. - GitHub Advanced Security: Python and Actions analysis jobs.
- Time of incident: Approximately 3 days ago from current date (as per bot message).
Additional context
This issue directly impacts the ability to perform crucial security scanning on the repository using GitHub Advanced Security features. While the root cause is external (a billing issue with the GitHub account), the way this is communicated and handled within GitHub Actions (specifically for Advanced Security) could be improved to provide better user guidance and reduce uncertainty regarding the security posture of the repository.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Review the failed “Analyze (python)” and “Analyze (actions)” workflow runs for commit 16ce621 and inspect their job logs in the Actions tab. Confirm how the billing-lock error is presented and whether the requested warning, actionable billing or support link, and graceful failure can be implemented in this repository; done requires a defined repository-side change or documented limitation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions, python
- Domain
- ci-cd, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100