twitter / twitter/communitynotes

GitHub Advanced Security Jobs Fail to Start - Account Locked Due to Billing

Open
#379 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
1.9k
Forks
350
Avg merge
6m
Merged PRs (30d)
2

Description

Describe the bug
The GitHub Advanced Security analysis jobs (specifically "Analyze (python)" and "Analyze (actions)") failed to start, reporting that the GitHub account is locked due to a billing issue. This prevents crucial security scanning from being performed on the repository.

To Reproduce
Steps to reproduce the behavior:

  1. Precondition: Ensure the GitHub account linked to this repository is in a "locked due to billing" state.
  2. Push a commit to the main branch of this repository (or trigger a workflow run that utilizes GitHub Advanced Security).
  3. Observe the github-advanced-security[bot] status check for the latest commit failing in the Actions tab.
  4. Open the failed workflow run (e.g., "Analyze (python)" or "Analyze (actions)").
  5. See the error message in the job logs.

Expected behavior
Ideally, when a GitHub account is locked due to billing and impacts GitHub Advanced Security:

  • Proactive Warning: GitHub should provide a clear, prominent warning in the repository settings or Actions tab before a workflow run even attempts to execute Advanced Security scans, indicating the account lock.
  • Actionable Error Message: If an Advanced Security job attempts to run, the error message in the workflow logs should clearly state the issue and, critically, provide a direct link to the billing portal or customer support to resolve the account lock.
  • Graceful Handling: The security analysis workflow should gracefully indicate its inability to run without displaying a generic "job not started" message, perhaps with a more specific GitHub-level error.

Screenshots

Environment

  • Repository: /twitter/communitynotes
  • GitHub Actions: Workflow triggered by commit 16ce621 on main branch.
  • GitHub Advanced Security: Python and Actions analysis jobs.
  • Time of incident: Approximately 3 days ago from current date (as per bot message).

Additional context
This issue directly impacts the ability to perform crucial security scanning on the repository using GitHub Advanced Security features. While the root cause is external (a billing issue with the GitHub account), the way this is communicated and handled within GitHub Actions (specifically for Advanced Security) could be improved to provide better user guidance and reduce uncertainty regarding the security posture of the repository.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review the failed “Analyze (python)” and “Analyze (actions)” workflow runs for commit 16ce621 and inspect their job logs in the Actions tab. Confirm how the billing-lock error is presented and whether the requested warning, actionable billing or support link, and graceful failure can be implemented in this repository; done requires a defined repository-side change or documented limitation.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions, python
Domain
ci-cd, security
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.