merjax_get_workflow_logs
Return a workflow run's logs plus a failure summary. Always includes run metadata (number, workflow, event, ref, sha), per-job and per-step status / exit code / duration, failedSteps (job / step) and testFailures (failing test names, read from each step's structured results parsed before its log was cut, or the reason they cannot all be named; null when no job failed). testFailures.details marks each failure flaky (an active forensic label with a repro, from another run — with its label and flip rate), known (also failing on the default branch's latest run), infra (timed out under load) or new, with its file, message, the targeted retry's verdict and this run's determinism-forensics finding (forensic: class, label, variable, repro) when they ran. A step whose log was cut carries fullLog (artifact download of the uncut output). step (a step name or 1-based position within its job) returns only that step's stdout/stderr; tail_lines keeps the last N lines. The full per-job logs are included only when neither is given. JSON-friendly companion to the ZIP-download endpoint. A private repository's logs require 'repo' scope (OAuth: write:repo); every token read is audited. For a read-only CI audit credential, a repository token with {"runners": "read", "actions": "read"} (the ci-audit preset, merjax_create_repo_token) reads the same masked logs over REST — GET /api/v2/repos/:owner/:repo/actions/runs/:id/logs, or one job's at actions/jobs/:job_id/logs — under the same rule and audit; repository tokens are not accepted on /mcp.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| repo | Yes | ||
| step | No | Only this step's logs: its name (exact, else substring, case-insensitive) or its 1-based position within its job | |
| owner | Yes | ||
| run_id | Yes | The run's id, or a unique leading part of it (8+ hex characters) | |
| tail_lines | No | Keep only the last N lines of each returned log (max 5000) |