Report each day's production telemetry error groups as GitHub issues

.github/scripts/sync_telemetry_error_issues.py

@@ -0,0 +1,11 @@
+"""Report each day's telemetry error groups as GitHub issues.
+
+The code is in the ``telemetry_error_issues`` package beside this file. Python
+puts the directory of a script it runs by path first on ``sys.path``, so the
+package imports from any working directory.
+"""
+
+from telemetry_error_issues.cli import main
+
+if __name__ == "__main__":
+    raise SystemExit(main())

.github/scripts/sync_telemetry_error_issues.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+# Run the daily telemetry error report with the settings the workflow passes
+# in the environment, through uv (the workflow sets it up). DRY_RUN=true adds --dry-run; a non-empty REPORT_DATE
+# (YYYY-MM-DD, an Eastern calendar day) replaces the default previous day.
+set -euo pipefail
+
+: "${GOOGLE_OAUTH_ACCESS_TOKEN:?GOOGLE_OAUTH_ACCESS_TOKEN is required}"
+: "${GITHUB_TOKEN:?GITHUB_TOKEN is required}"
+: "${GITHUB_REPOSITORY:?GITHUB_REPOSITORY is required}"
+: "${TELEMETRY_ERROR_FINGERPRINT_KEY:?TELEMETRY_ERROR_FINGERPRINT_KEY is required}"
+: "${OBSERVABILITY_PROJECT_ID:?OBSERVABILITY_PROJECT_ID is required}"
+: "${OBSERVABILITY_LOG_BUCKET:?OBSERVABILITY_LOG_BUCKET is required}"
+: "${OBSERVABILITY_LOG_BUCKET_LOCATION:?OBSERVABILITY_LOG_BUCKET_LOCATION is required}"
+: "${OBSERVABILITY_LOG_DATASET:?OBSERVABILITY_LOG_DATASET is required}"
+: "${OBSERVABILITY_LOG_VIEW:?OBSERVABILITY_LOG_VIEW is required}"
+: "${OBSERVABILITY_SERVICE_NAMESPACE:?OBSERVABILITY_SERVICE_NAMESPACE is required}"
+
+# Hide both values in the job log even if a later command prints them.
+echo "::add-mask::${GOOGLE_OAUTH_ACCESS_TOKEN}"
+echo "::add-mask::${TELEMETRY_ERROR_FINGERPRINT_KEY}"
+
+arguments=(--project-id "${OBSERVABILITY_PROJECT_ID}")
+if [[ "${DRY_RUN:-false}" == "true" ]]; then
+  arguments+=(--dry-run)
+fi
+if [[ -n "${REPORT_DATE:-}" ]]; then
+  arguments+=(--report-date "${REPORT_DATE}")
+fi
+
+script_directory="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+repository_root="$(cd "${script_directory}/../.." && pwd)"
+# Run in an environment that holds only the telemetry-error-issues dependency
+# group, at the versions uv.lock pins, not the API's own dependencies.
+exec uv run --frozen --only-group telemetry-error-issues --project "${repository_root}" \
+  python "${script_directory}/sync_telemetry_error_issues.py" "${arguments[@]}"

.github/scripts/telemetry_error_issues/__init__.py

@@ -0,0 +1,13 @@
+"""Report each day's telemetry error groups as GitHub issues.
+
+Each run reads one US Eastern calendar day of error records from the central
+Cloud Logging bucket through its linked BigQuery dataset. It groups the records
+by a keyed fingerprint, measures each group in production and staging, and
+creates or updates one GitHub issue per production error group.
+
+Workflow logs, job summaries and issues in this repository are public. The
+script therefore publishes only fingerprints, counts, code-defined names and a
+Logs Explorer link, never error messages, stack text or identifiers.
+
+``sync_telemetry_error_issues.py`` beside this package runs ``cli.main``.
+"""