Skip to content

ci(cache): stop PR CI, bundle, and benchmark cache writes - #260

Open
rodboev wants to merge 6 commits into
mainfrom
pr/ci-waste-9-cache-mode
Open

rodboev wants to merge 6 commits into
mainfrom
pr/ci-waste-9-cache-mode

Conversation

@rodboev

@rodboev rodboev commented Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

kit's PR runs stop saving caches, which fill 56% of kit's cache storage today (13.4 of 24.0 GB in 45 entries) with copies no other branch reads. PRs restore main's entries instead, and main stays the only writer.

Branch caches consume the repository's cache allowance without helping other pull requests. Preserve shared cache space for entries that main can refresh and future pull requests can restore.
Main CI already refreshes the Go caches on all three bundle runners. Manual bundle builds can share those entries, so they need no cache writer or separate pull request wrapper.
Manual bundle builds must retain their existing cache behavior and release
tag input. Restrict cache writes only on the pull request route while
sharing the existing bundle and publication jobs.
Pull request bundle runs build artifacts without publishing them. Keep
their caller token read-only; manual runs retain the publication job
and its existing write permission.
Pull request bundle builds use the pinned bundle tag. Only manual
publication supplies a release tag, so the reusable caller needs no
tag override.
The reusable bundle workflow declares a manual publish job with write
permission. Its caller needs that permission ceiling for validation,
while the bundle job keeps read access and publishing stays manual.

Changes to the caller must also exercise the bundle route on pull requests.
@roborev-ci

roborev-ci Bot commented Oct 30, 2026

Copy link
Copy Markdown

roborev: Combined Review (d2cf5c8)

Verdict: No findings at or above medium severity.


Reviewers: 2x codex, codex (security), codex (test-value) | Synthesis: codex | Total: 2m5s

@rodboev rodboev changed the title ci(cache): prevent pull request cache writes ci(cache): stop PR CI, bundle, and benchmark cache writes Oct 30, 2026
@rodboev
rodboev marked this pull request as ready for review October 30, 2026 01:26

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant