mirror of
https://github.com/actions/cache.git
synced 2026-01-30 15:32:22 +08:00
Compare commits
2 Commits
Link-/fix-
...
copilot/tr
| Author | SHA1 | Date | |
|---|---|---|---|
|
e9bc7be075 | ||
|
|
b702dcd123 |
330
.github/workflows/workflow.yml
vendored
330
.github/workflows/workflow.yml
vendored
@@ -90,359 +90,45 @@ jobs:
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: ubuntu:latest
|
||||
options: --privileged
|
||||
options: --dns 127.0.0.1
|
||||
services:
|
||||
squid-proxy:
|
||||
image: wernight/squid
|
||||
image: ubuntu/squid:latest
|
||||
ports:
|
||||
- 3128:3128
|
||||
env:
|
||||
https_proxy: http://squid-proxy:3128
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v5
|
||||
- name: Install dependencies
|
||||
run: |
|
||||
apt-get update
|
||||
apt-get install -y iptables dnsutils curl jq ipset
|
||||
- name: Fetch GitHub meta and configure firewall
|
||||
run: |
|
||||
# Fetch GitHub meta API to get all IP ranges
|
||||
echo "Fetching GitHub meta API..."
|
||||
curl -sS https://api.github.com/meta > /tmp/github-meta.json
|
||||
|
||||
# Wait for squid-proxy service to be resolvable and accepting connections
|
||||
echo "Waiting for squid-proxy service..."
|
||||
for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do
|
||||
PROXY_IP=$(getent hosts squid-proxy | awk '{ print $1 }')
|
||||
if [ -n "$PROXY_IP" ]; then
|
||||
echo "squid-proxy resolved to: $PROXY_IP"
|
||||
# Test that proxy is actually accepting connections
|
||||
if curl --connect-timeout 2 --max-time 5 -x http://squid-proxy:3128 -sS https://api.github.com/zen 2>/dev/null; then
|
||||
echo "Proxy is working!"
|
||||
break
|
||||
else
|
||||
echo "Attempt $i: Proxy resolved but not ready yet, waiting..."
|
||||
fi
|
||||
else
|
||||
echo "Attempt $i: squid-proxy not resolvable yet, waiting..."
|
||||
fi
|
||||
sleep 2
|
||||
done
|
||||
|
||||
if [ -z "$PROXY_IP" ]; then
|
||||
echo "ERROR: Could not resolve squid-proxy after 15 attempts"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Verify proxy works before locking down firewall
|
||||
echo "Final proxy connectivity test..."
|
||||
if ! curl --connect-timeout 5 --max-time 10 -x http://squid-proxy:3128 -sS https://api.github.com/zen; then
|
||||
echo "ERROR: Proxy is not working properly"
|
||||
exit 1
|
||||
fi
|
||||
echo "Proxy verified working!"
|
||||
|
||||
# Allow established connections
|
||||
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
|
||||
|
||||
# Allow loopback
|
||||
iptables -A OUTPUT -o lo -j ACCEPT
|
||||
|
||||
# Allow connections to the proxy
|
||||
iptables -A OUTPUT -d $PROXY_IP -p tcp --dport 3128 -j ACCEPT
|
||||
|
||||
# Allow DNS
|
||||
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
|
||||
iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT
|
||||
|
||||
# Create ipset for GitHub IPs (more efficient than individual rules)
|
||||
ipset create github-ips hash:net
|
||||
|
||||
# Add all GitHub IP ranges from meta API (hooks, web, api, git, actions, etc.)
|
||||
# EXCLUDING blob storage which must go through proxy
|
||||
for category in hooks web api git pages importer actions actions_macos codespaces copilot; do
|
||||
echo "Adding IPs for category: $category"
|
||||
jq -r ".${category}[]? // empty" /tmp/github-meta.json 2>/dev/null | while read cidr; do
|
||||
# Skip IPv6 for now (iptables vs ip6tables) - use case for POSIX compatibility
|
||||
case "$cidr" in
|
||||
*:*) ;; # IPv6, skip
|
||||
*) ipset add github-ips "$cidr" 2>/dev/null || true ;;
|
||||
esac
|
||||
done
|
||||
done
|
||||
|
||||
# Allow all GitHub IPs
|
||||
iptables -A OUTPUT -m set --match-set github-ips dst -p tcp --dport 443 -j ACCEPT
|
||||
iptables -A OUTPUT -m set --match-set github-ips dst -p tcp --dport 80 -j ACCEPT
|
||||
|
||||
# CRITICAL: Block direct access to blob storage and results-receiver
|
||||
# These MUST go through the proxy for cache operations
|
||||
echo "Blocking direct access to cache-critical endpoints..."
|
||||
|
||||
# Block results-receiver.actions.githubusercontent.com
|
||||
for ip in $(getent ahosts "results-receiver.actions.githubusercontent.com" 2>/dev/null | awk '{print $1}' | sort -u); do
|
||||
echo "Blocking direct access to results-receiver: $ip"
|
||||
iptables -I OUTPUT 1 -d "$ip" -p tcp --dport 443 -j REJECT
|
||||
done
|
||||
|
||||
# Block blob.core.windows.net (Azure blob storage used for cache)
|
||||
for host in productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net; do
|
||||
for ip in $(getent ahosts "$host" 2>/dev/null | awk '{print $1}' | sort -u); do
|
||||
echo "Blocking direct access to blob storage ($host): $ip"
|
||||
iptables -I OUTPUT 1 -d "$ip" -p tcp --dport 443 -j REJECT
|
||||
done
|
||||
done
|
||||
|
||||
# Block all other outbound HTTP/HTTPS traffic
|
||||
iptables -A OUTPUT -p tcp --dport 80 -j REJECT
|
||||
iptables -A OUTPUT -p tcp --dport 443 -j REJECT
|
||||
|
||||
echo "iptables rules applied:"
|
||||
iptables -L OUTPUT -n -v
|
||||
echo ""
|
||||
echo "ipset github-ips contains $(ipset list github-ips | grep -c '^[0-9]') entries"
|
||||
- name: Verify proxy enforcement
|
||||
run: |
|
||||
echo "=== Testing proxy enforcement ==="
|
||||
|
||||
# Test 1: Verify proxy is working by explicitly using it
|
||||
echo "Test 1: Connection through proxy (should SUCCEED)"
|
||||
if curl --connect-timeout 10 --max-time 15 -x http://squid-proxy:3128 -sS -o /dev/null -w "%{http_code}" https://api.github.com/zen; then
|
||||
echo ""
|
||||
echo "✓ Proxy connection works"
|
||||
else
|
||||
echo "✗ ERROR: Proxy is not working!"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Test 2: Direct connection to blob storage should FAIL (blocked by iptables)
|
||||
echo ""
|
||||
echo "Test 2: Direct connection to blob storage (should FAIL - blocked by iptables)"
|
||||
if curl --connect-timeout 5 --max-time 10 --noproxy '*' -sS https://productionresultssa0.blob.core.windows.net 2>/dev/null; then
|
||||
echo "✗ ERROR: Direct blob storage connection succeeded but should have been blocked!"
|
||||
exit 1
|
||||
else
|
||||
echo "✓ Direct blob storage correctly blocked by iptables"
|
||||
fi
|
||||
|
||||
# Test 3: Connection to blob storage THROUGH proxy should work
|
||||
echo ""
|
||||
echo "Test 3: Connection through proxy to blob storage (should SUCCEED)"
|
||||
HTTP_CODE=$(curl --connect-timeout 10 --max-time 15 -x http://squid-proxy:3128 -sS -o /dev/null -w "%{http_code}" https://productionresultssa0.blob.core.windows.net 2>&1) || true
|
||||
echo "HTTP response code: $HTTP_CODE"
|
||||
if [ "$HTTP_CODE" = "400" ] || [ "$HTTP_CODE" = "409" ] || [ "$HTTP_CODE" = "200" ]; then
|
||||
echo "✓ Proxy successfully forwarded request to blob storage (got HTTP $HTTP_CODE)"
|
||||
else
|
||||
echo "✗ ERROR: Proxy failed to forward request (got: $HTTP_CODE)"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "=== All proxy enforcement tests passed ==="
|
||||
echo "The proxy is working. If cache operations fail, it's because the action doesn't use the proxy."
|
||||
- name: Generate files
|
||||
run: __tests__/create-cache-files.sh proxy test-cache
|
||||
- name: Save cache
|
||||
env:
|
||||
http_proxy: http://squid-proxy:3128
|
||||
https_proxy: http://squid-proxy:3128
|
||||
uses: ./
|
||||
with:
|
||||
key: test-proxy-${{ github.run_id }}
|
||||
path: test-cache
|
||||
- name: Verify proxy setup
|
||||
run: |
|
||||
echo "## 🔒 Proxy Integration Test - Cache Save" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "### ✅ Test Configuration" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "- **Proxy**: squid-proxy:3128" >> $GITHUB_STEP_SUMMARY
|
||||
echo "- **Firewall**: iptables blocking direct access to cache endpoints" >> $GITHUB_STEP_SUMMARY
|
||||
echo "- **Test**: Cache save operation completed successfully through proxy" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "If the cache save step succeeded, it means:" >> $GITHUB_STEP_SUMMARY
|
||||
echo "1. Direct access to results-receiver.actions.githubusercontent.com was blocked" >> $GITHUB_STEP_SUMMARY
|
||||
echo "2. Direct access to *.blob.core.windows.net was blocked" >> $GITHUB_STEP_SUMMARY
|
||||
echo "3. Cache operations were routed through the squid proxy" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "✅ **SUCCESS**: Proxy integration test passed!" >> $GITHUB_STEP_SUMMARY
|
||||
|
||||
test-proxy-restore:
|
||||
needs: test-proxy-save
|
||||
runs-on: ubuntu-latest
|
||||
container:
|
||||
image: ubuntu:latest
|
||||
options: --privileged
|
||||
options: --dns 127.0.0.1
|
||||
services:
|
||||
squid-proxy:
|
||||
image: wernight/squid
|
||||
image: ubuntu/squid:latest
|
||||
ports:
|
||||
- 3128:3128
|
||||
env:
|
||||
https_proxy: http://squid-proxy:3128
|
||||
steps:
|
||||
- name: Checkout
|
||||
uses: actions/checkout@v5
|
||||
- name: Install dependencies
|
||||
run: |
|
||||
apt-get update
|
||||
apt-get install -y iptables dnsutils curl jq ipset
|
||||
- name: Fetch GitHub meta and configure firewall
|
||||
run: |
|
||||
# Fetch GitHub meta API to get all IP ranges
|
||||
echo "Fetching GitHub meta API..."
|
||||
curl -sS https://api.github.com/meta > /tmp/github-meta.json
|
||||
|
||||
# Wait for squid-proxy service to be resolvable and accepting connections
|
||||
echo "Waiting for squid-proxy service..."
|
||||
for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do
|
||||
PROXY_IP=$(getent hosts squid-proxy | awk '{ print $1 }')
|
||||
if [ -n "$PROXY_IP" ]; then
|
||||
echo "squid-proxy resolved to: $PROXY_IP"
|
||||
# Test that proxy is actually accepting connections
|
||||
if curl --connect-timeout 2 --max-time 5 -x http://squid-proxy:3128 -sS https://api.github.com/zen 2>/dev/null; then
|
||||
echo "Proxy is working!"
|
||||
break
|
||||
else
|
||||
echo "Attempt $i: Proxy resolved but not ready yet, waiting..."
|
||||
fi
|
||||
else
|
||||
echo "Attempt $i: squid-proxy not resolvable yet, waiting..."
|
||||
fi
|
||||
sleep 2
|
||||
done
|
||||
|
||||
if [ -z "$PROXY_IP" ]; then
|
||||
echo "ERROR: Could not resolve squid-proxy after 15 attempts"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Verify proxy works before locking down firewall
|
||||
echo "Final proxy connectivity test..."
|
||||
if ! curl --connect-timeout 5 --max-time 10 -x http://squid-proxy:3128 -sS https://api.github.com/zen; then
|
||||
echo "ERROR: Proxy is not working properly"
|
||||
exit 1
|
||||
fi
|
||||
echo "Proxy verified working!"
|
||||
|
||||
# Allow established connections
|
||||
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
|
||||
|
||||
# Allow loopback
|
||||
iptables -A OUTPUT -o lo -j ACCEPT
|
||||
|
||||
# Allow connections to the proxy
|
||||
iptables -A OUTPUT -d $PROXY_IP -p tcp --dport 3128 -j ACCEPT
|
||||
|
||||
# Allow DNS
|
||||
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
|
||||
iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT
|
||||
|
||||
# Create ipset for GitHub IPs (more efficient than individual rules)
|
||||
ipset create github-ips hash:net
|
||||
|
||||
# Add all GitHub IP ranges from meta API (hooks, web, api, git, actions, etc.)
|
||||
# EXCLUDING blob storage which must go through proxy
|
||||
for category in hooks web api git pages importer actions actions_macos codespaces copilot; do
|
||||
echo "Adding IPs for category: $category"
|
||||
jq -r ".${category}[]? // empty" /tmp/github-meta.json 2>/dev/null | while read cidr; do
|
||||
# Skip IPv6 for now (iptables vs ip6tables) - use case for POSIX compatibility
|
||||
case "$cidr" in
|
||||
*:*) ;; # IPv6, skip
|
||||
*) ipset add github-ips "$cidr" 2>/dev/null || true ;;
|
||||
esac
|
||||
done
|
||||
done
|
||||
|
||||
# Allow all GitHub IPs
|
||||
iptables -A OUTPUT -m set --match-set github-ips dst -p tcp --dport 443 -j ACCEPT
|
||||
iptables -A OUTPUT -m set --match-set github-ips dst -p tcp --dport 80 -j ACCEPT
|
||||
|
||||
# CRITICAL: Block direct access to blob storage and results-receiver
|
||||
# These MUST go through the proxy for cache operations
|
||||
echo "Blocking direct access to cache-critical endpoints..."
|
||||
|
||||
# Block results-receiver.actions.githubusercontent.com
|
||||
for ip in $(getent ahosts "results-receiver.actions.githubusercontent.com" 2>/dev/null | awk '{print $1}' | sort -u); do
|
||||
echo "Blocking direct access to results-receiver: $ip"
|
||||
iptables -I OUTPUT 1 -d "$ip" -p tcp --dport 443 -j REJECT
|
||||
done
|
||||
|
||||
# Block blob.core.windows.net (Azure blob storage used for cache)
|
||||
for host in productionresultssa0.blob.core.windows.net productionresultssa1.blob.core.windows.net productionresultssa2.blob.core.windows.net productionresultssa3.blob.core.windows.net; do
|
||||
for ip in $(getent ahosts "$host" 2>/dev/null | awk '{print $1}' | sort -u); do
|
||||
echo "Blocking direct access to blob storage ($host): $ip"
|
||||
iptables -I OUTPUT 1 -d "$ip" -p tcp --dport 443 -j REJECT
|
||||
done
|
||||
done
|
||||
|
||||
# Block all other outbound HTTP/HTTPS traffic
|
||||
iptables -A OUTPUT -p tcp --dport 80 -j REJECT
|
||||
iptables -A OUTPUT -p tcp --dport 443 -j REJECT
|
||||
|
||||
echo "iptables rules applied:"
|
||||
iptables -L OUTPUT -n -v
|
||||
echo ""
|
||||
echo "ipset github-ips contains $(ipset list github-ips | grep -c '^[0-9]') entries"
|
||||
- name: Verify proxy enforcement
|
||||
run: |
|
||||
echo "=== Testing proxy enforcement ==="
|
||||
|
||||
# Test 1: Verify proxy is working by explicitly using it
|
||||
echo "Test 1: Connection through proxy (should SUCCEED)"
|
||||
if curl --connect-timeout 10 --max-time 15 -x http://squid-proxy:3128 -sS -o /dev/null -w "%{http_code}" https://api.github.com/zen; then
|
||||
echo ""
|
||||
echo "✓ Proxy connection works"
|
||||
else
|
||||
echo "✗ ERROR: Proxy is not working!"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Test 2: Direct connection to blob storage should FAIL (blocked by iptables)
|
||||
echo ""
|
||||
echo "Test 2: Direct connection to blob storage (should FAIL - blocked by iptables)"
|
||||
if curl --connect-timeout 5 --max-time 10 --noproxy '*' -sS https://productionresultssa0.blob.core.windows.net 2>/dev/null; then
|
||||
echo "✗ ERROR: Direct blob storage connection succeeded but should have been blocked!"
|
||||
exit 1
|
||||
else
|
||||
echo "✓ Direct blob storage correctly blocked by iptables"
|
||||
fi
|
||||
|
||||
# Test 3: Connection to blob storage THROUGH proxy should work
|
||||
echo ""
|
||||
echo "Test 3: Connection through proxy to blob storage (should SUCCEED)"
|
||||
HTTP_CODE=$(curl --connect-timeout 10 --max-time 15 -x http://squid-proxy:3128 -sS -o /dev/null -w "%{http_code}" https://productionresultssa0.blob.core.windows.net 2>&1) || true
|
||||
echo "HTTP response code: $HTTP_CODE"
|
||||
if [ "$HTTP_CODE" = "400" ] || [ "$HTTP_CODE" = "409" ] || [ "$HTTP_CODE" = "200" ]; then
|
||||
echo "✓ Proxy successfully forwarded request to blob storage (got HTTP $HTTP_CODE)"
|
||||
else
|
||||
echo "✗ ERROR: Proxy failed to forward request (got: $HTTP_CODE)"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo ""
|
||||
echo "=== All proxy enforcement tests passed ==="
|
||||
echo "The proxy is working. If cache operations fail, it's because the action doesn't use the proxy."
|
||||
- name: Restore cache
|
||||
env:
|
||||
http_proxy: http://squid-proxy:3128
|
||||
https_proxy: http://squid-proxy:3128
|
||||
uses: ./
|
||||
with:
|
||||
key: test-proxy-${{ github.run_id }}
|
||||
path: test-cache
|
||||
- name: Verify proxy setup
|
||||
run: |
|
||||
echo "## 🔒 Proxy Integration Test - Cache Restore" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "### ✅ Test Configuration" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "- **Proxy**: squid-proxy:3128" >> $GITHUB_STEP_SUMMARY
|
||||
echo "- **Firewall**: iptables blocking direct access to cache endpoints" >> $GITHUB_STEP_SUMMARY
|
||||
echo "- **Test**: Cache restore operation completed successfully through proxy" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "If the cache restore step succeeded, it means:" >> $GITHUB_STEP_SUMMARY
|
||||
echo "1. Direct access to results-receiver.actions.githubusercontent.com was blocked" >> $GITHUB_STEP_SUMMARY
|
||||
echo "2. Direct access to *.blob.core.windows.net was blocked" >> $GITHUB_STEP_SUMMARY
|
||||
echo "3. Cache operations were routed through the squid proxy" >> $GITHUB_STEP_SUMMARY
|
||||
echo "" >> $GITHUB_STEP_SUMMARY
|
||||
echo "✅ **SUCCESS**: Proxy integration test passed!" >> $GITHUB_STEP_SUMMARY
|
||||
- name: Verify cache
|
||||
run: __tests__/verify-cache-files.sh proxy test-cache
|
||||
|
||||
114
PR_TRIAGE_REPORT.md
Normal file
114
PR_TRIAGE_REPORT.md
Normal file
@@ -0,0 +1,114 @@
|
||||
# Pull Request Triage Report for actions/cache
|
||||
|
||||
*Generated: 2026-01-29*
|
||||
|
||||
| PR Link | Author | Date Opened | Days Open | Category |
|
||||
|---------|--------|-------------|-----------|----------|
|
||||
| [#1700](https://github.com/actions/cache/pull/1700) | Copilot | 2026-01-29 | 0 | Other |
|
||||
| [#1689](https://github.com/actions/cache/pull/1689) | StephenHodgson | 2025-12-13 | 47 | New feature |
|
||||
| [#1683](https://github.com/actions/cache/pull/1683) | salmanmkc | 2025-12-11 | 49 | Documentation |
|
||||
| [#1672](https://github.com/actions/cache/pull/1672) | alinernunes15-a11y | 2025-11-07 | 83 | Documentation |
|
||||
| [#1671](https://github.com/actions/cache/pull/1671) | dulcekarma7u7-netizen | 2025-10-28 | 93 | Documentation |
|
||||
| [#1654](https://github.com/actions/cache/pull/1654) | timbaverstock-bmbl | 2025-09-22 | 129 | Documentation |
|
||||
| [#1639](https://github.com/actions/cache/pull/1639) | atoulme | 2025-08-08 | 174 | Documentation |
|
||||
| [#1638](https://github.com/actions/cache/pull/1638) | TNGBBK | 2025-08-07 | 175 | Documentation |
|
||||
| [#1605](https://github.com/actions/cache/pull/1605) | loic-bellinger | 2025-05-14 | 260 | Documentation |
|
||||
| [#1604](https://github.com/actions/cache/pull/1604) | stuartleeks | 2025-05-08 | 266 | New feature |
|
||||
| [#1587](https://github.com/actions/cache/pull/1587) | Yury-Fridlyand | 2025-04-06 | 298 | Documentation |
|
||||
| [#1571](https://github.com/actions/cache/pull/1571) | helly25 | 2025-03-11 | 324 | New feature |
|
||||
| [#1567](https://github.com/actions/cache/pull/1567) | KtorZ | 2025-03-07 | 328 | Documentation |
|
||||
| [#1536](https://github.com/actions/cache/pull/1536) | KyFaSt | 2025-01-22 | 372 | Security fix |
|
||||
| [#1516](https://github.com/actions/cache/pull/1516) | vorburger | 2024-12-12 | 413 | Documentation |
|
||||
| [#1514](https://github.com/actions/cache/pull/1514) | lima-limon-inc | 2024-12-11 | 414 | Documentation |
|
||||
| [#1493](https://github.com/actions/cache/pull/1493) | EnricoMi | 2024-11-04 | 451 | New feature |
|
||||
| [#1472](https://github.com/actions/cache/pull/1472) | mustafacco7 | 2024-10-18 | 468 | Documentation |
|
||||
| [#1451](https://github.com/actions/cache/pull/1451) | karlhorky | 2024-08-13 | 534 | Documentation |
|
||||
| [#1439](https://github.com/actions/cache/pull/1439) | rusty-key | 2024-07-23 | 555 | Documentation |
|
||||
| [#1436](https://github.com/actions/cache/pull/1436) | llakala | 2024-07-19 | 559 | New feature |
|
||||
| [#1378](https://github.com/actions/cache/pull/1378) | Olegt0rr | 2024-04-16 | 653 | Other |
|
||||
| [#1374](https://github.com/actions/cache/pull/1374) | itchyny | 2024-04-14 | 655 | Other |
|
||||
| [#1337](https://github.com/actions/cache/pull/1337) | marco-cpd | 2024-02-23 | 706 | Bug fix |
|
||||
| [#1328](https://github.com/actions/cache/pull/1328) | vorburger | 2024-02-16 | 713 | Documentation |
|
||||
| [#1312](https://github.com/actions/cache/pull/1312) | Mogyuchi | 2024-01-28 | 732 | Documentation |
|
||||
| [#1308](https://github.com/actions/cache/pull/1308) | PrinsFrank | 2024-01-22 | 738 | New feature |
|
||||
| [#1290](https://github.com/actions/cache/pull/1290) | joseluisq | 2023-12-01 | 790 | Documentation |
|
||||
| [#1283](https://github.com/actions/cache/pull/1283) | IanButterworth | 2023-11-18 | 803 | Documentation |
|
||||
| [#1282](https://github.com/actions/cache/pull/1282) | jlanga | 2023-11-17 | 804 | New feature |
|
||||
| [#1252](https://github.com/actions/cache/pull/1252) | Magnus167 | 2023-10-01 | 851 | Documentation |
|
||||
| [#1248](https://github.com/actions/cache/pull/1248) | Fishrock123 | 2023-09-25 | 857 | Documentation |
|
||||
| [#1231](https://github.com/actions/cache/pull/1231) | kbdharun | 2023-09-05 | 877 | Other |
|
||||
| [#1222](https://github.com/actions/cache/pull/1222) | dsame | 2023-08-23 | 890 | Documentation |
|
||||
| [#1191](https://github.com/actions/cache/pull/1191) | Yakiyo | 2023-06-15 | 959 | Documentation |
|
||||
| [#1185](https://github.com/actions/cache/pull/1185) | jorendorff | 2023-06-12 | 962 | Documentation |
|
||||
| [#1184](https://github.com/actions/cache/pull/1184) | byrgulle12 | 2023-06-09 | 965 | Spam candidate |
|
||||
| [#1183](https://github.com/actions/cache/pull/1183) | pgrange | 2023-06-08 | 966 | Bug fix |
|
||||
| [#1167](https://github.com/actions/cache/pull/1167) | tommy-gilligan | 2023-05-04 | 1001 | Documentation |
|
||||
| [#1160](https://github.com/actions/cache/pull/1160) | rikhuijzer | 2023-04-24 | 1011 | Documentation |
|
||||
| [#1159](https://github.com/actions/cache/pull/1159) | rodrigoalcarazdelaosa | 2023-04-23 | 1012 | Documentation |
|
||||
| [#1096](https://github.com/actions/cache/pull/1096) | Lord-Kamina | 2023-01-31 | 1094 | New feature |
|
||||
| [#876](https://github.com/actions/cache/pull/876) | bchen1029 | 2022-07-26 | 1283 | Bug fix |
|
||||
| [#726](https://github.com/actions/cache/pull/726) | robinp | 2022-02-05 | 1454 | Documentation |
|
||||
| [#717](https://github.com/actions/cache/pull/717) | jsoref | 2022-01-23 | 1467 | New feature |
|
||||
| [#677](https://github.com/actions/cache/pull/677) | planetmarshall | 2021-11-14 | 1537 | Documentation |
|
||||
| [#673](https://github.com/actions/cache/pull/673) | TimoRoth | 2021-11-08 | 1543 | New feature |
|
||||
| [#557](https://github.com/actions/cache/pull/557) | melvyn-apryl | 2021-03-27 | 1769 | Documentation |
|
||||
| [#498](https://github.com/actions/cache/pull/498) | eyal0 | 2021-01-04 | 1851 | New feature |
|
||||
| [#402](https://github.com/actions/cache/pull/402) | vlsi | 2020-08-19 | 1989 | Documentation |
|
||||
| [#325](https://github.com/actions/cache/pull/325) | mzabaluev | 2020-05-24 | 2076 | Documentation |
|
||||
| [#268](https://github.com/actions/cache/pull/268) | FinalDes | 2020-04-21 | 2109 | Documentation |
|
||||
| [#234](https://github.com/actions/cache/pull/234) | evandrocoan | 2020-03-27 | 2134 | Documentation |
|
||||
|
||||
## Summary by Category
|
||||
|
||||
| Category | Count |
|
||||
|----------|-------|
|
||||
| Documentation | 31 |
|
||||
| New feature | 11 |
|
||||
| Bug fix | 3 |
|
||||
| Other | 4 |
|
||||
| Security fix | 1 |
|
||||
| Spam candidate | 1 |
|
||||
| **Total** | **51** |
|
||||
|
||||
## Category Definitions
|
||||
|
||||
- **New feature**: PRs that add new functionality or capabilities to the cache action
|
||||
- **Bug fix**: PRs that fix issues or incorrect behavior in the existing code
|
||||
- **Security fix**: PRs that address security concerns or add security-related documentation
|
||||
- **Documentation**: PRs that add/update README, examples, or other documentation
|
||||
- **Spam candidate**: PRs with unclear purpose, incomplete/garbled content, or no meaningful changes
|
||||
- **Other**: PRs that don't fit into the above categories (e.g., refactoring, dependency updates)
|
||||
|
||||
## Detailed Analysis Notes
|
||||
|
||||
### Documentation PRs (31)
|
||||
Most open PRs are documentation improvements, including:
|
||||
- New caching examples (pnpm, opam, Docker, ASDF, Bazel, Hugo, Dart, etc.)
|
||||
- Clarifications on existing behavior (path matching, cache-hit output, key rendering)
|
||||
- Updated links and references
|
||||
- README improvements
|
||||
|
||||
### New Feature PRs (11)
|
||||
Feature requests include:
|
||||
- Conditional save options (`save-on-success`, `save` input)
|
||||
- Force-overwrite capability for existing caches
|
||||
- New outputs (cachePath, cache-primary-key)
|
||||
- Compression level control
|
||||
- Cache refresh/update mechanisms
|
||||
|
||||
### Bug Fix PRs (3)
|
||||
- #1337: Adjusts storage warning message with incorrect limit
|
||||
- #1183: Fixes cabal store path for Ubuntu
|
||||
- #876: Fixes cache-hit value when cache not found
|
||||
|
||||
### Security Fix PRs (1)
|
||||
- #1536: Adds recommended minimum permissions to README (by GitHub staff member)
|
||||
|
||||
### Spam Candidate PRs (1)
|
||||
- #1184: Unclear PR with garbled Turkish text in title, renames file with no meaningful changes
|
||||
|
||||
### Other PRs (4)
|
||||
- #1700: This current WIP triage PR
|
||||
- #1378: Bumps action versions in examples
|
||||
- #1374: Code refactoring (avoids re-evaluation of key input)
|
||||
- #1231: Updates actions/checkout to v4 in workflows
|
||||
Reference in New Issue
Block a user